JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 56.124.69.123

56.124.69.123 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 62%: ?

62%

ISP	Amazon Data Services Brazil
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-56-124-69-123.sa-east-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 56.124.69.123

Whois 56.124.69.123

IP Abuse Reports for 56.124.69.123:

This IP address has been reported a total of 13 times from 10 distinct sources. 56.124.69.123 was first reported on July 15th 2026, and the most recent report was 50 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-16 21:59:51 (50 minutes ago)	Auto-ban: >3000 req/min op 2026-07-16	Web App Attack SSH Hacking
🇧🇬 HighWay	2026-07-16 20:55:22 (1 hour ago)	56.124.69.123 - - [16/Jul/2026:20:55:19 +0000] "GET /.git/config HTTP/1.1" 404 11346 "-" "Mozilla/5. ... show more 56.124.69.123 - - [16/Jul/2026:20:55:19 +0000] "GET /.git/config HTTP/1.1" 404 11346 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.69.123 - - [16/Jul/2026:20:55:19 +0000] "GET /.env HTTP/1.1" 404 6250 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.69.123 - - [16/Jul/2026:20:55:20 +0000] "GET /.env.local HTTP/1.1" 404 6250 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Port Scan Bad Web Bot Web App Attack
🇺🇸 nyt	2026-07-16 19:59:14 (2 hours ago)	Sensitive File Probe	Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 14:47:11 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 56.124.69.123 (ec2-56-124-69-123.sa-east-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 56.124.69.123 (ec2-56-124-69-123.sa-east-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 10:47:06.732262 2026] [security2:error] [pid 29902:tid 29902] [client 56.124.69.123:52386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "penninesolutions.com"] [uri "/.git/config"] [unique_id "alju6hfx0A4XUcRhHIp11QAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 14:11:11 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 56.124.69.123 (ec2-56-124-69-123.sa-east-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 56.124.69.123 (ec2-56-124-69-123.sa-east-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 10:11:07.258901 2026] [security2:error] [pid 13177:tid 13177] [client 56.124.69.123:55032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "penjoki.us"] [uri "/.git/config"] [unique_id "aljmewyluP6IPoeCakFZ_gAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-16 14:03:14 (8 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: BR, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: BR, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇩🇪 Blexyel	2026-07-16 13:02:01 (9 hours ago)	56.124.69.123 - - [16/Jul/2026:15:02:00 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 ... show more 56.124.69.123 - - [16/Jul/2026:15:02:00 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇫🇮 indev.fi	2026-07-16 11:45:07 (11 hours ago)	pendoliino.peltopiri.com 56.124.69.123 - - [16/Jul/2026:14:44:08 +0300] "GET /.git/config HTTP/1.1" ... show more pendoliino.peltopiri.com 56.124.69.123 - - [16/Jul/2026:14:44:08 +0300] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" pendoliino.peltopiri.com 56.124.69.123 - - [16/Jul/2026:14:44:10 +0300] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" pendoliino.peltopiri.com 56.124.69.123 - - [16/Jul/2026:14:44:11 +0300] "GET /.env.local HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Port Scan Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 10:44:26 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 56.124.69.123 (ec2-56-124-69-123.sa-east-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 56.124.69.123 (ec2-56-124-69-123.sa-east-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 06:44:19.531636 2026] [security2:error] [pid 28832:tid 28929] [client 56.124.69.123:53934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "penboy7.com"] [uri "/.git/config"] [unique_id "ali2A_i9SPNS36q_x7m82AAAAU8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 04:24:07 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 56.124.69.123 (ec2-56-124-69-123.sa-east-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 56.124.69.123 (ec2-56-124-69-123.sa-east-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 00:24:02.587014 2026] [security2:error] [pid 22470:tid 22532] [client 56.124.69.123:37432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peimbert.com"] [uri "/.git/config"] [unique_id "alhc4mjuM2GpiSutOTkc-AAAAYU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-16 03:24:23 (19 hours ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2026-07-16 03:06:26 (19 hours ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (123/60 min)'; Requests=123	Port Scan
🇫🇷 dynamix	2026-07-15 10:49:04 (1 day ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 210.179.8.206

🇺🇸 172.110.223.233

🇰🇷 150.109.230.210

🇹🇯 62.89.208.201

🇺🇸 172.191.239.155

🇨🇭 157.143.3.35

🇺🇸 107.167.34.125

🇷🇴 80.94.92.234

🇧🇷 45.232.42.135

🇸🇬 2a09:bac5:55fa:25d7::3c5:1c

🇺🇸 172.172.186.3

🇮🇳 128.185.33.241

🇸🇬 114.119.149.218

🇮🇩 103.97.101.25

🇱🇺 64.89.161.160

🇷🇺 5.142.184.151

🇮🇳 210.212.136.3

🇪🇹 196.188.97.120

🇳🇱 195.178.110.223

🇲🇾 175.145.183.135