56.125.63.121
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- AWS Asia Pacific (Seoul) Region
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS16509
- Hostname(s)
- ec2-56-125-63-121.sa-east-1.compute.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇧🇷 Brazil
- City
- Sao Paulo, Sao Paulo
No reports in the last 60 days
56.125.63.121 has been reported 70 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
70 from
40 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇪🇸 Gem |
Unauthorized web scan.
|
Web App Attack | |
| 🇧🇪 sid3windr |
GET /.git/config (Tarpitted for , wasted 120B)
|
Web App Attack | |
| Anonymous |
Reported from Nginx log analysis 11. Log: 56.125.63.121 - - [02/Sep/2025:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "-" "-" "BR Brazil S\xC3\xA3o Paulo" "AS16509" "AMAZON-02"
|
Port Scan Brute-Force SSH | |
| Anonymous |
Unsolicited multiport scan
|
Port Scan | |
| Anonymous |
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1, \x16\x03\x01, GET / HTTP/1.1
|
Hacking Web App Attack | |
| Anonymous |
56.125.63.121 - - [02/Sep/2025:19:43:46 +0000] "GET /.git/config HTTP/1.1" 404 2715 "-" "l9explore/1.2.2"
...
|
Bad Web Bot Web App Attack | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇺🇸 masterguru |
Host header is a numeric IP address. Pattern match "^ (920350-164)
|
Hacking Bad Web Bot | |
| 🇺🇸 NXTwoThou |
l9tcpid/v1.1.0
|
Port Scan | |
| 🇭🇰 Anonymous |
2025-09-02 19:31:02 warning[3948799]: host ec2-56-125-63-121.sa-east-1.compute.amazonaws.com[56.125.63.121]: unauthorized https access attempted: tcp/443
|
Port Scan Brute-Force | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host | |
| 🇩🇪 Blexyel |
56.125.63.121 - - [02/Sep/2025:21:19:27 +0200] "GET /.git/config HTTP/1.1" 404 153 "-" "l9explore/1.2.2"
...
|
Brute-Force Web App Attack | |
| 🇫🇷 pm33 |
Probing for resource vulnerabilities HTTP(S)
|
Web App Attack | |
| 🇹🇷 pamircil |
🍯 WinnieThePooh Honeypot : GET request to '/' on (http/80)💀
|
Hacking Brute-Force SSH | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=3672 dstport=443
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown