AbuseIPDB » 13.125.130.1
13.125.130.1
This IP was reported 6 times. Confidence of
Abuse
is 44% : ?
ISP
AWS Asia Pacific (Seoul) Region
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-13-125-130-1.ap-northeast-2.compute.amazonaws.com
Domain Name
amazon.com
Country
🇰🇷
Korea (the Republic of)
City
Incheon, Incheon
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 13.125.130.1 :
This IP address has been reported a total of
6
times from
6 distinct
sources.
13.125.130.1 was first reported on
July 16th 2026 , and the most recent report was
7 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇮
JimArchon72
2026-07-17 01:15:01
(7 hours ago)
2026/07/17 01:11:14 "GET /wp-admin/phpinfo.php HTTP/1.1"
Web App Attack
🇩🇪
AetherFox
2026-07-17 00:58:59
(7 hours ago)
AetherFox VoidGuard detected: [Fri Jul 17 00:58:58.589388 2026] [authz_core:error] [pid 1375829:tid ...
show more
AetherFox VoidGuard detected: [Fri Jul 17 00:58:58.589388 2026] [authz_core:error] [pid 1375829:tid 1375881] [client 13.125.130.1:49094] AH01630: client denied by server configuration: proxy:https://hq.draconigen.net.dedivirt4209.your-server.de/
[Fri Jul 17 00:58:58.589578 2026] [authz_core:error] [pid 1375829:tid 1375881] [client 13.125.130.1:49094] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
[Fri Jul 17 00:58:58.886515 2026] [authz_core:error] [pid 1375829:tid 1375842] [client 13.125.130.1:49094] AH01630: client denied by server configuration: proxy:https://hq.draconigen.net.dedivirt4209.your-server.de/
[Fri Jul 17 00:58:58.886746 2026] [authz_core:error] [pid 1375829:tid 1375842] [client 13.125.130.1:49094] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
[Fri Jul 17 00:58:59.185493 2026] [authz_core:error] [pid 1375829:tid 1375858] [client 13.125.130.1:49094] AH01630: client denied by server
...
show less
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-07-16 19:55:03
(12 hours ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
bigscoots.com
2026-07-16 17:16:20
(15 hours ago)
(PERMBLOCK) 13.125.130.1 (KR/South Korea/ec2-13-125-130-1.ap-northeast-2.compute.amazonaws.com) has ...
show more
(PERMBLOCK) 13.125.130.1 (KR/South Korea/ec2-13-125-130-1.ap-northeast-2.compute.amazonaws.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Brute-Force
SSH
🇩🇪
Blexyel
2026-07-16 16:42:14
(15 hours ago)
13.125.130.1 - - [16/Jul/2026:18:42:14 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 ( ...
show more
13.125.130.1 - - [16/Jul/2026:18:42:14 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇪🇸
alferez
2026-07-16 13:56:18
(18 hours ago)
Searching .(env|sql|zip|tar|rar) files
Hacking
Exploited Host
Web App Attack
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: