JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.126.209.64

13.126.209.64 was found in our database!

This IP was reported 117 times. Confidence of Abuse is 1%: ?

ISP	Amazon Data Services India
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-13-126-209-64.ap-south-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.126.209.64

Whois 13.126.209.64

IP Abuse Reports for 13.126.209.64:

This IP address has been reported a total of 117 times from 73 distinct sources. 13.126.209.64 was first reported on May 27th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Fasetech	2026-06-23 03:50:44 (3 weeks ago)	SecLedge detected suspicious activity. Score: 610.08. Sensor: T-Pot.	Brute-Force
🇫🇷 Fasetech	2026-06-10 07:48:08 (1 month ago)	SecLedge detected suspicious activity. Score: 610.08. Sensor: T-Pot.	Brute-Force
🇫🇷 Fasetech	2026-05-21 06:11:24 (1 month ago)	SecLedge detected suspicious activity. Score: 610.08. Sensor: T-Pot.	Brute-Force
🇫🇷 Fasetech	2026-05-17 08:44:24 (2 months ago)	SecLedge detected suspicious activity. Score: 610.08. Sensor: T-Pot.	Brute-Force
🇮🇱 spd.co.il	2026-05-04 06:01:27 (2 months ago)	Web application attack detected	Hacking Web App Attack
🇺🇸 lime	2026-05-02 09:12:47 (2 months ago)	[Sat May 02 09:12:47.544337 2026] [php7:error] [pid 688933] [client 13.126.209.64:60462] script '/va ... show more [Sat May 02 09:12:47.544337 2026] [php7:error] [pid 688933] [client 13.126.209.64:60462] script '/var/www/html/phpinfo.php' not found or unable to stat [Sat May 02 09:12:47.586775 2026] [php7:error] [pid 688932] [client 13.126.209.64:59412] script '/var/www/html/server_info.php' not found or unable to stat show less	Hacking Web App Attack
🇷🇺 sms.ru	2026-05-02 09:04:12 (2 months ago)	/vendor/.env	Web App Attack
🇧🇪 cmbplf	2026-05-02 09:03:25 (2 months ago)	1153 limiting connections by zone (3w5d16h)	DDoS Attack
🇨🇦 1gz	2026-05-02 08:59:42 (2 months ago)	Triggered Cloudflare WAF (firewallManaged) from IN. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from IN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-config.php.old UA: Go-http-client/1.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-05-02 08:56:24 (2 months ago)	Triggered Cloudflare WAF (firewallManaged) from IN. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from IN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-config.php.bak UA: Go-http-client/1.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇧🇪 cmbplf	2026-05-02 07:01:57 (2 months ago)	567 limiting connections by zone (22h10m59s)	DDoS Attack
🇳🇱 Site.eu	2026-05-02 05:26:30 (2 months ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 todix	2026-05-02 04:29:31 (2 months ago)	WebAttack or semilar from 13.126.209.64	Web App Attack
🇩🇪 updown.io	2026-05-02 04:28:10 (2 months ago)	{"level":"info","ts":1777696089.0948448,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1777696089.0948448,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"13.126.209.64","remote_port":"41082","client_ip":"13.126.209.64","proto":"HTTP/1.1","method":"GET","host":"status.runestone.academy","uri":"/ansible/aws/inventory/ec2.ini","headers":{"Accept-Encoding":["gzip"],"Connection":["close"],"User-Agent":["Go-http-client/1.1"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"status.runestone.academy"}},"bytes_read":0,"user_id":"","duration":0.000435728,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1777696089.0965338,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"13.126.209.64","remote_port":"40956","client_ip":"13.126.209.64","proto":"HTTP/1.1","method":"GET","host":"status.runestone.academy","uri":"/index.php?=-phpinfo()","headers":{"User-Agent":["Go-http-client/1.1"], ... show less	DDoS Attack Web App Attack
🇧🇪 cmbplf	2026-05-02 04:21:35 (2 months ago)	572 limiting connections by zone (2h23m59s)	DDoS Attack

Showing 1 to 15 of 117 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.74

🇺🇸 185.106.96.132

🇺🇸 162.216.150.35

🇮🇳 110.44.1.240

🇷🇴 92.118.39.77

🇳🇱 89.248.172.9

🇺🇸 85.254.115.109

🇮🇳 52.172.177.191

🇨🇳 14.103.127.204

🇵🇱 194.180.48.31

🇧🇷 187.126.105.42

🇲🇽 186.96.158.180

🇨🇳 171.104.81.215

🇺🇸 170.187.163.117

🇮🇩 163.227.52.50

🇺🇸 162.216.149.189

🇫🇮 147.185.133.180

🇫🇮 147.185.133.15

🇦🇺 123.209.101.43

🇯🇵 104.165.161.89