JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.126.236.84

13.126.236.84 was found in our database!

This IP was reported 103 times. Confidence of Abuse is 0%: ?

ISP	Amazon Data Services India
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-13-126-236-84.ap-south-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.126.236.84

Whois 13.126.236.84

IP Abuse Reports for 13.126.236.84:

This IP address has been reported a total of 103 times from 55 distinct sources. 13.126.236.84 was first reported on January 25th 2022, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2025-11-30 23:03:12 (8 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-11-29. show less	Hacking Web App Attack SSH
🇳🇱 homeshowdomain.nl	2025-11-29 23:05:06 (8 months ago)	Auto-ban: >3000 req/min op 2025-11-29	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-29 22:56:19 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 13.126.236.84 (ec2-13-126-236-84.ap-south-1.com ... show more (mod_security) mod_security (id:210492) triggered by 13.126.236.84 (ec2-13-126-236-84.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 29 17:56:14.846933 2025] [security2:error] [pid 16276:tid 16276] [client 13.126.236.84:52620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bowerwood.com"] [uri "/.git/config"] [unique_id "aSt6DockL3zA6i8rJiRKwwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2025-11-29 18:35:10 (8 months ago)	Multiple WAF Violations	Web App Attack
🇩🇪 kjaerulff	2025-11-29 17:56:04 (8 months ago)	Probing for PHP files (config.php)	Web App Attack
🇺🇸 snappic	2025-11-29 17:08:07 (8 months ago)	Scraping user agent [GET /env] [python-httpx/0.28.1]	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-29 15:01:29 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 13.126.236.84 (ec2-13-126-236-84.ap-south-1.com ... show more (mod_security) mod_security (id:210492) triggered by 13.126.236.84 (ec2-13-126-236-84.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 29 10:01:23.840713 2025] [security2:error] [pid 2884593:tid 2884593] [client 13.126.236.84:38940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bookonline.lakewoodranchhairsalon.com"] [uri "/.git/config"] [unique_id "aSsKwx2nAEn8hx_EsmIMxAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2025-11-29 14:53:32 (8 months ago)	13.126.236.84 - - [29/Nov/2025:16:53:17 +0200] "GET /.env HTTP/1.1" 404 2886 "-" "python-httpx/0.28. ... show more 13.126.236.84 - - [29/Nov/2025:16:53:17 +0200] "GET /.env HTTP/1.1" 404 2886 "-" "python-httpx/0.28.1" 13.126.236.84 - - [29/Nov/2025:16:53:32 +0200] "GET /wp-config.php HTTP/1.1" 404 2884 "-" "python-httpx/0.28.1" ... show less	Web App Attack
Anonymous	2025-11-29 13:14:33 (8 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 mnsf	2025-11-29 13:06:35 (8 months ago)	Too many Status 40X (12)	Brute-Force Web App Attack
🇨🇭 Origon	2025-11-29 12:31:05 (8 months ago)	http-sensitive-files - IP: 13.126.236.84 - time="2025-11-29T13:31:05+01:00" level=info msg="(555f66 ... show more http-sensitive-files - IP: 13.126.236.84 - time="2025-11-29T13:31:05+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 13.126.236.84 (IN/16509) : 4h ban on Ip 13.126.236.84" show less	Web App Attack
🇺🇸 Gerald	2022-01-29 06:49:21 (4 years ago)	Jan 29 11:47:56 ip-172-31-61-156 sshd[4950]: pam_unix(sshd:auth): authentication failure; logname= u ... show more Jan 29 11:47:56 ip-172-31-61-156 sshd[4950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.126.236.84 Jan 29 11:47:56 ip-172-31-61-156 sshd[4950]: Invalid user admin from 13.126.236.84 Jan 29 11:47:58 ip-172-31-61-156 sshd[4950]: Failed password for invalid user admin from 13.126.236.84 port 34886 ssh2 Jan 29 11:49:18 ip-172-31-61-156 sshd[5073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.126.236.84 user=statd Jan 29 11:49:20 ip-172-31-61-156 sshd[5073]: Failed password for statd from 13.126.236.84 port 48136 ssh2 ... show less	Brute-Force SSH
🇺🇸 amit177	2022-01-29 05:41:06 (4 years ago)		Brute-Force SSH
🇺🇸 www.northsoundtech.com	2022-01-29 00:18:34 (4 years ago)	2022-01-28T21:12:16.610577ds01.nst.local sshd[13746]: pam_unix(sshd:auth): authentication failure; l ... show more 2022-01-28T21:12:16.610577ds01.nst.local sshd[13746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-13-126-236-84.ap-south-1.compute.amazonaws.com user=root 2022-01-28T21:12:18.382902ds01.nst.local sshd[13746]: Failed password for root from 13.126.236.84 port 33340 ssh2 2022-01-28T21:13:33.350299ds01.nst.local sshd[13773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-13-126-236-84.ap-south-1.compute.amazonaws.com user=root 2022-01-28T21:13:35.358674ds01.nst.local sshd[13773]: Failed password for root from 13.126.236.84 port 46554 ssh2 2022-01-28T21:14:46.439241ds01.nst.local sshd[13806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-13-126-236-84.ap-south-1.compute.amazonaws.com user=root 2022-01-28T21:14:48.804057ds01.nst.local sshd[13806]: Failed password for root from 13.126.236.84 port 59694 ssh2 2022-01-28T21:16:00.251636ds01.nst.local sshd[ ... show less	Brute-Force SSH
🇨🇭 ZeroAttackVector	2022-01-28 23:09:52 (4 years ago)	zrh: 3 unauthorised SSH/Telnet login attempts between 2022-01-29T04:03:04Z and 2022-01-29T04:09:52Z	Brute-Force SSH

Showing 1 to 15 of 103 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 194.12.80.36

🇬🇧 87.106.63.76

🇺🇸 2400:cb00:988:1000:b7fc:b452:460f:98f6

🇧🇷 205.210.31.202

🇹🇼 111.70.29.158

🇸🇬 85.203.21.15

🇸🇦 79.72.3.119

🇩🇪 66.93.34.238

🇰🇷 43.203.186.102

🇸🇪 13.48.195.249

🇺🇸 172.217.96.90

🇱🇻 84.15.219.150

🇮🇶 65.20.165.151

🇯🇵 43.165.185.177

🇩🇪 193.124.20.247

🇮🇳 182.18.161.165

🇰🇷 121.142.87.218

🇨🇳 116.147.114.39

🇮🇳 103.165.71.252

🇱🇹 77.90.185.20