JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.126.38.107

13.126.38.107 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 16%: ?

16%

ISP	Amazon Data Services India
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-13-126-38-107.ap-south-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.126.38.107

Whois 13.126.38.107

IP Abuse Reports for 13.126.38.107:

This IP address has been reported a total of 17 times from 16 distinct sources. 13.126.38.107 was first reported on February 2nd 2021, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-04 22:00:37 (2 weeks ago)	Auto-ban: 228 malicious requests on 2026-06-03 (e.g., env/backup probes, brute-force, or error burst ... show more Auto-ban: 228 malicious requests on 2026-06-03 (e.g., env/backup probes, brute-force, or error bursts). show less	Web App Attack SSH Hacking
🇫🇷 masterguru	2026-06-03 04:34:20 (3 weeks ago)	Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ... show more Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-201) show less	Hacking
🇪🇸 pipeline.es	2026-06-03 04:23:32 (3 weeks ago)	Web scanning / probing for vulnerable paths \| URL: /.env1 \| Evidence: alfway.com 13.126.38.107 - - [ ... show more Web scanning / probing for vulnerable paths \| URL: /.env1 \| Evidence: alfway.com 13.126.38.107 - - [03/Jun/2026:06:23:22 +0200] \"GET /.env1 HTTP/1.1\" 404 20699 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=IN \| ASN: AMAZON-02 \| Country: IN show less	Port Scan Web App Attack
🇫🇷 masterguru	2026-06-03 03:59:19 (3 weeks ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇺🇸 tradenet	2021-02-03 01:15:09 (5 years ago)	2021-02-02T23:02:31.546157server2.ebullit.com sshd[38082]: Invalid user yj from 13.126.38.107 port 5 ... show more 2021-02-02T23:02:31.546157server2.ebullit.com sshd[38082]: Invalid user yj from 13.126.38.107 port 56384 2021-02-02T23:02:31.550818server2.ebullit.com sshd[38082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-13-126-38-107.ap-south-1.compute.amazonaws.com 2021-02-02T23:02:31.546157server2.ebullit.com sshd[38082]: Invalid user yj from 13.126.38.107 port 56384 2021-02-02T23:02:33.546983server2.ebullit.com sshd[38082]: Failed password for invalid user yj from 13.126.38.107 port 56384 ssh2 2021-02-03T00:15:08.791822server2.ebullit.com sshd[3013]: Invalid user ec from 13.126.38.107 port 51160 ... show less	Brute-Force SSH
🇵🇱 JesionZ	2021-02-02 18:34:12 (5 years ago)	Feb 3 00:34:08 vm0 sshd[8709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t ... show more Feb 3 00:34:08 vm0 sshd[8709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.126.38.107 Feb 3 00:34:10 vm0 sshd[8709]: Failed password for invalid user qv from 13.126.38.107 port 35738 ssh2 ... show less	Brute-Force SSH
🇨🇦 legitssl	2021-02-02 18:30:29 (5 years ago)	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "qv" at 2021-02-02T23:30:12Z	Brute-Force SSH
Anonymous	2021-02-02 18:18:08 (5 years ago)	SSH bruteforce	Brute-Force SSH
🇮🇹 Dario B.	2021-02-02 18:01:25 (5 years ago)	DATE:2021-02-03 00:01:25, IP:13.126.38.107, PORT:ssh SSH brute force auth (docker-dc)	Brute-Force SSH
🇨🇭 ZeroAttackVector	2021-02-02 14:12:40 (5 years ago)	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2021-02-02T19:08:39Z and 2021-02-0 ... show more Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2021-02-02T19:08:39Z and 2021-02-02T19:12:40Z show less	Brute-Force SSH
🇺🇸 nbwone	2021-02-02 14:11:00 (5 years ago)	2021-02-02T13:45:43.7586201495-001 sshd[32377]: Invalid user lu from 13.126.38.107 port 35728 2021-0 ... show more 2021-02-02T13:45:43.7586201495-001 sshd[32377]: Invalid user lu from 13.126.38.107 port 35728 2021-02-02T13:45:45.8637421495-001 sshd[32377]: Failed password for invalid user lu from 13.126.38.107 port 35728 ssh2 2021-02-02T13:47:56.5152041495-001 sshd[32448]: Invalid user admin from 13.126.38.107 port 39010 2021-02-02T13:47:56.5237921495-001 sshd[32448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-13-126-38-107.ap-south-1.compute.amazonaws.com 2021-02-02T13:47:56.5152041495-001 sshd[32448]: Invalid user admin from 13.126.38.107 port 39010 2021-02-02T13:47:58.5530341495-001 sshd[32448]: Failed password for invalid user admin from 13.126.38.107 port 39010 ssh2 ... show less	Brute-Force SSH
🇩🇪 ipHunter	2021-02-02 14:08:29 (5 years ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 pixelmemory.us	2021-02-02 12:52:20 (5 years ago)	Feb 2 09:45:59 pixelmemory sshd[109925]: Failed password for invalid user ubuntu from 13.126.38.107 ... show more Feb 2 09:45:59 pixelmemory sshd[109925]: Failed password for invalid user ubuntu from 13.126.38.107 port 54752 ssh2 Feb 2 09:49:16 pixelmemory sshd[116837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.126.38.107 user=root Feb 2 09:49:18 pixelmemory sshd[116837]: Failed password for root from 13.126.38.107 port 44984 ssh2 Feb 2 09:52:17 pixelmemory sshd[126778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.126.38.107 user=root Feb 2 09:52:19 pixelmemory sshd[126778]: Failed password for root from 13.126.38.107 port 35200 ssh2 ... show less	Brute-Force SSH
🇲🇩 iHost	2021-02-02 12:49:55 (5 years ago)	(sshd) Failed SSH login from 13.126.38.107 (IN/India/-): 5 in the last 3600 secs; Ports: 22; Directi ... show more (sshd) Failed SSH login from 13.126.38.107 (IN/India/-): 5 in the last 3600 secs; Ports: 22; Direction: in; Trigger: LF_SSHD; Logs: Feb 2 19:35:28 web1 sshd[3904734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.126.38.107 user=root Feb 2 19:35:30 web1 sshd[3904734]: Failed password for root from 13.126.38.107 port 48006 ssh2 Feb 2 19:46:37 web1 sshd[3928353]: Invalid user ubuntu from 13.126.38.107 port 46022 Feb 2 19:46:39 web1 sshd[3928353]: Failed password for invalid user ubuntu from 13.126.38.107 port 46022 ssh2 Feb 2 19:49:53 web1 sshd[3935552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.126.38.107 user=root show less	Port Scan
🇩🇪 www.blocklist.de	2021-02-02 12:41:29 (5 years ago)	Lines containing failures of 13.126.38.107 Feb 2 18:36:31 mellenthin sshd[13281]: User r.r from 13. ... show more Lines containing failures of 13.126.38.107 Feb 2 18:36:31 mellenthin sshd[13281]: User r.r from 13.126.38.107 not allowed because not listed in AllowUsers Feb 2 18:36:31 mellenthin sshd[13281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.126.38.107 user=r.r Feb 2 18:36:34 mellenthin sshd[13281]: Failed password for invalid user r.r from 13.126.38.107 port 59150 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=13.126.38.107 show less	FTP Brute-Force Hacking

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.120.176.6

🇺🇸 216.25.89.155

🇺🇸 186.179.39.233

🇳🇱 185.226.197.32

🇺🇸 104.168.4.239

🇺🇸 96.78.175.36

🇫🇷 91.196.152.177

🇮🇳 45.126.168.146

🇷🇺 188.242.90.83

🇺🇸 186.179.39.177

🇺🇸 186.179.39.145

🇺🇸 186.179.39.131

🇧🇷 177.222.169.207

🇺🇸 162.216.150.103

🇸🇬 128.242.234.118

🇵🇰 124.29.226.82

🇸🇾 91.144.21.210

🇩🇪 8.209.107.224

🇫🇷 2001:41d0:33d:9200::407

🇷🇴 193.32.162.71