AbuseIPDB » 13.127.108.66

13.127.108.66 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 42%: ?

42%

ISP	Amazon Data Services India
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-13-127-108-66.ap-south-1.compute.amazonaws.com
Domain Name	amazon.com
Country	India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 13.127.108.66

Whois 13.127.108.66

IP Abuse Reports for 13.127.108.66:

This IP address has been reported a total of 36 times from 28 distinct sources. 13.127.108.66 was first reported on December 2nd 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
FeG Deutschland	2024-12-05 11:13:16 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities - 13	Exploited Host Web App Attack
weblite	2024-12-05 09:24:12 (1 month ago)	WP_EXPLOIT_PROBE WP_MALWARE_PROBE	Hacking Web App Attack
uhlhosting	2024-12-05 09:04:34 (1 month ago)	riesen-printmedia.ch 13.127.108.66 - - [05/Dec/2024:10:04:08.871094 +0100] "GET /.well-known/go.php ... show moreriesen-printmedia.ch 13.127.108.66 - - [05/Dec/2024:10:04:08.871094 +0100] "GET /.well-known/go.php HTTP/1.1" 403 199 "-" "-" Z1FsiNRHpyotIpHHoKqIjwAAAEo "-" /apache/20241205/20241205-1004/20241205-100408-Z1FsiNRHpyotIpHHoKqIjwAAAEo 0 1276 md5:98fd0530e2ca5d4e3b26070704cd4296 riesen-printmedia.ch 13.127.108.66 - - [05/Dec/2024:10:04:11.607850 +0100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 403 199 "-" "-" Z1Fsi9RHpyotIpHHoKqIkQAAAFM "-" /apache/20241205/20241205-1004/20241205-100411-Z1Fsi9RHpyotIpHHoKqIkQAAAFM 0 1316 md5:a45ff843b4d644ec1a278cf1dbc34785 riesen-printmedia.ch 13.127.108.66 - - [05/Dec/2024:10:04:13.210824 +0100] "GET /wp-includes/rk2.php HTTP/1.1" 403 199 "-" "-" Z1FsjdRHpyotIpHHoKqIkwAAAE4 "-" /apache/20241205/20241205-1004/20241205-100413-Z1FsjdRHpyotIpHHoKqIkwAAAE4 0 1288 md5:93f7c312ef25978bfb153886723f06b3 riesen-printmedia.ch 13.127.108.66 - - [05/Dec/2024:10:04:30.513108 +0100] "GET /wp-includes/images/include.php HTTP/1.1" 403 199 "-" "-" Z1FsnntN77v9 ... show less	DDoS Attack Brute-Force
MSZ	2024-12-05 07:32:02 (1 month ago)	Blocked by Fail2Ban (plesk-apache)	Hacking Brute-Force Web App Attack
psauxit	2024-12-05 06:21:42 (1 month ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ... show moreFail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping show less	Hacking Web App Attack
octageeks.com	2024-12-05 05:07:57 (1 month ago)	Wordpress malicious attack:[octablocked]	Web App Attack
Anonymous	2024-12-05 01:01:57 (1 month ago)	wordpress-trap	Web App Attack
paulshipley.com.au	2024-12-04 19:33:20 (1 month ago)	levellapromotions.com.au:443 13.127.108.66 - - [05/Dec/2024:06:32:33 +1100] "GET /go.php HTTP/1.1" 4 ... show morelevellapromotions.com.au:443 13.127.108.66 - - [05/Dec/2024:06:32:33 +1100] "GET /go.php HTTP/1.1" 404 145104 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" levellapromotions.com.au:443 13.127.108.66 - - [05/Dec/2024:06:32:41 +1100] "GET /files/home.php HTTP/1.1" 404 145113 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" levellapromotions.com.au:443 13.127.108.66 - - [05/Dec/2024:06:32:46 +1100] "GET /wp-22.php HTTP/1.1" 404 145107 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" levellapromotions.com.au:443 13.127.108.66 - - [05/Dec/2024:06:32:52 +1100] "GET /file/function.php HTTP/1.1" 404 145111 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; ... show less	Web App Attack
paulshipley.com.au	2024-12-04 15:58:22 (1 month ago)	rjryanpartners.com.au:443 13.127.108.66 - - [05/Dec/2024:02:57:50 +1100] "GET /go.php HTTP/1.1" 404 ... show morerjryanpartners.com.au:443 13.127.108.66 - - [05/Dec/2024:02:57:50 +1100] "GET /go.php HTTP/1.1" 404 18053 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" rjryanpartners.com.au:443 13.127.108.66 - - [05/Dec/2024:02:57:53 +1100] "GET /files/home.php HTTP/1.1" 404 18063 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" rjryanpartners.com.au:443 13.127.108.66 - - [05/Dec/2024:02:57:58 +1100] "GET /wp-22.php HTTP/1.1" 404 18056 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" rjryanpartners.com.au:443 13.127.108.66 - - [05/Dec/2024:02:58:02 +1100] "GET /file/function.php HTTP/1.1" 404 18065 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/ ... show less	Web App Attack
Burayot	2024-12-04 14:03:00 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 13.127.108.66 (IN/India/ec2-13-127- ... show moreLF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 13.127.108.66 (IN/India/ec2-13-127-108-66.ap-south-1.compute.amazonaws.com): 1 in the last 3600 secs show less	Web App Attack
Cloudkul Cloudkul	2024-12-04 12:15:07 (1 month ago)	Multiple unauthorized attempts to access web resources	Brute-Force Web App Attack
conseilgouz	2024-12-04 12:02:58 (1 month ago)	sce-7 : Trying access unauthorized files/dir=>/wp-admin/maint/go.php	Hacking
paulshipley.com.au	2024-12-04 06:02:16 (1 month ago)	shotbysuzanne.com.au:443 13.127.108.66 - - [04/Dec/2024:17:01:29 +1100] "GET /go.php HTTP/1.1" 404 5 ... show moreshotbysuzanne.com.au:443 13.127.108.66 - - [04/Dec/2024:17:01:29 +1100] "GET /go.php HTTP/1.1" 404 51385 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" shotbysuzanne.com.au:443 13.127.108.66 - - [04/Dec/2024:17:01:35 +1100] "GET /files/home.php HTTP/1.1" 404 51394 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" shotbysuzanne.com.au:443 13.127.108.66 - - [04/Dec/2024:17:01:39 +1100] "GET /wp-22.php HTTP/1.1" 404 51388 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" shotbysuzanne.com.au:443 13.127.108.66 - - [04/Dec/2024:17:01:43 +1100] "GET /file/function.php HTTP/1.1" 404 51393 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537. ... show less	Web App Attack
octageeks.com	2024-12-04 05:06:38 (1 month ago)	Wordpress malicious attack:[octa404]	Web App Attack
FeG Deutschland	2024-12-03 18:54:02 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities - 13	Exploited Host Web App Attack