JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.127.134.146

13.127.134.146 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 58%: ?

58%

ISP	Amazon Data Services India
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-13-127-134-146.ap-south-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.127.134.146

Whois 13.127.134.146

IP Abuse Reports for 13.127.134.146:

This IP address has been reported a total of 16 times from 9 distinct sources. 13.127.134.146 was first reported on September 3rd 2026, and the most recent report was 52 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 robotstxt	2026-09-19 20:52:52 (52 minutes ago)	13.127.134.146 - - [19/Sep/2026:20:51:47 +0000] "GET /?author=2 HTTP/1.1" 403 1165 "-" "Mozilla/5.0 ... show more 13.127.134.146 - - [19/Sep/2026:20:51:47 +0000] "GET /?author=2 HTTP/1.1" 403 1165 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0" "-" edge="13.127.134.146" 13.127.134.146 - - [19/Sep/2026:20:51:52 +0000] "GET /?author=3 HTTP/1.1" 403 1166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" "-" edge="13.127.134.146" 13.127.134.146 - - [19/Sep/2026:20:51:56 +0000] "GET /?author=4 HTTP/1.1" 403 1166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "-" edge="13.127.134.146" 13.127.134.146 - - [19/Sep/2026:20:52:00 +0000] "GET /?author=5 HTTP/1.1" 403 1166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:54.0) Gecko/20100101 Firefox/54.0" "-" edge="13.127.134.146" 13.127.134.146 - - [19/Sep/2026:20:52:05 +0000] "GET /?author=6 HTTP/1.1" 403 1166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:85.0) Gecko/20100101 Firefox/85.0" "-" edge="13.127.134.146" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-19 14:25:22 (7 hours ago)	(mod_security) mod_security (id:225170) triggered by 13.127.134.146 (ec2-13-127-134-146.ap-south-1.c ... show more (mod_security) mod_security (id:225170) triggered by 13.127.134.146 (ec2-13-127-134-146.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 10:25:19.568454 2026] [security2:error] [pid 8373:tid 8373] [client 13.127.134.146:33172] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.souldata.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.souldata.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq6bT41-ikfrzunkoqg2sQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-19 13:20:58 (8 hours ago)	(mod_security) mod_security (id:225170) triggered by 13.127.134.146 (ec2-13-127-134-146.ap-south-1.c ... show more (mod_security) mod_security (id:225170) triggered by 13.127.134.146 (ec2-13-127-134-146.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 09:20:54.840173 2026] [security2:error] [pid 7762:tid 7762] [client 13.127.134.146:52032] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|brbvip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "brbvip.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq6MNqW1av1fRt6qmhPfZQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-19 10:16:09 (11 hours ago)	(mod_security) mod_security (id:225170) triggered by 13.127.134.146 (ec2-13-127-134-146.ap-south-1.c ... show more (mod_security) mod_security (id:225170) triggered by 13.127.134.146 (ec2-13-127-134-146.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 06:16:04.434865 2026] [security2:error] [pid 9650:tid 9650] [client 13.127.134.146:42080] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|coyotebytes.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "coyotebytes.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aq5g5GdePv7y5MTd5PJqnwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-18 09:32:36 (1 day ago)	(wordpress-user-enum) Failed wordpress-user-enum trigger from 13.127.134.146 (IN/India/ec2-13-127-13 ... show more (wordpress-user-enum) Failed wordpress-user-enum trigger from 13.127.134.146 (IN/India/ec2-13-127-134-146.ap-south-1.compute.amazonaws.com) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-09-18 02:12:22 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 13.127.134.146 (ec2-13-127-134-146.ap-south-1.c ... show more (mod_security) mod_security (id:225170) triggered by 13.127.134.146 (ec2-13-127-134-146.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 22:12:16.080723 2026] [security2:error] [pid 17493:tid 17493] [client 13.127.134.146:40246] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.dixiegeek.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.dixiegeek.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqyeAPKllsWVhvVh2HJngwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-18 00:25:47 (1 day ago)	WordPress: User enumeration. Pattern match "(author\\\\= (88030-193)	Hacking
🇳🇱 maxxsense	2026-09-17 23:09:10 (1 day ago)	(wordpress-user-enum) Failed wordpress-user-enum trigger from 13.127.134.146 (IN/India/ec2-13-127-13 ... show more (wordpress-user-enum) Failed wordpress-user-enum trigger from 13.127.134.146 (IN/India/ec2-13-127-134-146.ap-south-1.compute.amazonaws.com) show less	Brute-Force
🇩🇪 FeG Deutschland	2026-09-17 22:52:53 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇫🇷 masterguru	2026-09-17 12:44:01 (2 days ago)	WordPress: User enumeration. Pattern match "(author\\\\= (88030-197)	Hacking
Anonymous	2026-09-17 08:45:27 (2 days ago)	Web application attack detected.	Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 06:30:33 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 13.127.134.146 (ec2-13-127-134-146.ap-south-1.c ... show more (mod_security) mod_security (id:225170) triggered by 13.127.134.146 (ec2-13-127-134-146.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 02:30:28.821000 2026] [security2:error] [pid 26909:tid 26909] [client 13.127.134.146:57798] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|microkerneltechnologies.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "microkerneltechnologies.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aquJBF1YSBetcwwEQ-e2PgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-17 03:30:57 (2 days ago)	WordPress: User enumeration. Pattern match "(author\\\\= (88030-201)	Hacking
🇳🇱 maxxsense	2026-09-16 11:32:58 (3 days ago)	(wordpress-user-enum) Failed wordpress-user-enum trigger from 13.127.134.146 (IN/India/ec2-13-127-13 ... show more (wordpress-user-enum) Failed wordpress-user-enum trigger from 13.127.134.146 (IN/India/ec2-13-127-134-146.ap-south-1.compute.amazonaws.com) show less	Brute-Force
🇩🇪 LRob	2026-09-15 11:29:49 (4 days ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp-json/wp/v2/users \| 2026-09-15 11:29 UTC show less	Hacking Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.142.240.205

🇨🇭 217.60.103.56

🇨🇳 182.126.86.37

🇺🇸 174.129.58.61

🇳🇱 160.119.71.32

🇮🇳 113.193.128.226

🇻🇳 103.131.85.170

🇮🇩 103.131.61.136

🇺🇸 98.149.183.41

🇺🇦 77.75.145.77

🇨🇦 51.79.86.230

🇸🇬 47.128.113.140

🇵🇰 39.34.187.188

🇺🇸 216.146.3.9

🇺🇸 216.25.89.114

🇹🇼 210.208.111.234

🇲🇽 187.155.46.102

🇳🇱 185.242.226.8

🇺🇸 181.215.65.24

🇹🇷 176.240.14.170