13.141.27.25

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
37% Elevated
12 reports
7 reporters · latest 6 hours ago
ISP
TerraTransit AG
Usage Type
Fixed Line ISP
ASN
AS401560
Domain Name
terratransit.de
Country
🇺🇸 United States of America
City
Los Angeles, California
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
12 from 7 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 7 🇩🇪 Germany 1 🇫🇷 France 1
Most common categories Bad Web Bot 9 Hacking 5 Web App Attack 4 DDoS Attack 3 Exploited Host 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Port Scan
🇩🇪 Reinhard
Harvesting pictures or malicious BOT.
Bad Web Bot
🇫🇷 masterguru
Blocked image.php scraping with forums referer. String match "https://forums.fedoraforum.org/" at REQUEST_HEADERS:Referer. (780531-133)
Hacking
🇺🇸 SX Communications
HTTP application-layer DoS / botnet traffic from 13.141.27.25: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications
HTTP application-layer DoS / botnet traffic from 13.141.27.25: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications
Web vulnerability scanning / probing from 13.141.27.25: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 1 hits; paths: /~kayin/archive/Proxy%20Wingate%20Socks%20Tutorial.txt.
Port Scan Hacking Web App Attack
🇺🇸 SX Communications
HTTP application-layer DoS / botnet traffic from 13.141.27.25: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
DDoS Attack Bad Web Bot Exploited Host
🇺🇸 ipblock.com
IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner
Hacking Bad Web Bot Web App Attack
Anonymous
Search protection: facets on category: 6 values in one group (limit 5) / reCAPTCHA challenge timed out
Bad Web Bot
🇺🇸 ipblock.com
IPBlock protected site ID [4055-d][s=07]. Persistent 404, vulnerability scanner
Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com
IPBlock protected site ID [4055-d][s=07]. Persistent 404, vulnerability scanner
Hacking Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇺 185.59.246.6
🇭🇰 172.81.105.229
🇺🇸 162.216.149.156
🇺🇸 162.216.149.26
🇺🇸 216.25.89.69
🇳🇱 185.93.89.167
🇧🇷 179.124.214.38
🇿🇦 160.119.55.12
🇳🇱 109.160.32.132
🇨🇳 106.75.12.228
🇨🇦 85.217.149.59
🇳🇱 81.19.216.117
🇳🇱 80.82.65.141
🇳🇱 204.76.203.214
🇺🇸 195.184.76.106
🇨🇦 45.198.224.162
🇳🇱 45.148.10.157
🇸🇳 41.214.3.155
🇺🇸 40.119.26.227
🇧🇩 182.252.87.196
feedback