JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.201.120.32

13.201.120.32 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 0%: ?

ISP	Amazon Data Services India
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-13-201-120-32.ap-south-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.201.120.32

Whois 13.201.120.32

IP Abuse Reports for 13.201.120.32:

This IP address has been reported a total of 24 times from 16 distinct sources. 13.201.120.32 was first reported on November 17th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2024-11-20 02:45:40 (1 year ago)	[02:45:38] 11*: Scanning for Exploits - /wp-admin/css/	Hacking Bad Web Bot Web App Attack
Anonymous	2024-11-19 18:58:34 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 Database.red	2024-11-19 15:41:43 (1 year ago)	[2024-11-19 10:41:43] Exploit probing - /wp-admin/css/	Hacking Brute-Force Web App Attack
🇸🇬 Cloudkul Cloudkul	2024-11-19 10:25:07 (1 year ago)	Multiple unauthorized attempts to access web resources	Brute-Force Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2024-11-19 08:18:18 (1 year ago)	WP Admin Scan Activities	Web App Attack
🇬🇧 findlab	2024-11-19 08:00:01 (1 year ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇳🇱 CryptoYakari	2024-11-19 04:47:18 (1 year ago)	13.201.120.32 - - [19/Nov/2024:07:46:54 +0300] "GET /wp-admin/css/ HTTP/1.0" 404 3252 "binance.com" ... show more 13.201.120.32 - - [19/Nov/2024:07:46:54 +0300] "GET /wp-admin/css/ HTTP/1.0" 404 3252 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 13.201.120.32 - - [19/Nov/2024:07:46:58 +0300] "GET /.well-known/ HTTP/1.0" 404 3252 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 13.201.120.32 - - [19/Nov/2024:07:47:02 +0300] "GET /sites/default/files/ HTTP/1.0" 404 3252 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 13.201.120.32 - - [19/Nov/2024:07:47:05 +0300] "GET /admin/controller/extension/extension/ HTTP/1.0" 404 3252 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 13.201.120.32 - - [19/Nov/2024:07:47:16 +0300] "GET /uploads/ HTTP/1.0" 404 3252 "binance.com" "Mozill ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇺🇸 brantknudson.org	2024-11-19 04:22:36 (1 year ago)	Client attempted attack using request path '/wp-admin/css/' to honeypot.	Web App Attack
🇺🇸 TPI-Abuse	2024-11-18 19:50:18 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 13.201.120.32 (ec2-13-201-120-32.ap-south-1.com ... show more (mod_security) mod_security (id:225170) triggered by 13.201.120.32 (ec2-13-201-120-32.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 18 14:50:13.109079 2024] [security2:error] [pid 30960:tid 30960] [client 13.201.120.32:60177] [client 13.201.120.32] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.susanoneill.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.susanoneill.us"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZzuadQDG6cQVrACmS69p_QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-18 19:07:57 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 13.201.120.32 (ec2-13-201-120-32.ap-south-1.com ... show more (mod_security) mod_security (id:225170) triggered by 13.201.120.32 (ec2-13-201-120-32.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 18 14:07:53.830866 2024] [security2:error] [pid 29365:tid 29365] [client 13.201.120.32:55450] [client 13.201.120.32] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.brushmileage.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.brushmileage.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZzuQiVntV3ozUugnJq73RgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 el-brujo	2024-11-18 18:45:08 (1 year ago)	Cloudflare WAF: Request Path: //xmlrpc.php Request Query: ?rsd Host: ns2.elhacker.net userAgent: Moz ... show more Cloudflare WAF: Request Path: //xmlrpc.php Request Query: ?rsd Host: ns2.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Action: managed_challenge Source: firewallManaged ASN Description: AMAZON-02 Country: IN Method: GET Timestamp: 2024-11-18T18:45:08Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2024-11-18 18:36:31 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 13.201.120.32 (ec2-13-201-120-32.ap-south-1.com ... show more (mod_security) mod_security (id:225170) triggered by 13.201.120.32 (ec2-13-201-120-32.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 18 13:36:24.179768 2024] [security2:error] [pid 13573:tid 13588] [client 13.201.120.32:64598] [client 13.201.120.32] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.rpiusa.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.rpiusa.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZzuJKMLuvAzOUxBTzqZ4ywAAAQ0"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 penjaga BRIN	2024-11-18 18:02:30 (1 year ago)	Multiple BOT Scanning Attack Detected from same source ip.-111	Web App Attack
🇸🇬 pusathosting.com	2024-11-18 17:42:03 (1 year ago)	2ds22 bruteforce	Brute-Force Web App Attack
🇩🇪 stinpriza	2024-11-18 17:21:48 (1 year ago)	common Web Exploits being scanned	Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 216.26.247.10

🇺🇸 172.253.223.219

🇩🇪 167.94.146.64

🇺🇸 64.7.220.73

🇦🇺 51.161.128.68

🇺🇸 49.51.33.159

🇳🇱 34.178.95.222

🇧🇪 34.52.227.82

🇩🇪 209.50.184.198

🇲🇽 187.154.196.160

🇺🇸 185.141.119.103

🇸🇬 172.253.236.215

🇫🇷 104.28.243.190

🇫🇷 85.217.140.37

🇬🇧 35.203.210.73

🇺🇸 20.51.234.214

🇺🇸 216.25.89.122

🇩🇪 209.50.184.185

🇨🇳 180.116.10.143

🇯🇵 157.101.161.221