13.201.180.4
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Amazon Data Services India
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS16509
- Hostname(s)
- ec2-13-201-180-4.ap-south-1.compute.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇮🇳 India
- City
- Mumbai, Maharashtra
No reports in the last 60 days
13.201.180.4 has been reported 47 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
47 from
43 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 geot |
GET /.git/config HTTP/1.1
|
Hacking Bad Web Bot Web App Attack | |
| 🇺🇸 octageeks.com |
Wordpress malicious attack:[octablocked]
|
Web App Attack | |
| 🇫🇷 Pythagus |
Aggressive web scan
|
SQL Injection Bad Web Bot Web App Attack | |
| Anonymous |
Reported from Nginx log analysis 6. Log: 13.201.180.4 - - [02/Sep/2025:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "-" "-" "IN India Mumbai" "AS16509" "AMAZON-02"
|
Port Scan Brute-Force SSH | |
| 🇬🇧 essinghigh |
IPS Detection: 13.201.180.4 -> DPT: 443
|
Port Scan | |
| 🇫🇷 sbocquet |
Port 443 scanned.
|
Port Scan | |
| Anonymous |
Generic port scan: GET / HTTP/1.1; Generic port scan: GET / HTTP/1.1; Probing for sensitive files or CMS vulnerabilities (e.g., .env, .git, WordPress): GET /.git/config HTTP/1.1
|
Port Scan Web App Attack | |
| 🇳🇱 Study Bitcoin 🤗 |
2 port probes: tcp/80 (http), tcp/443 (https)
[srv126,srv127]
|
Port Scan Brute-Force Bad Web Bot Web App Attack | |
| 🇺🇸 www.winos.me |
stream fail
|
Web App Attack | |
| 🇺🇸 OceanTreasure |
tcp/443; Probing for exposed Git repository config files: "GET /.git/config" @ 2025-09-02T19:56:42Z [azure]
|
Web App Attack | |
| 🇫🇮 kumiko |
[2025-09-02 23:03:42] Known bad bot [l9tcpid/v1.1.0]
|
Bad Web Bot Web App Attack | |
| 🇳🇱 soverin |
Network scan on port 443
|
Email Spam | |
| 🇺🇸 creations.works |
Blocked by UFW on vds [80/tcp]
Source port: 5147
TTL: 52
Packet length: 40
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Web App Attack | |
| 🇸🇰 DSSYSTEMS |
Automatic report from DSS firewall log.
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 Ar1s |
[1:2035314] ET USER_AGENTS Suspcious LeakIX User-Agent (l9explore) ::: Port: 80/TCP
|
Exploited Host |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown