AbuseIPDB » 13.233.233.22

13.233.233.22 was found in our database!

This IP was reported 121 times. Confidence of Abuse is 46%: ?

46%

ISP	Amazon Data Services India
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-13-233-233-22.ap-south-1.compute.amazonaws.com
Domain Name	amazon.com
Country	India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 13.233.233.22

Whois 13.233.233.22

IP Abuse Reports for 13.233.233.22:

This IP address has been reported a total of 121 times from 79 distinct sources. 13.233.233.22 was first reported on April 24th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
octageeks.com	2025-04-25 04:14:57 (1 month ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
TPI-Abuse	2025-04-25 04:12:50 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 13.233.233.22 (ec2-13-233-233-22.ap-south-1.com ... show more(mod_security) mod_security (id:225170) triggered by 13.233.233.22 (ec2-13-233-233-22.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 25 00:12:43.761597 2025] [security2:error] [pid 23277:tid 23277] [client 13.233.233.22:57220] [client 13.233.233.22] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.bikinitweets.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bikinitweets.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aAsLuwP2cll7-YN1LBhNcQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
BlueWire Hosting	2025-04-25 04:10:25 (1 month ago)	Probing for application vulnerabilities	Brute-Force Web App Attack
Jason Howell	2025-04-25 04:00:41 (1 month ago)	13.233.233.22 - - [24/Apr/2025:23:00:31 -0500] "GET //xmlrpc.php?rsd HTTP/1.1" 200 1081 "-" "Mozilla ... show more13.233.233.22 - - [24/Apr/2025:23:00:31 -0500] "GET //xmlrpc.php?rsd HTTP/1.1" 200 1081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 13.233.233.22 - - [24/Apr/2025:23:00:32 -0500] "POST //xmlrpc.php HTTP/1.1" 200 653 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 13.233.233.22 - - [24/Apr/2025:23:00:33 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 13.233.233.22 - - [24/Apr/2025:23:00:34 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 13.233.233.22 - - [24/Apr/2025:23:00:35 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ... show less	Web App Attack
FeG Deutschland	2025-04-25 03:51:45 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 147	Exploited Host Web App Attack
plzenskypruvodce.cz	2025-04-25 03:49:46 (1 month ago)	2025-04-25T05:49:46.358648+02:00 web wordpress(varhanykolin.cz)[2402427]: Immediately block connecti ... show more2025-04-25T05:49:46.358648+02:00 web wordpress(varhanykolin.cz)[2402427]: Immediately block connections from 13.233.233.22 ... show less	Brute-Force
TPI-Abuse	2025-04-25 02:58:48 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 13.233.233.22 (ec2-13-233-233-22.ap-south-1.com ... show more(mod_security) mod_security (id:225170) triggered by 13.233.233.22 (ec2-13-233-233-22.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 24 22:58:40.698510 2025] [security2:error] [pid 21635:tid 21635] [client 13.233.233.22:61762] [client 13.233.233.22] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.azcrittergetter.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.azcrittergetter.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aAr6YH5nW2GJLeDB1I-DwwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Site.eu	2025-04-25 01:17:20 (1 month ago)	Excessive multi-domain requests	Brute-Force
Marc	2025-04-25 01:17:06 (1 month ago)		Brute-Force
TPI-Abuse	2025-04-25 01:17:05 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 13.233.233.22 (ec2-13-233-233-22.ap-south-1.com ... show more(mod_security) mod_security (id:225170) triggered by 13.233.233.22 (ec2-13-233-233-22.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 24 21:17:00.292534 2025] [security2:error] [pid 3603024:tid 3603024] [client 13.233.233.22:54847] [client 13.233.233.22] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.verdeprofundo.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.verdeprofundo.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "aArijN3NrcCJUgdTYIR3IQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-04-25 01:02:00 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 13.233.233.22 (ec2-13-233-233-22.ap-south-1.com ... show more(mod_security) mod_security (id:225170) triggered by 13.233.233.22 (ec2-13-233-233-22.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 24 21:01:53.218681 2025] [security2:error] [pid 2061868:tid 2061868] [client 13.233.233.22:51603] [client 13.233.233.22] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vangentholding.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vangentholding.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aArfAWo-CP8QN0VvqJMh1AAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
SCHAPPY	2025-04-25 00:46:19 (1 month ago)	Attack to wordpress xmlrpc	Web App Attack
Ba-Yu	2025-04-25 00:41:14 (1 month ago)	WP-xmlrpc exploit	Web Spam Blog Spam Hacking Exploited Host Web App Attack
Ribeye375	2025-04-25 00:39:38 (1 month ago)	HIPS rce-attempt - Block tcp/0:65535	Web App Attack
TPI-Abuse	2025-04-25 00:33:45 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 13.233.233.22 (ec2-13-233-233-22.ap-south-1.com ... show more(mod_security) mod_security (id:225170) triggered by 13.233.233.22 (ec2-13-233-233-22.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 24 20:33:40.099655 2025] [security2:error] [pid 18382:tid 18382] [client 13.233.233.22:59838] [client 13.233.233.22] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.unionega.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.unionega.com"] [uri "/wp-signup.php"] [unique_id "aArYZJt3bC3QFoCFu9wkrgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩