JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.39.160.23

13.39.160.23 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 64%: ?

64%

ISP	Amazon Data Services France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-13-39-160-23.eu-west-3.compute.amazonaws.com
Domain Name	amazon.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.39.160.23

Whois 13.39.160.23

IP Abuse Reports for 13.39.160.23:

This IP address has been reported a total of 51 times from 36 distinct sources. 13.39.160.23 was first reported on May 29th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-02 09:24:54 (1 month ago)	FortiWeb WAF: 12 attacks detected. Threat Score: 8400. Types: Client Management(6), Block IP List(6) ... show more FortiWeb WAF: 12 attacks detected. Threat Score: 8400. Types: Client Management(6), Block IP List(6). Origin: France. show less	Web App Attack
🇬🇧 Oakley	2026-06-01 09:53:23 (1 month ago)	(mod_security) mod_security (id:900191) triggered by 13.39.160.23 (FR/France/ec2-13-39-160-23.eu-wes ... show more (mod_security) mod_security (id:900191) triggered by 13.39.160.23 (FR/France/ec2-13-39-160-23.eu-west-3.compute.amazonaws.com): 5 in the last 900 secs show less	Web App Attack Hacking
Anonymous	2026-06-01 09:53:15 (1 month ago)	13.39.160.23 - - [01/Jun/2026:11:53:11 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 439 " ... show more 13.39.160.23 - - [01/Jun/2026:11:53:11 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 13.39.160.23 - - [01/Jun/2026:11:53:11 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 290 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 13.39.160.23 - - [01/Jun/2026:11:53:12 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 290 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 13.39.160.23 - - [01/Jun/2026:11:53:12 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 13.39.160.23 - - [01/Jun/2026:11:53:14 +0200] "POST //xmlrpc.php HTTP/1.1" 200 3482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K ... show less	Brute-Force Web App Attack
Anonymous	2026-06-01 07:29:01 (1 month ago)	Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=17	Hacking
Anonymous	2026-05-31 17:03:12 (1 month ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FR, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FR, Attack patterns: WordPress scanning, Malicious User-Agent show less	Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-05-31 14:16:07 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 13.39.160.23 (FR/France/ec2-13-39-1 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 13.39.160.23 (FR/France/ec2-13-39-160-23.eu-west-3.compute.amazonaws.com): 2 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-31 09:16:14 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 13.39.160.23 (ec2-13-39-160-23.eu-west-3.comput ... show more (mod_security) mod_security (id:225170) triggered by 13.39.160.23 (ec2-13-39-160-23.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 05:16:10.982600 2026] [security2:error] [pid 19466:tid 19466] [client 13.39.160.23:50436] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.fredlandia.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fredlandia.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahv8WsS1S1qIFyHcH1bKhQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Apache	2026-05-31 09:12:34 (1 month ago)	(mod_security) mod_security (id:210410) triggered by 13.39.160.23 (FR/France/ec2-13-39-160-23.eu-wes ... show more (mod_security) mod_security (id:210410) triggered by 13.39.160.23 (FR/France/ec2-13-39-160-23.eu-west-3.compute.amazonaws.com): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-05-31 05:51:43 (1 month ago)	Try to access /xmlrpc.php?rsd	Web App Attack
🇺🇦 URAN Publishing Service	2026-05-31 04:44:53 (1 month ago)	13.39.160.23 - - [31/May/2026:07:44:53 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/5. ... show more 13.39.160.23 - - [31/May/2026:07:44:53 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" ... show less	Web App Attack
🇷🇴 INTEQ	2026-05-31 02:11:50 (1 month ago)	Web attack from 13.39.160.23	Web App Attack
🇫🇷 ✨	2026-05-31 01:13:21 (1 month ago)	Rule : WEB 2026-05-31 01:11:12 13.39.160.23 49784 *hidden-privacy* 80 - - - - - 400 - BadRequest ... show more Rule : WEB 2026-05-31 01:11:12 13.39.160.23 49784 *hidden-privacy* 80 - - - - - 400 - BadRequest - TCP show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-31 00:46:59 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 13.39.160.23 (ec2-13-39-160-23.eu-west-3.comput ... show more (mod_security) mod_security (id:225170) triggered by 13.39.160.23 (ec2-13-39-160-23.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 20:46:56.352904 2026] [security2:error] [pid 20380:tid 20380] [client 13.39.160.23:56127] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|papelandia.com.ve\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "papelandia.com.ve"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahuFAJgh4CjcJHNejjLNdgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-31 00:24:57 (1 month ago)	13.39.160.23 - - [31/May/2026:02:24:56 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 441 "- ... show more 13.39.160.23 - - [31/May/2026:02:24:56 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 13.39.160.23 - - [31/May/2026:02:24:56 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 292 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 13.39.160.23 - - [31/May/2026:02:24:57 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 13.39.160.23 - - [31/May/2026:02:24:57 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 292 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 13.39.160.23 - - [31/May/2026:02:24:57 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 ... show less	Brute-Force Web App Attack
🇳🇱 Roderic	2026-05-31 00:24:16 (1 month ago)	(wordpress-404) Searching for non-existent wordpress installs from 13.39.160.23 (FR/France/Paris Dep ... show more (wordpress-404) Searching for non-existent wordpress installs from 13.39.160.23 (FR/France/Paris Department/Paris/ec2-13-39-160-23.eu-west-3.compute.amazonaws.com/[redacted]) show less	Brute-Force

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.233

🇳🇱 185.223.235.15

🇯🇵 104.46.231.41

🇺🇸 72.128.129.170

🇨🇳 39.104.78.118

🇺🇸 20.221.56.179

🇰🇷 20.214.184.176

🇮🇳 20.204.32.32

🇳🇱 142.93.224.178

🇷🇴 93.113.10.194

🇳🇱 64.89.162.12

🇨🇳 47.115.201.87

🇬🇧 35.203.210.209

🇺🇸 32.186.67.137

🇸🇬 20.212.33.130

🇩🇰 2.109.64.218

🇮🇳 2401:4900:88fe:d11b:5467:4ef8:dfc4:c733

🇨🇳 218.90.252.4

🇧🇪 207.175.47.52

🇺🇸 192.169.226.90