JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

13.60.4.139

Neutral Activity

Abuse confidence score ?

0% Low Risk

11 reports

6 reporters · latest 10 months ago

ISP	Amazon Data Services Sweden
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-13-60-4-139.eu-north-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

13.60.4.139 has been reported 11 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 13.60.4.139

This IP address has been reported a total of 11 times from 6 distinct sources. 13.60.4.139 was first reported on November 14th 2025, and the most recent report was 10 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2025-11-16 12:34:05 (10 months ago)	444 requests with url.path *phpinfo.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-16 08:07:33 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 13.60.4.139 (ec2-13-60-4-139.eu-north-1.compute ... show more (mod_security) mod_security (id:210492) triggered by 13.60.4.139 (ec2-13-60-4-139.eu-north-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 03:07:29.116474 2025] [security2:error] [pid 8339:tid 8421] [client 13.60.4.139:41554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koalacogs.com"] [uri "/.env"] [unique_id "aRmGQZGV5r1fdwPI2281HQAAAEc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-16 07:01:27 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 13.60.4.139 (ec2-13-60-4-139.eu-north-1.compute ... show more (mod_security) mod_security (id:210492) triggered by 13.60.4.139 (ec2-13-60-4-139.eu-north-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 02:01:22.390006 2025] [security2:error] [pid 15675:tid 15675] [client 13.60.4.139:42458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "knoxbestos.com"] [uri "/.env.local"] [unique_id "aRl2wtoYdTm7wLhDDW6LvQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-16 06:39:07 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 13.60.4.139 (ec2-13-60-4-139.eu-north-1.compute ... show more (mod_security) mod_security (id:210492) triggered by 13.60.4.139 (ec2-13-60-4-139.eu-north-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 01:39:01.634185 2025] [security2:error] [pid 30155:tid 30155] [client 13.60.4.139:49396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "knowledge.parkhan.com"] [uri "/.env"] [unique_id "aRlxhb9U17p1uInMGBNO5gAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Savvii	2025-11-15 19:38:58 (10 months ago)	20 attempts against mh-misbehave-ban on bush	Brute-Force Bad Web Bot Web App Attack
🇩🇪 kranem	2025-11-15 15:00:28 (10 months ago)	Triggered Cloudflare WAF from SE. Action taken: BLOCK ASN: 16509 (AMAZON-02) Protocol: HTTP/1.1 (GET ... show more Triggered Cloudflare WAF from SE. Action taken: BLOCK ASN: 16509 (AMAZON-02) Protocol: HTTP/1.1 (GET method) Endpoint: /www/info.php.save Timestamp: 2025-11-15T13:36:46Z User-Agent: python-httpx/0.24.1 show less	Bad Web Bot
🇧🇬 Filipe Dávila	2025-11-15 11:55:08 (10 months ago)	[Sat Nov 15 06:55:06.832288 2025] [:error] [pid 436942:tid 140666403247872] [client 13.60.4.139:5058 ... show more [Sat Nov 15 06:55:06.832288 2025] [:error] [pid 436942:tid 140666403247872] [client 13.60.4.139:50588] [client 13.60.4.139] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "[redacted]"] [uri "/.git/config"] [unique_id "aRhqGv7ASfORkTi29RCK1wAAAJE"] show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-15 03:15:23 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 13.60.4.139 (ec2-13-60-4-139.eu-north-1.compute ... show more (mod_security) mod_security (id:210492) triggered by 13.60.4.139 (ec2-13-60-4-139.eu-north-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 22:15:18.429418 2025] [security2:error] [pid 19530:tid 19530] [client 13.60.4.139:45056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marianozaro.com"] [uri "/.git/config"] [unique_id "aRfwRl4IRi4WWTgt2r4gGwAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 20:20:03 (10 months ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2025-11-14 20:15:59 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 13.60.4.139 (ec2-13-60-4-139.eu-north-1.compute ... show more (mod_security) mod_security (id:210492) triggered by 13.60.4.139 (ec2-13-60-4-139.eu-north-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 15:15:54.905897 2025] [security2:error] [pid 17362:tid 17362] [client 13.60.4.139:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nursetammytalks.com"] [uri "/.git/config"] [unique_id "aReN-r_MJ5u_I5hxy79MZgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-14 17:13:01 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 13.60.4.139 (ec2-13-60-4-139.eu-north-1.compute ... show more (mod_security) mod_security (id:210492) triggered by 13.60.4.139 (ec2-13-60-4-139.eu-north-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 12:12:56.666441 2025] [security2:error] [pid 578:tid 578] [client 13.60.4.139:33336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mphq.net"] [uri "/.git/config"] [unique_id "aRdjGKh2rKuO6vQ_FPYCpwAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 208.86.26.208

🇯🇵 153.126.214.105

🇨🇳 106.227.76.197

🇰🇬 85.113.1.243

🇹🇷 85.104.0.89

🇳🇱 193.47.62.69

🇨🇦 178.128.231.148

🇫🇮 147.185.133.137

🇳🇱 109.160.32.10

🇺🇸 104.131.170.142

🇷🇺 77.244.64.60

🇮🇳 72.61.238.193

🇮🇶 65.20.141.202

🇱🇹 62.60.130.253

🇸🇬 47.128.58.57

🇺🇸 43.153.85.46

🇺🇸 35.253.125.102

🇺🇸 34.216.175.253

🇺🇸 34.123.134.194

🇭🇰 13.70.4.78