JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.61.100.197

13.61.100.197 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 95%: ?

95%

ISP	Amazon Data Services Sweden
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-13-61-100-197.eu-north-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.61.100.197

Whois 13.61.100.197

IP Abuse Reports for 13.61.100.197:

This IP address has been reported a total of 28 times from 19 distinct sources. 13.61.100.197 was first reported on January 27th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 taivas.nl	2026-09-17 04:33:39 (2 days ago)	Many_bad_calls	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 16:34:47 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 13.61.100.197 (ec2-13-61-100-197.eu-north-1.com ... show more (mod_security) mod_security (id:210492) triggered by 13.61.100.197 (ec2-13-61-100-197.eu-north-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 12:34:40.555057 2026] [security2:error] [pid 25673:tid 25673] [client 13.61.100.197:44508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "souldata.com"] [uri "/wp-config.php.bak"] [unique_id "aqrFINBBeCXYopA8cLTmSgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2026-09-16 16:32:11 (3 days ago)	Bad_requests	Bad Web Bot
🇸🇪 vaia.cloud	2026-09-16 15:10:04 (3 days ago)	crowdsecurity/http-cve-probing	Brute-Force Web App Attack
🇳🇱 BlueWire Hosting	2026-09-16 14:28:20 (3 days ago)	Probing websites for vulnerabilities	Web App Attack
🇩🇪 palla89	2026-09-16 14:17:51 (3 days ago)	(mod_security) mod_security triggered on hostname [redacted] 13.61.100.197 (SE/Sweden/ec2-13-61-100- ... show more (mod_security) mod_security triggered on hostname [redacted] 13.61.100.197 (SE/Sweden/ec2-13-61-100-197.eu-north-1.compute.amazonaws.com) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-09-16 13:55:53 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 13.61.100.197 (ec2-13-61-100-197.eu-north-1.com ... show more (mod_security) mod_security (id:210492) triggered by 13.61.100.197 (ec2-13-61-100-197.eu-north-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:55:47.967548 2026] [security2:error] [pid 567:tid 567] [client 13.61.100.197:46612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oruhu.org"] [uri "/wp-config.php.bak"] [unique_id "aqqf4_I6g0UCqT4rIg2CGAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-09-16 11:18:43 (3 days ago)	Multiple WAF Violations	Web App Attack
🇺🇦 URAN Publishing Service	2026-09-16 10:09:34 (3 days ago)	[16/Sep/2026:13:09:34 +0300] -- 13.61.100.197 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-j ... show more [16/Sep/2026:13:09:34 +0300] -- 13.61.100.197 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1 show less	Bad Web Bot Web App Attack
🇷🇴 iulianh	2026-09-16 09:39:12 (3 days ago)	80,443	Brute-Force SSH
🇫🇮 YF	2026-09-16 09:30:44 (3 days ago)	WordPress config file probe	Web App Attack
🇸🇪 vaia.cloud	2026-09-16 09:10:05 (3 days ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 08:09:42 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 13.61.100.197 (ec2-13-61-100-197.eu-north-1.com ... show more (mod_security) mod_security (id:210492) triggered by 13.61.100.197 (ec2-13-61-100-197.eu-north-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 04:09:38.749123 2026] [security2:error] [pid 27995:tid 28040] [client 13.61.100.197:36066] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sparkhypnotherapy.com"] [uri "/wp-config.php.bak"] [unique_id "aqpOwumK0zr7P8_NYph-bgAAAcw"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-09-16 07:08:09 (3 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2026-09-16 06:59:29 (3 days ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 200.30.211.122

🇧🇷 43.157.168.43

🇺🇸 209.163.105.2

🇺🇸 204.12.242.211

🇨🇳 182.43.71.198

🇮🇳 154.29.229.174

🇺🇸 149.18.167.72

🇫🇷 141.101.69.48

🇻🇳 117.4.247.33

🇧🇬 109.160.32.210

🇻🇳 103.179.190.58

🇳🇱 89.248.172.118

🇺🇸 45.33.109.8

🇧🇷 45.6.16.187

🇫🇮 193.187.110.213

🇺🇸 143.198.68.20

🇺🇦 130.0.52.180

🇨🇳 59.36.233.74

🇨🇳 39.78.147.6

🇵🇭 161.49.89.39