JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.63.41.193

13.63.41.193

Recent Activity

13 reports found in our database

61% ▲ ▲ ▲ Elevated

Abuse confidence score ?

ISP

Amazon Data Services Sweden

Usage Type

Data Center/Web Hosting/Transit

ASN

AS16509

Hostname(s)

ec2-13-63-41-193.eu-north-1.compute.amazonaws.com

Domain Name

amazon.com

Country

🇸🇪 Sweden

City

Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 13.63.41.193:

This IP address has been reported a total of 13 times from 13 distinct sources. 13.63.41.193 was first reported on August 26th 2026, and the most recent report was 8 hours ago. In the last 60 days, the top reporter locations were: Germany with 3 reports; United States of America with 3 reports; Finland with 2 reports. The most common categories in these recent reports were: Web App Attack 9 times; Bad Web Bot 5 times; Hacking 3 times; Port Scan 3 times; Brute-Force 2 times; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 mnazibo	2026-09-12 20:30:40 (8 hours ago)	Date: Sep 12 23:15:29 2026 EAT \| Reported IP: 13.63.41.193 mod_security \| id: 920350 953100 959100 \| ... show more Date: Sep 12 23:15:29 2026 EAT \| Reported IP: 13.63.41.193 mod_security \| id: 920350 953100 959100 \| SE/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address; Host header is a numeric IP address; PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4) show less	SQL Injection Brute-Force Bad Web Bot
Anonymous	2026-09-11 23:12:43 (1 day ago)	13.63.41.193 34.194.31.253 - [11/Sep/2026:17:12:41 -0600] "GET /admin/login HTTP/1.1" 403 158 "-" "M ... show more 13.63.41.193 34.194.31.253 - [11/Sep/2026:17:12:41 -0600] "GET /admin/login HTTP/1.1" 403 158 "-" "Mozilla/5.0" show less	Port Scan Bad Web Bot
🇫🇮 Daniel Baer	2026-09-11 14:30:02 (1 day ago)	CrowdSec local HTTP alert scenario: crowdsecurity/http-cve-probing alert_id: 6934 events: 1 created_ ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-cve-probing alert_id: 6934 events: 1 created_at: 2026-09-11T14:26:17Z message: Ip 13.63.41.193 performed 'crowdsecurity/http-cve-probing' (1 events over 0s) at 2026-09-11 14:26:16.952275265 +0000 UTC target_uri: ["/wp-json/batch/v1"] method: ["POST"] status: ["404"] user_agent: ["Mozilla/5.0"] show less	Bad Web Bot Web App Attack
🇺🇸 ratcarcher-labs	2026-09-03 18:33:45 (1 week ago)	[Ratcarcher Labs/MutantShield honeypot CTI] actor=human vector=bot_scanner risk=75 attacks=43 depth= ... show more [Ratcarcher Labs/MutantShield honeypot CTI] actor=human vector=bot_scanner risk=75 attacks=43 depth=2 node=node-eu-west canary=no human_score=50 agentic=15 cc=SE asn=Amazon.com, Inc. \| Data provided by Ratcarcher Labs · https://ratcarcher-labs.com · docs https://api.ratcarcher-labs.com/api/v1/public/docs show less	Port Scan Bad Web Bot
🇩🇪 ManagedStack	2026-09-03 18:00:01 (1 week ago)	Probing access to unauthorized locations	Hacking Exploited Host Web App Attack
🇳🇱 myip.foo	2026-09-03 01:45:36 (1 week ago)	[myip.foo] 13.63.41.193 - - [03/Sep/2026:01:45:36 +0000] "GET /index.php?lang=../../../../../../../. ... show more [myip.foo] 13.63.41.193 - - [03/Sep/2026:01:45:36 +0000] "GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&%3C%3Fphp%20echo%20%27TP47945_e01bf800e5%27%3B%3F%3E+/tmp/tp_tp47945_e01bf800e5.php HTTP/1.1" 404 148 "-" "Mozilla/5.0" show less	Bad Web Bot Web App Attack
🇺🇸 drewf.ink	2026-09-02 23:35:32 (1 week ago)	[23:35] Sent a Path Traversal / LFI payload to the web honeypot (GET /index.php) - matched: '../'	Web App Attack
🇩🇪 barbarella	2026-09-02 19:23:36 (1 week ago)	Multiple (15) times attack on https port 443: unsolicited access to Administrative pages (POST /inde ... show more Multiple (15) times attack on https port 443: unsolicited access to Administrative pages (POST /index.php) 19:23:36 unsolicited access to Administrative pages (POST /index.php) 19:23:37 ThinkPHP exploit (POST /public/index.php) 19:23:37 ThinkPHP exploit (POST /public/index.php) 19:23:37 Illegal http header (POST /) 19:23:37 Illegal http header (POST /) 19:23:37 Trying to access Laravel Webframework (GET /_ignition/execute-solution) 19:23:37 Hacking attempt (GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&%3C%3Fphp%20echo%20%27TP47945_d6adcfd8a8%27%3B%3F%3E+/tmp/tp_tp47945_d6adcfd8a8.php) 19:23:37 Hacking attempt (GET /index.php?lang=../../../../../../../../tmp/tp_tp47945_d6adcfd8a8.php) show less	Hacking Web App Attack
Anonymous	2026-09-02 07:05:08 (1 week ago)	B: f2b 404 5x	Web App Attack
🇵🇱 Budyn	2026-08-30 19:14:44 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: 51.83.237.XX \| URI: /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&%3C%3Fphp%20echo%20%27TP47945_ce1cb4cc56%27%3B%3F%3E+/tmp/tp_tp47945_ce1cb4cc56.php \| UA: Mozilla/5.0 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇮🇪 AutosOnShow	2026-08-30 05:07:04 (2 weeks ago)	blocked for webapp attack \| path requested: /struts2-showcase/index.action \| seen at 2026-08-30 05:0 ... show more blocked for webapp attack \| path requested: /struts2-showcase/index.action \| seen at 2026-08-30 05:06:52.842 \| show less	Web App Attack
Anonymous	2026-08-29 11:21:30 (2 weeks ago)	13.63.41.193 - visio.sliver85.eu - [29/Aug/2026:13:21:29 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0" 1 ... show more 13.63.41.193 - visio.sliver85.eu - [29/Aug/2026:13:21:29 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0" 13.63.41.193 - visio.sliver85.eu - [29/Aug/2026:13:21:29 +0200] "POST /template/aui/text-inline.vm HTTP/1.1" 444 "Mozilla/5.0" 13.63.41.193 - visio.sliver85.eu - [29/Aug/2026:13:21:30 +0200] "POST /wiki/template/aui/text-inline.vm HTTP/1.1" 444 "Mozilla/5.0" 13.63.41.193 - visio.sliver85.eu - [29/Aug/2026:13:21:30 +0200] "GET / HTTP/1.1" 444 "${jndi:ldap://127.0.0.1/LOG4J_bb425184b8}" ... show less	Brute-Force Web App Attack
🇨🇦 Tanados	2026-08-26 21:04:12 (2 weeks ago)	Blocked by UFW [8443/tcp] Source port: 57529 TTL: 239 Packet length: 40 TOS: 0x00 This report was g ... show more Blocked by UFW [8443/tcp] Source port: 57529 TTL: 239 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.216.32.60

🇩🇪 193.124.20.252

🇭🇰 168.70.7.216

🇮🇳 125.20.16.22

🇦🇺 124.171.133.25

🇸🇮 102.220.161.86

🇺🇸 66.234.1.87

🇺🇸 34.56.117.11

🇺🇸 32.186.132.248

🇬🇧 216.226.76.30

🇮🇩 103.155.47.50

🇫🇷 85.217.140.42

🇨🇳 59.52.176.199

🇧🇪 35.187.8.187

🇭🇰 34.92.69.175

🇩🇪 8.211.47.19

🇷🇴 2.57.121.112

🇨🇳 218.13.152.23

🇬🇧 217.146.80.104

🇧🇷 205.210.31.178