15.134.139.103

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
100% Critical
32 reports
28 reporters · latest 1 week ago
ISP
Amazon Corporate Services Pty Ltd
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-15-134-139-103.ap-southeast-2.compute.amazonaws.com
Domain Name
amazon.com.au
Country
🇦🇺 Australia
City
Sydney, New South Wales
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
32 from 28 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 13 🇺🇸 United States of America 7 🇨🇿 Czechia 2
Most common categories Web App Attack 28 Hacking 10 Bad Web Bot 6 Brute-Force 6 Port Scan 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Network service scanning detected by FortiGate; source quarantined.
Port Scan
🇩🇪 expandmade.com
detect header anomalies [31/Oct/2026:07:27:39 "GET //wp-content/plugins/fix/up.php"]
Web App Attack
🇺🇸 omc
Barred IP [QC]. GET /wp-content/plugins/fix/up.php [Q4].
Web App Attack
Anonymous
Fuzzing/Looking for credentials files.
Brute-Force Web App Attack
🇺🇸 netlinkpro
Web scanning: probed for //wp-content/plugins/fix/up.php. 1 request, all refused (HTTP 4xx), 2026-10-31 04:12–04:12 UTC.
Web App Attack
🇩🇪 todix
"GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 13754 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
Web App Attack
Anonymous
Web App Attack Web Spam
🇵🇱 ketovoila.pl
Bad Web Bot Web App Attack
🇺🇸 jcbriar
Searching for vulnerable scripts
Hacking Web App Attack
🇩🇪 todix
"GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 15946 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
Web App Attack
🇩🇪 psauxit
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping
Web App Attack Hacking
🇨🇿 ddw
Access Violation Attempts - Multiple 403 Forbidden responses.
Hacking Bad Web Bot Web App Attack
🇩🇪 todix
"GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 19870 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
Web App Attack
🇳🇿 Tripwire
Scanning for exploits - //wp-content/plugins/fix/up.php
Web App Attack
Anonymous
15.134.139.103 - - [31/Oct/2026:01:51:57 +0100] "GET //wp-content/plugins/fix/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇿 213.230.100.8
🇳🇱 193.47.62.69
🇸🇬 143.198.213.231
🇨🇳 120.209.88.74
🇨🇳 117.62.238.207
🇺🇦 93.170.46.77
🇹🇭 34.15.157.111
🇩🇪 17.248.145.14
🇧🇬 212.50.13.222
🇫🇷 185.194.178.35
🇬🇧 185.170.110.17
🇺🇸 176.96.48.183
🇸🇻 168.243.171.4
🇿🇦 168.210.152.49
🇺🇸 164.90.142.200
🇲🇽 143.105.17.110
🇳🇱 109.160.32.123
🇳🇱 77.67.26.19
🇺🇸 77.36.69.150
🇦🇷 38.51.28.143
feedback