JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.0.85.67

65.0.85.67 was found in our database!

This IP was reported 77 times. Confidence of Abuse is 0%: ?

ISP	Amazon Data Services India
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-65-0-85-67.ap-south-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.0.85.67

Whois 65.0.85.67

IP Abuse Reports for 65.0.85.67:

This IP address has been reported a total of 77 times from 41 distinct sources. 65.0.85.67 was first reported on March 5th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-09 11:16:36 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 65.0.85.67 (ec2-65-0-85-67.ap-south-1.compute.a ... show more (mod_security) mod_security (id:210492) triggered by 65.0.85.67 (ec2-65-0-85-67.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 07:16:31.361357 2026] [security2:error] [pid 31191:tid 31191] [client 65.0.85.67:59236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "d2.stoneast.com"] [uri "/.git/config"] [unique_id "ak-DDzanV7JSO_DP7Isq6gAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-16 07:40:58 (4 months ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-admin/js	Web App Attack
🇫🇮 YF	2026-04-14 00:00:44 (4 months ago)	404 errors (Vulnerability scan)	Brute-Force Web App Attack
🇺🇸 mawan	2026-04-06 18:59:30 (4 months ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇫🇷 thilo	2026-04-06 12:44:57 (4 months ago)	Probe for vulnerabilities. Path attempted: /wp-content/plugins/formcraft/file-upload/server/php	Web App Attack
🇫🇷 thilo	2026-04-06 12:29:51 (4 months ago)	Probe for vulnerabilities. Path attempted: /wp-old	Web App Attack
🇩🇪 4server	2026-04-06 03:57:03 (4 months ago)	[MonApr0605:56:57.4405872026][security2:error][pid2910677:tid2910796][client65.0.85.67:0]ModSecurity ... show more [MonApr0605:56:57.4405872026][security2:error][pid2910677:tid2910796][client65.0.85.67:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"159\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"chryptofarm.ch\"][uri\"/WP/\"][unique_id\"adMvCVyL95PJ2JVRX4xxQQAAANg\"] show less	Port Scan Brute-Force Web App Attack
🇧🇪 cmbplf	2026-04-05 06:58:30 (4 months ago)	6.870 requests from abuseipdb.com blacklisted IP (6mos3w5h)	Brute-Force Bad Web Bot
🇬🇧 Greg Poulson	2026-04-04 11:14:43 (4 months ago)	Our website was hit by this DDOS at a rate of 108 in 5 minutes.	DDoS Attack Web Spam Brute-Force
🇺🇸 kosada.com	2026-04-04 10:59:53 (4 months ago)	Web vulnerability probing: /wp/	Web App Attack
🇪🇸 el-brujo	2026-04-02 21:45:37 (4 months ago)	Cloudflare WAF: Request Path: /wp-content/ALFA_DATA/alfacgiapi/ Request Query: Host: forum.elhacker ... show more Cloudflare WAF: Request Path: /wp-content/ALFA_DATA/alfacgiapi/ Request Query: Host: forum.elhacker.net userAgent: python-requests/2.27.1 Action: log Source: firewallManaged ASN Description: AMAZON-02 - Amazon.com, Inc. Country: IN Method: GET Timestamp: 2026-04-02T21:45:37Z ruleId: 9f35644b7f734c87a57cfd6d8b036974. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2026-04-02 21:43:45 (4 months ago)	Cloudflare WAF: Request Path: /.git/config/ Request Query: Host: forum.elhacker.net userAgent: pyth ... show more Cloudflare WAF: Request Path: /.git/config/ Request Query: Host: forum.elhacker.net userAgent: python-requests/2.27.1 Action: block Source: firewallManaged ASN Description: AMAZON-02 - Amazon.com, Inc. Country: IN Method: GET Timestamp: 2026-04-02T21:43:45Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2026-04-02 17:33:44 (4 months ago)	Cloudflare WAF: Request Path: /wp-content/ALFA_DATA/alfacgiapi/ Request Query: Host: foro.elhacker. ... show more Cloudflare WAF: Request Path: /wp-content/ALFA_DATA/alfacgiapi/ Request Query: Host: foro.elhacker.net userAgent: python-requests/2.27.1 Action: log Source: firewallManaged ASN Description: AMAZON-02 - Amazon.com, Inc. Country: IN Method: GET Timestamp: 2026-04-02T17:33:44Z ruleId: 9f35644b7f734c87a57cfd6d8b036974. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2026-03-30 18:35:20 (4 months ago)	Cloudflare WAF: Request Path: /wp-content/ALFA_DATA/alfacgiapi/ Request Query: Host: www.elhacker.n ... show more Cloudflare WAF: Request Path: /wp-content/ALFA_DATA/alfacgiapi/ Request Query: Host: www.elhacker.net userAgent: python-requests/2.27.1 Action: log Source: firewallManaged ASN Description: AMAZON-02 - Amazon.com, Inc. Country: IN Method: GET Timestamp: 2026-03-30T18:35:20Z ruleId: 9f35644b7f734c87a57cfd6d8b036974. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2026-03-30 17:55:20 (4 months ago)	Cloudflare WAF: Request Path: /.env/ Request Query: Host: www.elhacker.net userAgent: python-reques ... show more Cloudflare WAF: Request Path: /.env/ Request Query: Host: www.elhacker.net userAgent: python-requests/2.27.1 Action: block Source: firewallManaged ASN Description: AMAZON-02 - Amazon.com, Inc. Country: IN Method: GET Timestamp: 2026-03-30T17:55:20Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack

Showing 1 to 15 of 77 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 223.197.178.95

🇺🇸 192.155.90.118

🇨🇳 112.66.179.85

🇳🇱 45.148.10.152

🇬🇭 41.139.12.230

🇺🇸 35.196.194.152

🇰🇷 211.253.31.30

🇺🇸 199.188.201.234

🇳🇱 195.178.110.228

🇯🇵 168.138.213.229

🇺🇸 165.245.172.73

🇩🇪 151.243.11.16

🇺🇸 104.196.123.105

🇹🇭 101.108.71.203

🇹🇷 95.70.164.187

🇺🇸 91.92.243.223

🇺🇸 50.6.160.37

🇮🇳 49.248.197.50

🇷🇴 2.57.122.209

🇹🇷 212.64.211.148