JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.217.32.250

13.217.32.250 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 0%: ?

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-13-217-32-250.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.217.32.250

Whois 13.217.32.250

IP Abuse Reports for 13.217.32.250:

This IP address has been reported a total of 33 times from 28 distinct sources. 13.217.32.250 was first reported on October 3rd 2025, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 jjnxpct	2025-10-04 03:45:07 (10 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.git/config (Rule ID: 210492) show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-10-03 17:41:48 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 13.217.32.250 (ec2-13-217-32-250.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 13.217.32.250 (ec2-13-217-32-250.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 03 13:41:43.372461 2025] [security2:error] [pid 18321:tid 18321] [client 13.217.32.250:52562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yuichiro.us"] [uri "/.git/config"] [unique_id "aOAK1-HyAAXLn3snQ3Q6aQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-03 17:41:42 (10 months ago)	13.217.32.250 - - [03/Oct/2025:19:41:42 +0200] "GET /.git/config HTTP/1.1" 403 4945 "-" "Mozilla/5.0 ... show more 13.217.32.250 - - [03/Oct/2025:19:41:42 +0200] "GET /.git/config HTTP/1.1" 403 4945 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15G77 MicroMessenger/7.0.3(0x17000321) NetType/WIFI Language/zh_CN" ... show less	Web App Attack
🇩🇪 DocNetzwerk	2025-10-03 17:34:44 (10 months ago)	(mod_security) mod_security triggered on hostname [redacted] 13.217.32.250 (US/United States/ec2-13- ... show more (mod_security) mod_security triggered on hostname [redacted] 13.217.32.250 (US/United States/ec2-13-217-32-250.compute-1.amazonaws.com) show less	SQL Injection
🇩🇪 grassau.com	2025-10-03 17:12:02 (10 months ago)	(mod_security) mod_security triggered on hostname [redacted] 13.217.32.250 (US/United States/ec2-13- ... show more (mod_security) mod_security triggered on hostname [redacted] 13.217.32.250 (US/United States/ec2-13-217-32-250.compute-1.amazonaws.com) show less	SQL Injection
🇺🇸 mnsf	2025-10-03 17:05:07 (10 months ago)	Too many Status 40X (14)	Brute-Force Web App Attack
🇩🇪 LRob	2025-10-03 17:03:06 (10 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 TPI-Abuse	2025-10-03 16:53:47 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 13.217.32.250 (ec2-13-217-32-250.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 13.217.32.250 (ec2-13-217-32-250.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 03 12:53:41.517999 2025] [security2:error] [pid 25388:tid 25388] [client 13.217.32.250:43328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web197.dnchosting.com"] [uri "/.git/config"] [unique_id "aN__ldR8JmQ9hQ1ckPcKHgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 SCHAPPY	2025-10-03 16:49:05 (10 months ago)	Probing for non-installed web apps or current vulnerabilities.	Hacking Web App Attack
Anonymous	2025-10-03 16:40:41 (10 months ago)	Try to connect to Port_Scan_443_stealth	Port Scan
🇩🇪 Kreapptivo	2025-10-03 16:40:20 (10 months ago)	[03/Oct/2025:18:40:18 +0200] Web-Request: "GET /.git/config", User-Agent: "Mozilla/5.0 (X11; Fedora; ... show more [03/Oct/2025:18:40:18 +0200] Web-Request: "GET /.git/config", User-Agent: "Mozilla/5.0 (X11; Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" show less	Bad Web Bot Web App Attack
Anonymous	2025-10-03 16:32:04 (10 months ago)	Failed login attempt detected by Fail2Ban in recidive jail	Brute-Force
🇫🇷 tr1n	2025-10-03 16:28:03 (10 months ago)	Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET ... show more Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config UA: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Maxthon/4.4.6.1000 Chrome/30.0.1599.101 Safari/537.36 show less	Bad Web Bot
🇧🇪 cmbplf	2025-10-03 16:28:01 (10 months ago)	2.918 requests with url.path */.git/config	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2025-10-03 16:27:59 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 13.217.32.250 (ec2-13-217-32-250.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 13.217.32.250 (ec2-13-217-32-250.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 03 12:27:54.674465 2025] [security2:error] [pid 2976:tid 2976] [client 13.217.32.250:40552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stgeorgellc.com"] [uri "/.git/config"] [unique_id "aN_5inOG2T7qUzRz-AtR_gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.54.114.97

🇺🇸 104.219.248.236

🇨🇳 42.234.193.85

🇺🇸 34.26.119.202

🇨🇳 221.233.53.185

🇦🇷 201.220.22.228

🇬🇧 89.37.172.132

🇩🇪 87.106.29.151

🇺🇸 35.237.13.218

🇰🇷 211.223.41.90

🇳🇱 185.242.226.63

🇺🇸 136.108.54.227

🇹🇼 118.163.101.39

🇮🇩 103.99.27.125

🇮🇶 62.201.228.210

🇺🇸 44.222.192.114

🇺🇸 35.237.176.98

🇩🇪 167.94.146.36

🇺🇸 162.216.149.229

🇬🇧 35.203.211.103