JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.228.71.212

13.228.71.212 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 34%: ?

34%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-13-228-71-212.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.228.71.212

Whois 13.228.71.212

IP Abuse Reports for 13.228.71.212:

This IP address has been reported a total of 13 times from 9 distinct sources. 13.228.71.212 was first reported on November 26th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 COMAITE	2026-08-23 02:37:34 (3 days ago)	Suspicious URL access.	Web App Attack
🇳🇿 Antinson	2026-08-21 12:42:57 (5 days ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇧🇪 Savvii	2026-07-28 06:18:04 (4 weeks ago)	20 attempts against mh-misbehave-ban on exodus	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-07-28 03:22:09 (4 weeks ago)	20 attempts against mh-misbehave-ban on chard	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 11:31:29 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 13.228.71.212 (ec2-13-228-71-212.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 13.228.71.212 (ec2-13-228-71-212.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 07:31:23.267444 2026] [security2:error] [pid 90732:tid 90732] [client 13.228.71.212:39330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aboutio.com"] [uri "/.git/config"] [unique_id "amdBi65K_3nZToxSoy3OnQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-27 10:05:14 (4 weeks ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (123/60 min)'; Requests=123	Port Scan
Anonymous	2026-07-25 13:51:02 (1 month ago)	Bot / scanning and/or hacking attempts: GET /.env.staging HTTP/1.1, GET /.env.example HTTP/1.1, GET ... show more Bot / scanning and/or hacking attempts: GET /.env.staging HTTP/1.1, GET /.env.example HTTP/1.1, GET /.env.live HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.old HTTP/1.1, GET /.env.uat HTTP/1.1, GET /.env.docker HTTP/1.1, GET /.env.ci HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env.development HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.test HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.remote HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.stage HTTP/1.1, GET /.env.preprod HTTP/1.1, GET /.env.sample HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env.dist HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 09:41:54 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 13.228.71.212 (ec2-13-228-71-212.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 13.228.71.212 (ec2-13-228-71-212.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 05:41:49.406606 2026] [security2:error] [pid 10436:tid 10452] [client 13.228.71.212:60228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aisapy.com"] [uri "/.git/config"] [unique_id "amSE3SiAgDxt1QW4gpa7WQAAAY0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-24 22:03:17 (1 month ago)	Auto-ban: >3000 req/min op 2026-07-24	Web App Attack SSH Hacking
🇮🇹 VHosting	2026-07-24 11:55:02 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 05:15:56 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 13.228.71.212 (ec2-13-228-71-212.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 13.228.71.212 (ec2-13-228-71-212.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 01:15:51.779907 2026] [security2:error] [pid 3982549:tid 3982549] [client 13.228.71.212:39082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alanmariotti.com"] [uri "/.git/config"] [unique_id "amL1B7OMMJT3RnvfSE6qMAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 04:40:30 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 13.228.71.212 (ec2-13-228-71-212.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 13.228.71.212 (ec2-13-228-71-212.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 00:40:25.195042 2026] [security2:error] [pid 3276083:tid 3276083] [client 13.228.71.212:48780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alanbeckwith.com"] [uri "/.git/config"] [unique_id "amLsuXn7hoIQXj4wY1AqOwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 oonux.net	2024-11-26 02:41:44 (1 year ago)	RouterOS: Scanning detected TCP 13.228.71.212:17736 > x.x.x.x:80	Port Scan

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 35.189.214.21

🇺🇸 3.144.189.126

🇺🇸 2607:f8b0:4001:c12::12b

🇺🇸 172.214.209.153

🇮🇳 103.87.54.249

🇺🇸 100.51.6.16

🇺🇸 72.17.34.38

🇫🇷 45.77.61.56

🇺🇸 40.76.253.60

🇺🇸 2400:cb00:988:1000:4a33:726b:47b:71e6

🇵🇰 223.123.16.238

🇺🇸 192.101.68.88

🇧🇴 190.109.227.119

🇧🇷 190.89.137.29

🇺🇸 157.55.39.11

🇺🇸 65.49.1.228

🇷🇴 2.57.121.112

🇺🇸 2400:cb00:119:1000:9e74:7cf5:303a:e784

🇺🇸 2400:cb00:119:1000:8959:a8ad:fefd:7e0c

🇳🇿 222.152.223.108