JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.236.152.229

13.236.152.229 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 34%: ?

34%

ISP	Amazon Corporate Services Pty Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-13-236-152-229.ap-southeast-2.compute.amazonaws.com
Domain Name	amazon.com.au
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.236.152.229

Whois 13.236.152.229

IP Abuse Reports for 13.236.152.229:

This IP address has been reported a total of 6 times from 5 distinct sources. 13.236.152.229 was first reported on July 26th 2026, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-28 22:00:40 (19 hours ago)	Auto-ban: >3000 req/min op 2026-07-28	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-28 05:33:53 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 13.236.152.229 (ec2-13-236-152-229.ap-southeast ... show more (mod_security) mod_security (id:210492) triggered by 13.236.152.229 (ec2-13-236-152-229.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 01:33:47.475336 2026] [security2:error] [pid 7642:tid 7642] [client 13.236.152.229:58578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hatefmusic.com"] [uri "/.git/config"] [unique_id "amg_Ox39wQt4xELcxvJ1UQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-28 04:39:27 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 13.236.152.229 (ec2-13-236-152-229.ap-southeast ... show more (mod_security) mod_security (id:210492) triggered by 13.236.152.229 (ec2-13-236-152-229.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 00:39:21.632397 2026] [security2:error] [pid 355906:tid 355906] [client 13.236.152.229:40066] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "haswebdesign.davidfortier.com"] [uri "/.git/config"] [unique_id "amgyee_wtGsSEZJryZIvJwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Lee Daniel	2026-07-28 04:11:07 (1 day ago)	13.236.152.229 - - [28/Jul/2026:00:11:06 -0400] "GET /.env HTTP/1.1" 403 6327 "-" "Mozilla/5.0 (Wind ... show more 13.236.152.229 - - [28/Jul/2026:00:11:06 -0400] "GET /.env HTTP/1.1" 403 6327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-27 10:06:50 (2 days ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇫🇮 sw0ok	2026-07-26 03:19:07 (3 days ago)	time="2026-07-26T03:18:51Z" level=info msg="Access to https://dash.sw0ok.dev/dashboard/ (method POST ... show more time="2026-07-26T03:18:51Z" level=info msg="Access to https://dash.sw0ok.dev/dashboard/ (method POST) is not authorized to user <anonymous>, responding with status code 303 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fdash.sw0ok.dev%2Fdashboard%2F&rm=POST" method=GET path=/api/authz/forward-auth remote_ip=13.236.152.229 time="2026-07-26T03:18:52Z" level=info msg="Access to https://dash.sw0ok.dev/dashboard/ (method POST) is not authorized to user <anonymous>, responding with status code 303 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fdash.sw0ok.dev%2Fdashboard%2F&rm=POST" method=GET path=/api/authz/forward-auth remote_ip=13.236.152.229 time="2026-07-26T03:18:52Z" level=info msg="Access to https://dash.sw0ok.dev/dashboard/ (method POST) is not authorized to user <anonymous>, responding with status code 303 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fdash.sw0ok.dev%2Fdashboard%2F&rm=POST" method=GET path=/api/authz/forwar ... show less	Brute-Force

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.86.123.8

🇯🇵 160.251.215.51

🇨🇳 110.189.152.166

🇭🇰 45.116.76.138

🇺🇸 34.75.252.82

🇺🇸 172.172.196.177

🇩🇪 167.233.140.61

🇩🇪 167.94.146.38

🇳🇱 91.92.47.90

🇸🇬 74.114.31.152

🇳🇱 45.148.10.141

🇺🇦 38.137.251.100

🇸🇬 2404:6800:4003:c20::123

🇰🇷 211.51.132.104

🇮🇩 203.114.238.42

🇧🇷 179.157.111.212

🇨🇳 150.255.252.243

🇺🇸 146.174.32.176

🇮🇳 103.182.132.154

🇧🇷 45.170.98.199