JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.36.38.29

13.36.38.29 was found in our database!

This IP was reported 58 times. Confidence of Abuse is 0%: ?

ISP	Amazon Data Services France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-13-36-38-29.eu-west-3.compute.amazonaws.com
Domain Name	amazon.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.36.38.29

Whois 13.36.38.29

IP Abuse Reports for 13.36.38.29:

This IP address has been reported a total of 58 times from 35 distinct sources. 13.36.38.29 was first reported on May 27th 2025, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 adembaysal	2025-07-02 18:45:05 (1 year ago)	Domain : testservice-hesapsihirbazi.isteasistan.com Rule : config 2025-05-27 09:38:41 *hidden-priv ... show more Domain : testservice-hesapsihirbazi.isteasistan.com Rule : config 2025-05-27 09:38:41 hidden-privacy** GET /.vscode/sftp.json - 443 - 13.36.38.29 HTTP/1.1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 - testservice-hesapsihirbazi.isteasistan.com 404 0 2 1522 250 60 - - show less	Hacking SQL Injection
🇫🇷 adembaysal	2025-07-01 17:35:03 (1 year ago)	Domain : testservice-hesapsihirbazi.isteasistan.com Rule : config 2025-05-27 09:38:41 *hidden-priv ... show more Domain : testservice-hesapsihirbazi.isteasistan.com Rule : config 2025-05-27 09:38:41 hidden-privacy** GET /.vscode/sftp.json - 443 - 13.36.38.29 HTTP/1.1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 - testservice-hesapsihirbazi.isteasistan.com 404 0 2 1522 250 60 - - show less	Hacking SQL Injection
🇦🇹 René Hickersberger	2025-06-08 08:00:13 (1 year ago)	[2025-05-27T12:00:25Z] Malicious request to /.vscode/sftp.json	Hacking Bad Web Bot Web App Attack
🇦🇹 René Hickersberger	2025-06-02 20:14:11 (1 year ago)	[2025-05-27T12:00:25Z] Malicious request to /.vscode/sftp.json	Hacking Bad Web Bot Web App Attack
🇫🇷 adembaysal	2025-05-28 10:19:05 (1 year ago)	Domain : testservice-hesapsihirbazi.isteasistan.com Rule : config 2025-05-27 09:38:41 *hidden-priv ... show more Domain : testservice-hesapsihirbazi.isteasistan.com Rule : config 2025-05-27 09:38:41 hidden-privacy** GET /.vscode/sftp.json - 443 - 13.36.38.29 HTTP/1.1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 - testservice-hesapsihirbazi.isteasistan.com 404 0 2 1522 250 60 - - show less	Hacking SQL Injection
🇬🇧 SecondEdge	2025-05-28 08:22:31 (1 year ago)	A web attack was detected from 13.36.38.29 (France / Paris / Paris) against second-edge.co.uk (SFTP ... show more A web attack was detected from 13.36.38.29 (France / Paris / Paris) against second-edge.co.uk (SFTP Credential Exposure) over 5s. show less	Web App Attack
🇬🇧 openstrike.co.uk	2025-05-28 05:13:33 (1 year ago)	4 attacks on password grabbing URLs: GET /.vscode/sftp.json HTTP/1.1	Hacking
🇺🇸 octageeks.com	2025-05-28 04:09:25 (1 year ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇫🇷 tecnicorioja	2025-05-27 22:00:15 (1 year ago)	(Mod_security) [27/May/2025:11:14:16.627351	Brute-Force Bad Web Bot Web App Attack
🇨🇦 polycoda	2025-05-27 19:27:39 (1 year ago)	📄 Probes for tons of inexistent files and PHP scripts	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-05-27 16:34:35 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 13.36.38.29 (ec2-13-36-38-29.eu-west-3.compute. ... show more (mod_security) mod_security (id:210492) triggered by 13.36.38.29 (ec2-13-36-38-29.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 27 12:34:28.427872 2025] [security2:error] [pid 244237:tid 244237] [client 13.36.38.29:52383] [client 13.36.38.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "northfultonneurology.com"] [uri "/sftp-config.json"] [unique_id "aDXplDW6YSYHtdfIg9zcLwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-05-27 16:30:18 (1 year ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 MogBox	2025-05-27 16:25:12 (1 year ago)	(RSRCTROLL) Vulnerability Trolling: GET/POST /sftp-config.json 13.36.38.29 (FR/France/ec2-13-36-38-2 ... show more (RSRCTROLL) Vulnerability Trolling: GET/POST /sftp-config.json 13.36.38.29 (FR/France/ec2-13-36-38-29.eu-west-3.compute.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 13.36.38.29 - - [27/May/2025:12:24:58 -0400] "GET /sftp-config.json HTTP/1.1" 301 236 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" show less	Hacking
🇺🇸 TPI-Abuse	2025-05-27 16:12:39 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 13.36.38.29 (ec2-13-36-38-29.eu-west-3.compute. ... show more (mod_security) mod_security (id:210492) triggered by 13.36.38.29 (ec2-13-36-38-29.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 27 12:12:35.103125 2025] [security2:error] [pid 339565:tid 339565] [client 13.36.38.29:62719] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "livingminimal.com"] [uri "/sftp-config.json"] [unique_id "aDXkc4xM8wiroQQ7aoMZgQAAAC4"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Savoie	2025-05-27 15:27:00 (1 year ago)	13.36.38.29 *.* - [27/May/2025:17:27:35 +0200] "GET /sftp-config.json HTTP/1.1" 302 225 "-" "Moz ... show more 13.36.38.29 *.* - [27/May/2025:17:27:35 +0200] "GET /sftp-config.json HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 13.36.38.29 *.* - [27/May/2025:17:27:38 +0200] "GET /.vscode/sftp.json HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 195.242.214.179

🇧🇷 177.10.117.73

🇸🇬 165.22.53.101

🇨🇦 138.197.164.175

🇺🇸 137.184.140.32

🇳🇱 91.92.40.19

🇺🇸 71.6.232.22

🇺🇸 54.183.203.189

🇺🇸 35.193.187.4

🇺🇸 23.137.105.195

🇬🇧 2a09:bac1:2880:840::319:da

🇰🇷 220.85.210.200

🇳🇱 185.223.235.48

🇻🇳 116.99.169.38

🇬🇦 102.142.96.124

🇺🇸 98.206.61.139

🇳🇱 64.225.73.248

🇨🇳 61.160.242.228

🇭🇰 38.54.23.236

🇺🇸 2a09:bac5:9441:3af::5e:5d