JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.39.112.206

13.39.112.206

Neutral Activity

17 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Amazon Data Services France

Usage Type

Data Center/Web Hosting/Transit

ASN

AS16509

Hostname(s)

ec2-13-39-112-206.eu-west-3.compute.amazonaws.com

Domain Name

amazon.com

Country

🇫🇷 France

City

Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

13.39.112.206 has been reported 17 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 13.39.112.206:

This IP address has been reported a total of 17 times from 15 distinct sources. 13.39.112.206 was first reported on September 13th 2025, and the most recent report was 11 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 yvoictra	2025-09-15 03:54:49 (11 months ago)	13.39.112.206 - - [15/Sep/2025:05:54:48 +0200] "GET /.env HTTP/1.1" 404 134 "https://www.google.com/ ... show more 13.39.112.206 - - [15/Sep/2025:05:54:48 +0200] "GET /.env HTTP/1.1" 404 134 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/537.9 (KHTML, like Gecko) Version/6.1.8 Safari/536.18" 13.39.112.206 - - [15/Sep/2025:05:54:48 +0200] "GET /.remote HTTP/1.1" 404 134 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/537.9 (KHTML, like Gecko) Version/6.1.8 Safari/536.18" 13.39.112.206 - - [15/Sep/2025:05:54:48 +0200] "GET /.local HTTP/1.1" 404 134 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/537.9 (KHTML, like Gecko) Version/6.1.8 Safari/536.18" 13.39.112.206 - - [15/Sep/2025:05:54:48 +0200] "GET /.production HTTP/1.1" 404 134 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/537.9 (KHTML, like Gecko) Version/6.1.8 Safari/536.18" 13.39.112.206 - - [15/Sep/2025:05:54:48 +0200] "GET //vendor/.env HTTP/1.1" 404 134 "https://www.google.com/" "Mozilla/5.0 (Linux i386; X11) AppleWebKit/537.9 (KHTML, like Gecko) Version/6 ... show less	Brute-Force Web App Attack
🇳🇱 artificialred.nl	2025-09-15 03:47:01 (11 months ago)	[ModSecurity probing] other_vhosts_access.log:default:80 13.39.112.206 - - [15/Sep/2025:05:46:28 +02 ... show more [ModSecurity probing] other_vhosts_access.log:default:80 13.39.112.206 - - [15/Sep/2025:05:46:28 +0200] GET //v1/.env HTTP/1.0" 403 433 "https://redacted-domain.com/" "Mozilla/5.0 (Windows; U; MSIE 8.0; Windows NT 5.1; .NET CLR 1.4.19297; Win64; x64)" other_vhosts_access.log:default:80 13.39.112.206 - - [15/Sep/2025:05:46:28 +0200] "GET //v2/.env HTTP/1.0" 403 433 "https://redacted-domain.com/" "Mozilla/5.0 (Windows; U; MSIE 8.0; Windows NT 5.1; .NET CLR 1.4.19297; Win64; x64)" other_vhosts_access.log:default:80 13.39.112.206 - - [15/Sep/2025:05:46:28 +0200] "GET //administrator/.env HTTP/1.0" 403 433 "https://redacted-domain.com/" "Mozilla/5.0 (Windows; U; MSIE 8.0; Windows NT 5.1; .NET CLR 1.4.19297; Win64; x64)" other_vhosts_access.log:default:80 13.39.112.206 - - [15/Sep/2025:05:46:28 +0200] "GET //laravel/.env HTTP/1.0" 403 433 "https://redacted-domain.com/" "Mozilla/5.0 (Windows; U; MSIE 8.0; Windows NT 5.1; .NET CLR 1.4.19297; Win64; x64)" other_vhosts_access.log:default:80 13.39.112.206 - - [15/Sep/20 show less	Port Scan Web App Attack
🇫🇷 Mölkky	2025-09-15 02:01:10 (11 months ago)	Probe	Port Scan
🇺🇸 zorrigas	2025-09-14 23:00:18 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 13.39.112.206 (FR/France/ec2-13-39-112-206.eu-w ... show more (mod_security) mod_security (id:210492) triggered by 13.39.112.206 (FR/France/ec2-13-39-112-206.eu-west-3.compute.amazonaws.com): 5 in the last 3600 secs show less	Brute-Force
🇺🇸 Starburst SysOp Team	2025-09-14 22:52:48 (11 months ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-stl2-17)	Hacking Bad Web Bot
🇳🇱 homeshowdomain.nl	2025-09-14 21:59:07 (11 months ago)	Auto-ban: >500 bad req/min on 2025-09-13	Hacking Web App Attack SSH
🇨🇿 ddw	2025-09-14 04:36:34 (11 months ago)	Access Violation Attempts - Multiple 403 Forbidden responses.	Hacking Bad Web Bot Web App Attack
🇳🇱 Site.eu	2025-09-14 00:17:58 (11 months ago)	Excessive 404/403 errors	Brute-Force
🇳🇱 Savvii	2025-09-13 22:58:39 (11 months ago)	20 attempts against mh-misbehave-ban on frost	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-13 22:03:07 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 13.39.112.206 (ec2-13-39-112-206.eu-west-3.comp ... show more (mod_security) mod_security (id:210492) triggered by 13.39.112.206 (ec2-13-39-112-206.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 18:02:59.846119 2025] [security2:error] [pid 32686:tid 32686] [client 13.39.112.206:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hampus.otterb.org"] [uri "/.env"] [unique_id "aMXqE7f8wZtWGldyDLvQHwAAAAQ"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-09-13 21:52:00 (11 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇨🇦 Dunham Support	2025-09-13 21:04:28 (11 months ago)	(mod_security) mod_security triggered on hostname [redacted] 13.39.112.206 (FR/France/ec2-13-39-112- ... show more (mod_security) mod_security triggered on hostname [redacted] 13.39.112.206 (FR/France/ec2-13-39-112-206.eu-west-3.compute.amazonaws.com) show less	SQL Injection
🇸🇪 vaia.cloud	2025-09-13 20:40:02 (11 months ago)	trying wp-login.php/xmlrpc.php 30 times in 1 minutes	Brute-Force Web App Attack
🇩🇪 Savvii	2025-09-13 20:04:21 (11 months ago)	20 attempts against mh-misbehave-ban on radon	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2025-09-13 19:30:31 (11 months ago)	609 requests with url.path *.env	Brute-Force Bad Web Bot

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 193.233.120.140

🇵🇱 142.250.109.132

🇺🇸 162.216.150.132

🇺🇸 162.216.149.187

🇭🇰 118.193.36.107

🇩🇪 116.202.151.220

🇻🇳 58.187.184.162

🇧🇷 45.238.2.67

🇻🇳 45.117.177.47

🇺🇸 35.235.66.233

🇬🇧 35.203.210.105

🇻🇳 27.64.56.57

🇳🇱 195.178.110.62

🇺🇸 162.216.150.205

🇮🇳 117.211.16.137

🇺🇸 104.131.163.128

🇺🇸 45.156.129.117

🇵🇱 45.141.233.16

🇺🇸 45.66.209.87

🇺🇸 34.172.7.183