JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.39.25.209

13.39.25.209 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 44%: ?

44%

ISP	Amazon Data Services France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-13-39-25-209.eu-west-3.compute.amazonaws.com
Domain Name	amazon.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.39.25.209

Whois 13.39.25.209

IP Abuse Reports for 13.39.25.209:

This IP address has been reported a total of 10 times from 8 distinct sources. 13.39.25.209 was first reported on July 26th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-29 07:00:00 (3 days ago)	Automated Apache web application probing in selected 24h window; attempts=422, unique_paths=211, err ... show more Automated Apache web application probing in selected 24h window; attempts=422, unique_paths=211, error_responses=422; targets include WordPress, .env/.git, phpMyAdmin, autodiscover, wpad.dat and related probe paths. show less	Web App Attack
Anonymous	2026-07-29 07:00:00 (3 days ago)	Apache probe; attempts=633; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.en ... show more Apache probe; attempts=633; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.env.bak \| /.env.ci \| /.env.dev \| /.env.development \| /.env.dist \| /.env.docker \| /.env.example \| /.env.fly \| /.env.json \| /.env.live \| /.env.local \| /.env.neon \| /.env.old \| /.env.preprod \| /.env.prod \| /.env.production \| /.env.railway \| /.env.remote \| /.env.render \| /.env.sample \| /.env.save \| /.env.stage \| /.env.staging \| /.env.supabase \| /.env.swp \| /.env.test \| /.env.txt \| /.env.uat \| /.env.vault \| /.env.vercel \| /.env.yaml \| /.env.yml \| /.env~ \| /.git/.env \| /.git/config \| /actions/.env \| /admin-panel/.env \| /admin/.env \| /administrator/.env \| /angular/.env \| /ansible/.env \| /api/.env \| /api/dev/.env \| /api/staging/.env \| /api/v1/.env \| /api/v2/.env \| /api/v3/.env \| /app/.env \| /application/.env \| /apps/.env \| /assets/.env \| /aws/.env \| /azure/.env \| /backend/.env \| /backup/.env \| /backups/.env \| /beta/.env \| ... [211 exact paths total] show less	Web App Attack
Anonymous	2026-07-28 18:08:00 (4 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FR, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FR, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇩🇪 yitzhaq	2026-07-28 05:22:29 (4 days ago)	13.39.25.209 - - [28/Jul/2026:07:22:28 +0200] "GET /development/.env HTTP/1.1" 404 510 "-" "Mozilla/ ... show more 13.39.25.209 - - [28/Jul/2026:07:22:28 +0200] "GET /development/.env HTTP/1.1" 404 510 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.39.25.209 - - [28/Jul/2026:07:22:28 +0200] "GET /production/.env HTTP/1.1" 404 510 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.39.25.209 - - [28/Jul/2026:07:22:28 +0200] "GET /config/app/.env HTTP/1.1" 404 510 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.39.25.209 - - [28/Jul/2026:07:22:28 +0200] "GET /.env.vault HTTP/1.1" 404 510 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.39.25.209 - - [28/Jul/2026:07:22:28 +0200] "GET /.env.fly HTTP/1.1" 404 510 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari show less	Web App Attack Hacking
🇳🇱 Site.eu	2026-07-28 03:36:08 (4 days ago)	Excessive 404/403 errors	Brute-Force
🇿🇦 conure	2026-07-28 01:52:35 (4 days ago)	csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s	Web App Attack
Anonymous	2026-07-27 18:04:34 (5 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FR, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FR, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-07-27 15:55:03 (5 days ago)	crowdsecurity/http-crawl-non_statics	Brute-Force Web App Attack
🇮🇹 VHosting	2026-07-27 10:35:03 (5 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 legionMCCXV	2026-07-26 04:06:02 (6 days ago)	PHP/WordPress shell scanner on non-PHP site — repeated requests to .php paths returning 404.	Bad Web Bot

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 203.154.158.195

🇺🇸 104.143.77.9

🇬🇧 87.236.176.44

🇬🇭 41.139.28.178

🇨🇦 20.104.18.253

🇺🇸 159.65.33.245

🇭🇰 150.5.141.198

🇸🇬 119.234.10.171

🇨🇳 117.72.76.203

🇳🇱 45.148.10.152

🇺🇸 174.79.87.115

🇻🇳 103.147.123.61

🇮🇩 103.112.5.35

🇷🇴 92.118.39.77

🇺🇸 76.140.150.225

🇭🇰 223.197.178.95

🇭🇰 152.32.171.184

🇨🇳 150.255.250.42

🇸🇬 97.74.86.176

🇮🇹 93.63.84.182