JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

3.213.207.21

Neutral Activity

Abuse confidence score ?

0% Low Risk

37 reports

31 reporters · latest 3 years ago

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-3-213-207-21.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

3.213.207.21 has been reported 37 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 3.213.207.21

Export CSV

This IP address has been reported a total of 37 times from 31 distinct sources. 3.213.207.21 was first reported on May 15th 2023, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 preissler.co.uk	2023-05-20 10:50:57 (3 years ago)	Web scanning	Web App Attack
🇬🇧 openstrike.co.uk	2023-05-20 05:12:02 (3 years ago)	24 attacks on PHP URLs: 3.213.207.21 - - [19/May/2023:08:01:19 +0100] "GET /wp-config.php.txt HTTP/1 ... show more 24 attacks on PHP URLs: 3.213.207.21 - - [19/May/2023:08:01:19 +0100] "GET /wp-config.php.txt HTTP/1.1" 404 1120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" show less	Web App Attack
🇧🇪 sid3windr	2023-05-20 01:00:01 (3 years ago)	GET /.env (Tarpitted for 21h59m6s, wasted 4.53MB)	Web App Attack
🇧🇪 sid3windr	2023-05-20 00:44:53 (3 years ago)	GET /.env (Tarpitted for 10h27m15s, wasted 2.15MB)	Web App Attack
🇧🇪 taivas.nl	2023-05-19 10:02:04 (3 years ago)	Bad_requests	Bad Web Bot
🇬🇧 openstrike.co.uk	2023-05-19 05:12:02 (3 years ago)	18 attacks on PHP URLs: 3.213.207.21 - - [19/May/2023:00:56:28 +0100] "GET /wp-config.php.txt HTTP/1 ... show more 18 attacks on PHP URLs: 3.213.207.21 - - [19/May/2023:00:56:28 +0100] "GET /wp-config.php.txt HTTP/1.1" 404 988 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" show less	Web App Attack
🇦🇺 weblite	2023-05-19 00:53:07 (3 years ago)	WP_EXPLOIT_PROBE WP_MALWARE_PROBE	Hacking Web App Attack
Anonymous	2023-05-18 23:35:05 (3 years ago)	(mod_security) mod_security triggered on hostname [redacted] 3.213.207.21 (US/United States/ec2-3-21 ... show more (mod_security) mod_security triggered on hostname [redacted] 3.213.207.21 (US/United States/ec2-3-213-207-21.compute-1.amazonaws.com): (CF_ENABLE) show less	SQL Injection
🇩🇪 mxinfra	2023-05-18 20:59:13 (3 years ago)	Fail2Ban triggered by plesk-modsecurity Thu 18 May 2023 10:59:12 PM CEST	Hacking Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2023-05-18 19:04:59 (3 years ago)	paulshipley.id.au:443 3.213.207.21 - - [19/May/2023:05:04:30 +1000] "GET //.env HTTP/1.1" 403 675 "- ... show more paulshipley.id.au:443 3.213.207.21 - - [19/May/2023:05:04:30 +1000] "GET //.env HTTP/1.1" 403 675 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" paulshipley.id.au:443 3.213.207.21 - - [19/May/2023:05:04:31 +1000] "GET //.env.bak HTTP/1.1" 403 675 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" paulshipley.id.au:443 3.213.207.21 - - [19/May/2023:05:04:31 +1000] "GET //admin/.env HTTP/1.1" 403 675 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" paulshipley.id.au:443 3.213.207.21 - - [19/May/2023:05:04:31 +1000] "GET //laravel/.env HTTP/1.1" 403 675 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" paulshipley.id.au:443 3.213.207.21 - - [19/May/2023:05 ... show less	Web App Attack
🇺🇸 npcautomotive.com	2023-05-18 18:44:03 (3 years ago)	Attempted access of administrative/configuration resources (looking for /admin/.env)	Hacking
🇩🇪 psauxit	2023-05-18 17:49:49 (3 years ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ... show more Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping show less	Hacking Web App Attack
🇦🇺 paulshipley.com.au	2023-05-18 16:59:52 (3 years ago)	paulshipley.com.au:443 3.213.207.21 - - [19/May/2023:02:59:20 +1000] "GET //.env HTTP/1.1" 403 675 " ... show more paulshipley.com.au:443 3.213.207.21 - - [19/May/2023:02:59:20 +1000] "GET //.env HTTP/1.1" 403 675 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" paulshipley.com.au:443 3.213.207.21 - - [19/May/2023:02:59:21 +1000] "GET //.env.bak HTTP/1.1" 403 675 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" paulshipley.com.au:443 3.213.207.21 - - [19/May/2023:02:59:21 +1000] "GET //admin/.env HTTP/1.1" 403 675 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" paulshipley.com.au:443 3.213.207.21 - - [19/May/2023:02:59:22 +1000] "GET //laravel/.env HTTP/1.1" 403 675 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" paulshipley.com.au:443 3.213.207.21 - - [19/May/20 ... show less	Web App Attack
🇫🇷 uhlhosting	2023-05-18 16:57:53 (3 years ago)	idleslidegloves.com 3.213.207.21 - - [18/May/2023:18:57:47.447327 +0200] "GET /.env HTTP/1.1" 403 19 ... show more idleslidegloves.com 3.213.207.21 - - [18/May/2023:18:57:47.447327 +0200] "GET /.env HTTP/1.1" 403 199 "-" "-" ZGZZC5bHWlu52dt_AP2DagAAAQU "-" /apache/20230518/20230518-1857/20230518-185747-ZGZZC5bHWlu52dt_AP2DagAAAQU 0 2250 md5:8448ca59210b2028b323d235e7a15c65 idleslidegloves.com 3.213.207.21 - - [18/May/2023:18:57:47.539686 +0200] "GET /.env.bak HTTP/1.1" 403 199 "-" "-" ZGZZC5bHWlu52dt_AP2DawAAAQ8 "-" /apache/20230518/20230518-1857/20230518-185747-ZGZZC5bHWlu52dt_AP2DawAAAQ8 0 2258 md5:7c0ca10c651146c6309a526ad0049ea2 idleslidegloves.com 3.213.207.21 - - [18/May/2023:18:57:48.851869 +0200] "GET /.aws/credentials HTTP/1.1" 403 199 "-" "-" ZGZZDJbHWlu52dt_AP2DcAAAAQA "-" /apache/20230518/20230518-1857/20230518-185748-ZGZZDJbHWlu52dt_AP2DcAAAAQA 0 2262 md5:0f7e3081757676475a05eb393d4bf32a idleslidegloves.com 3.213.207.21 - - [18/May/2023:18:57:51.660439 +0200] "GET /.vscode/sftp.json HTTP/1.1" 403 199 "-" "-" ZGZZD5bHWlu52dt_AP2DegAAAQ8 "-" /apache/20230518/20230518-1857/20230518-185 ... show less	DDoS Attack Brute-Force
🇦🇺 paulshipley.com.au	2023-05-18 14:53:38 (3 years ago)	paulshipley.info:443 3.213.207.21 - - [19/May/2023:00:53:22 +1000] "GET /.env HTTP/1.1" 403 675 "-" ... show more paulshipley.info:443 3.213.207.21 - - [19/May/2023:00:53:22 +1000] "GET /.env HTTP/1.1" 403 675 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" paulshipley.info:443 3.213.207.21 - - [19/May/2023:00:53:22 +1000] "GET /.env.bak HTTP/1.1" 403 675 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" paulshipley.info:443 3.213.207.21 - - [19/May/2023:00:53:22 +1000] "GET /admin/.env HTTP/1.1" 403 675 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" paulshipley.info:443 3.213.207.21 - - [19/May/2023:00:53:23 +1000] "GET /laravel/.env HTTP/1.1" 403 675 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" paulshipley.info:443 3.213.207.21 - - [19/May/2023:00:53:23 +1 ... show less	Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.109

🇺🇸 195.184.76.63

🇺🇸 185.180.141.105

🇳🇱 185.107.80.93

🇰🇷 180.182.245.133

🇳🇱 109.160.32.117

🇮🇩 103.168.135.187

🇷🇺 92.241.19.213

🇳🇱 91.92.47.252

🇺🇸 85.254.128.226

🇩🇪 172.70.243.230

🇺🇸 129.212.181.73

🇰🇷 112.217.188.122

🇫🇷 91.231.89.84

🇫🇷 91.231.89.77

🇷🇺 89.108.125.105

🇨🇳 58.209.234.84

🇺🇸 43.130.111.40

🇷🇴 2.57.122.74

🇨🇳 223.86.148.242