JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.218.114.34

13.218.114.34 was found in our database!

This IP was reported 136 times. Confidence of Abuse is 0%: ?

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-13-218-114-34.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.218.114.34

Whois 13.218.114.34

IP Abuse Reports for 13.218.114.34:

This IP address has been reported a total of 136 times from 95 distinct sources. 13.218.114.34 was first reported on September 8th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 Scampi_ml	2026-06-10 13:24:05 (1 month ago)	66x HTTP 403/404 responses in short timeframe. Likely vulnerability scanner or brute-force attack on ... show more 66x HTTP 403/404 responses in short timeframe. Likely vulnerability scanner or brute-force attack on web application paths. show less	Bad Web Bot Web App Attack
🇬🇧 preissler.co.uk	2025-09-27 12:42:15 (9 months ago)	Web scanning	Web App Attack
🇺🇸 infra-monitor	2025-09-16 09:00:02 (10 months ago)	Automated ban via infra-monitor: crowdsecurity/http-sensitive-files	Web App Attack
🇩🇪 Skyrider	2025-09-13 06:56:14 (10 months ago)	13.218.114.34 - - [13/Sep/2025:08:56:12 +0200] "GET /pms?module=logging&file_name=../../../../../../ ... show more 13.218.114.34 - - [13/Sep/2025:08:56:12 +0200] "GET /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000 HTTP/2.0" 404 162 "-" "Mozilla/5.0" 13.218.114.34 - - [13/Sep/2025:08:56:12 +0200] "GET /admin/config?cmd=cat+/root/.aws/credentials HTTP/2.0" 404 162 "-" "Mozilla/5.0" 13.218.114.34 - - [13/Sep/2025:08:56:13 +0200] "GET /.env HTTP/2.0" 404 162 "-" "Mozilla/5.0" 13.218.114.34 - - [13/Sep/2025:08:56:13 +0200] "GET /.env.local HTTP/2.0" 404 162 "-" "Mozilla/5.0" 13.218.114.34 - - [13/Sep/2025:08:56:13 +0200] "GET /.env.production HTTP/2.0" 404 162 "-" "Mozilla/5.0" show less	Bad Web Bot Web App Attack
🇬🇧 blik2108	2025-09-13 06:48:21 (10 months ago)	13.218.114.34 - - [13/Sep/2025:07:48:20 +0100] "GET /pms?module=logging&file_name=../../../../../../ ... show more 13.218.114.34 - - [13/Sep/2025:07:48:20 +0100] "GET /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000 HTTP/1.1" 404 1460 "-" "Mozilla/5.0" 13.218.114.34 - - [13/Sep/2025:07:48:21 +0100] "GET /admin/config?cmd=cat+/root/.aws/credentials HTTP/1.1" 404 1460 "-" "Mozilla/5.0" 13.218.114.34 - - [13/Sep/2025:07:48:21 +0100] "GET /.env HTTP/1.1" 404 1460 "-" "Mozilla/5.0" 13.218.114.34 - - [13/Sep/2025:07:48:21 +0100] "GET /.env.local HTTP/1.1" 404 1460 "-" "Mozilla/5.0" 13.218.114.34 - - [13/Sep/2025:07:48:21 +0100] "GET /.env.production HTTP/1.1" 404 1460 "-" "Mozilla/5.0" ... show less	Brute-Force Web App Attack
🇺🇸 snappic	2025-09-13 06:40:27 (10 months ago)	Scanning for AWS credentials [GET /pms?module=logging&file_name=../../../../../../~/.aws/credentials ... show more Scanning for AWS credentials [GET /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000] [Mozilla/5.0] show less	Bad Web Bot Web App Attack
🇺🇸 mawan	2025-09-13 06:30:16 (10 months ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇮🇩 zam	2025-09-13 06:25:44 (10 months ago)	13.218.114.34 - - [13/Sep/2025:06:25:34 +0000] "GET /pms?module=logging\u0026file_name=../../../../. ... show more 13.218.114.34 - - [13/Sep/2025:06:25:34 +0000] "GET /pms?module=logging\u0026file_name=../../../../../../~/.aws/credentials\u0026number_of_lines=10000 HTTP/1.1" 404 70935 13.218.114.34 - - [13/Sep/2025:06:25:35 +0000] "GET /admin/config?cmd=cat+/root/.aws/credentials HTTP/1.1" 404 70935 13.218.114.34 - - [13/Sep/2025:06:25:36 +0000] "GET /.env HTTP/1.1" 404 70935 13.218.114.34 - - [13/Sep/2025:06:25:37 +0000] "GET /.env.local HTTP/1.1" 404 70935 13.218.114.34 - - [13/Sep/2025:06:25:38 +0000] "GET /.env.production HTTP/1.1" 404 70935 {"log" show less	Web App Attack
🇺🇦 URAN Publishing Service	2025-09-13 06:18:44 (10 months ago)	13.218.114.34 - - [13/Sep/2025:09:18:37 +0300] "GET /wp-content/.env HTTP/1.1" 404 280 "-" "Mozilla/ ... show more 13.218.114.34 - - [13/Sep/2025:09:18:37 +0300] "GET /wp-content/.env HTTP/1.1" 404 280 "-" "Mozilla/5.0" 13.218.114.34 - - [13/Sep/2025:09:18:40 +0300] "GET /application/.env HTTP/1.1" 404 2638 "-" "Mozilla/5.0" ... show less	Web App Attack
🇩🇪 ger-stg-sifi1	2025-09-13 06:01:49 (10 months ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 CollideTech	2025-09-13 05:55:55 (10 months ago)	probing for vulnerabilities	Web App Attack
🇺🇸 antlac1	2025-09-13 05:50:03 (10 months ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇩🇪 paissangroup	2025-09-13 04:28:50 (10 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2025-09-13 04:17:01 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 13.218.114.34 (ec2-13-218-114-34.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 13.218.114.34 (ec2-13-218-114-34.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 00:16:56.882877 2025] [security2:error] [pid 16812:tid 16812] [client 13.218.114.34:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ruralcommunitycare.org"] [uri "/.env"] [unique_id "aMTwOEzU5Oue-8pN4QDvuQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2025-09-13 03:33:06 (10 months ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack

Showing 1 to 15 of 136 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.163.5.228

🇩🇪 134.209.228.182

🇺🇸 104.28.219.190

🇦🇴 193.163.125.215

🇬🇧 159.65.18.187

🇺🇸 157.245.81.84

🇵🇰 153.117.13.107

🇨🇳 150.139.194.15

🇫🇮 147.185.133.28

🇺🇸 147.185.132.10

🇩🇪 144.76.67.169

🇺🇸 143.198.25.99

🇮🇹 95.255.158.96

🇩🇪 2a09:bac5:2a93:2482::3a3:17

🇨🇳 223.223.199.221

🇫🇮 147.185.133.57

🇩🇪 136.243.153.17

🇺🇸 96.44.160.199

🇫🇷 91.231.89.235

🇺🇸 54.164.75.132