JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.234.149.62

13.234.149.62 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 39%: ?

39%

ISP	Amazon Data Services India
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-13-234-149-62.ap-south-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.234.149.62

Whois 13.234.149.62

IP Abuse Reports for 13.234.149.62:

This IP address has been reported a total of 17 times from 15 distinct sources. 13.234.149.62 was first reported on March 28th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇿🇦 conure.sh	2026-09-15 12:02:52 (1 day ago)	csagent: score 17.7: wp-config backup grab x2, 404 noise floor x2; 1 domain(s) in 56s	Web App Attack
Anonymous	2026-09-14 19:20:09 (2 days ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇺🇸 SX Communications	2026-09-14 16:39:18 (2 days ago)	HTTP application-layer DoS / botnet traffic from 13.234.149.62: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 13.234.149.62: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 TPI-Abuse	2026-09-08 02:31:27 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 13.234.149.62 (ec2-13-234-149-62.ap-south-1.com ... show more (mod_security) mod_security (id:210492) triggered by 13.234.149.62 (ec2-13-234-149-62.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 22:31:19.733218 2026] [security2:error] [pid 1232522:tid 1232535] [client 13.234.149.62:36788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.travelusa.us"] [uri "/wp-config.php~"] [unique_id "ap9zd5UCARSMRgztTofkqQAAAMU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-08 00:30:57 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 13.234.149.62 (ec2-13-234-149-62.ap-south-1.com ... show more (mod_security) mod_security (id:210492) triggered by 13.234.149.62 (ec2-13-234-149-62.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 20:30:50.412851 2026] [security2:error] [pid 4515:tid 4515] [client 13.234.149.62:50922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.adlc18.org"] [uri "/.svn/entries"] [unique_id "ap9XOpVZ7QtqfRB48CPFigAAAIo"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Apache	2026-09-07 12:03:33 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 13.234.149.62 (IN/India/ec2-13-234-149-62.ap-so ... show more (mod_security) mod_security (id:210492) triggered by 13.234.149.62 (IN/India/ec2-13-234-149-62.ap-south-1.compute.amazonaws.com): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇮🇹 VHosting	2026-09-07 11:25:03 (1 week ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-07 07:34:13 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 13.234.149.62 (ec2-13-234-149-62.ap-south-1.com ... show more (mod_security) mod_security (id:210492) triggered by 13.234.149.62 (ec2-13-234-149-62.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 03:34:09.292692 2026] [security2:error] [pid 25256:tid 25256] [client 13.234.149.62:53050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ismaelcavazos.com"] [uri "/wp-config.php~"] [unique_id "ap5o8QoqleppJxhN91pAGgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 RoboSOC	2026-06-02 08:27:44 (3 months ago)	React Server Components Remote Code Execution Vulnerability, PTR: ec2-13-234-149-62.ap-south-1.compu ... show more React Server Components Remote Code Execution Vulnerability, PTR: ec2-13-234-149-62.ap-south-1.compute.amazonaws.com. show less	Hacking
🇸🇬 securejdprop	2026-06-02 05:43:45 (3 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ATTACK [PTsecurity ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ATTACK [PTsecurity] React Server Components RCE (CVE-2025-55182)). Ip 13.234.149.62 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-02 05:43:44.155962161 +0000 UTC show less	Hacking Web App Attack
🇫🇷 masterguru	2026-06-02 00:48:44 (3 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 13.234.149.62 (IN/India/ec2-13-234-14 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 13.234.149.62 (IN/India/ec2-13-234-149-62.ap-south-1.compute.amazonaws.com): 1 in the last 3600 secs (0-197) show less	Hacking
🇱🇻 garmtech.com	2026-06-01 21:00:57 (3 months ago)	IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ... show more IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478) show less	Hacking
🇩🇪 NxtGenIT	2026-03-31 01:00:40 (5 months ago)	ElasticPot Honeypot hit, Event Type: Scan, HTTP Method: GET, User Agent: Go-http-client/1.1, Query: ... show more ElasticPot Honeypot hit, Event Type: Scan, HTTP Method: GET, User Agent: Go-http-client/1.1, Query: / show less	SSH
🇺🇸 xmission.com	2026-03-30 05:21:16 (5 months ago)	Blocked by UFW (TCP on 27017) Source port: 43584 TTL: 51 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 27017) Source port: 43584 TTL: 51 Packet length: 60 TOS: 0x08 This report (for 13.234.149.62) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 EGP Abuse Dept	2026-03-29 14:58:43 (5 months ago)	Unsolicited connection to port 27017	Port Scan Hacking

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 64.62.197.167

🇺🇸 34.26.152.184

🇻🇳 14.225.239.154

🇺🇿 213.230.92.61

🇰🇬 212.97.0.106

🇧🇷 205.210.31.147

🇺🇸 195.184.76.57

🇨🇱 190.110.163.173

🇩🇪 185.73.23.133

🇺🇸 162.216.149.206

🇧🇩 103.138.170.36

🇫🇷 91.231.89.234

🇫🇷 91.231.89.150

🇷🇴 80.94.92.179

🇺🇸 66.132.195.125

🇵🇰 39.46.144.217

🇸🇬 34.143.240.125

🇺🇸 34.127.100.82

🇺🇸 3.131.220.121

🇺🇸 195.184.76.152