JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.225.13.68

18.225.13.68 was found in our database!

This IP was reported 128 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-225-13-68.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.225.13.68

Whois 18.225.13.68

IP Abuse Reports for 18.225.13.68:

This IP address has been reported a total of 128 times from 58 distinct sources. 18.225.13.68 was first reported on April 23rd 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 lostswordfish.com	2026-06-17 06:08:03 (3 hours ago)	Wordfence waf block on registrymatters	Web App Attack
Anonymous	2026-06-17 05:22:59 (3 hours ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇩🇪 Click-Networks	2026-06-17 05:09:31 (4 hours ago)		Web Spam Brute-Force Exploited Host
🇫🇷 Sysadmin Peter	2026-06-17 04:09:57 (5 hours ago)	18.225.13.68 - - [17/Jun/2026:06:09:57 +0200] "POST /wp-login.php HTTP/1.1" 200 3097 "https://ja-sol ... show more 18.225.13.68 - - [17/Jun/2026:06:09:57 +0200] "POST /wp-login.php HTTP/1.1" 200 3097 "https://ja-solar.nz/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18.225.13.68 - - [17/Jun/2026:06:09:57 +0200] "POST /wp-login.php HTTP/1.1" 200 3088 "https://ja-solar.nz/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" ... show less	Brute-Force Web App Attack
🇺🇸 jormaster3k	2026-06-17 03:55:41 (5 hours ago)	Attack against WordPress	Web App Attack
🇺🇸 TAY	2026-06-17 01:08:35 (8 hours ago)	18.225.13.68 - - [17/Jun/2026:09:08:34 +0800] "POST /wp-login.php HTTP/1.1" 200 8441 "https://koolpe ... show more 18.225.13.68 - - [17/Jun/2026:09:08:34 +0800] "POST /wp-login.php HTTP/1.1" 200 8441 "https://koolpets.my/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 18.225.13.68 - - [17/Jun/2026:09:08:34 +0800] "POST /wp-login.php HTTP/1.1" 200 8444 "https://koolpets.my/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18.225.13.68 - - [17/Jun/2026:09:08:34 +0800] "POST /wp-login.php HTTP/1.1" 200 2687 "https://koolpets.my/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ... show less	Brute-Force
🇩🇪 todix	2026-06-16 22:28:55 (10 hours ago)	Wordpress brute force or spam attempt from 18.225.13.68	Brute-Force
🇨🇿 plzenskypruvodce.cz	2026-06-16 21:20:06 (11 hours ago)	2026-06-16T23:20:04.859190+02:00 web wordpress(varhanykolin.cz)[3411897]: Authentication failure for ... show more 2026-06-16T23:20:04.859190+02:00 web wordpress(varhanykolin.cz)[3411897]: Authentication failure for buchtic from 18.225.13.68 2026-06-16T23:20:05.462598+02:00 web wordpress(varhanykolin.cz)[3411897]: Authentication failure for buchtic from 18.225.13.68 2026-06-16T23:20:06.129077+02:00 web wordpress(varhanykolin.cz)[3413830]: Authentication failure for buchtic from 18.225.13.68 ... show less	Brute-Force
🇫🇷 Sysadmin Peter	2026-06-16 20:27:01 (12 hours ago)	18.225.13.68 - - [16/Jun/2026:22:26:58 +0200] "POST /wp-login.php HTTP/1.1" 200 3097 "https://ja-sol ... show more 18.225.13.68 - - [16/Jun/2026:22:26:58 +0200] "POST /wp-login.php HTTP/1.1" 200 3097 "https://ja-solar.nz/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 18.225.13.68 - - [16/Jun/2026:22:26:59 +0200] "POST /wp-login.php HTTP/1.1" 200 3089 "https://ja-solar.nz/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" ... show less	Brute-Force Web App Attack
🇨🇿 plzenskypruvodce.cz	2026-06-16 16:40:55 (16 hours ago)	2026-06-16T18:40:54.848769+02:00 web wordpress(tichydotek.cz)[3272137]: Authentication failure for k ... show more 2026-06-16T18:40:54.848769+02:00 web wordpress(tichydotek.cz)[3272137]: Authentication failure for klara from 18.225.13.68 2026-06-16T18:40:54.850051+02:00 web wordpress(tichydotek.cz)[3241804]: Authentication failure for buchtic from 18.225.13.68 2026-06-16T18:40:55.268074+02:00 web wordpress(tichydotek.cz)[3300326]: Authentication failure for klara from 18.225.13.68 ... show less	Brute-Force
🇩🇪 AlexEventfahrtenIPDB	2026-06-16 16:06:23 (17 hours ago)	[Tue Jun 16 18:06:22.874148 2026] [authz_core:error] [pid 577240:tid 577240] [client 18.225.13.68:32 ... show more [Tue Jun 16 18:06:22.874148 2026] [authz_core:error] [pid 577240:tid 577240] [client 18.225.13.68:32980] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://alex-eventfahrten.de/wp-login.php [Tue Jun 16 18:06:22.874240 2026] [authz_core:error] [pid 784835:tid 784835] [client 18.225.13.68:32998] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://alex-eventfahrten.de/wp-login.php ... show less	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-06-15 23:05:53 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇫🇷 SpaceHost-Server	2026-06-15 22:27:49 (1 day ago)		Brute-Force Web App Attack
🇪🇸 masterguru	2026-06-15 05:36:51 (2 days ago)	(wplogin) Failed WordPress login from 18.225.13.68 (US/United States/ec2-18-225-13-68.us-east-2.comp ... show more (wplogin) Failed WordPress login from 18.225.13.68 (US/United States/ec2-18-225-13-68.us-east-2.compute.amazonaws.com): 5 in the last 3600 secs (0-122) show less	Hacking
🇫🇷 SpaceHost-Server	2026-06-14 22:27:32 (2 days ago)		Brute-Force Web App Attack

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 195.178.191.5

🇨🇴 185.75.12.207

🇨🇳 180.76.61.232

🇨🇳 58.18.80.18

🇷🇺 31.6.119.252

🇨🇦 20.151.179.130

🇨🇳 223.76.108.98

🇷🇺 185.70.129.15

🇷🇺 178.176.86.211

🇺🇸 172.172.214.224

🇺🇸 172.101.134.16

🇱🇹 141.98.9.130

🇸🇬 140.245.118.215

🇨🇳 118.145.235.110

🇱🇹 62.60.130.129

🇵🇰 39.38.154.56

🇹🇷 31.145.131.202

🇧🇬 5.188.206.66

🇺🇸 2001:470:1:fb5::1c0

🇮🇩 203.175.125.130