JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.252.201.13

34.252.201.13 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 32%: ?

32%

ISP	Amazon Data Services Ireland Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-34-252-201-13.eu-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.252.201.13

Whois 34.252.201.13

IP Abuse Reports for 34.252.201.13:

This IP address has been reported a total of 23 times from 11 distinct sources. 34.252.201.13 was first reported on July 26th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Tsumugi Kotobuki	2026-10-21 01:52:55 (2 days ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 54 \| Len: 60B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 54 \| Len: 60B \| Win: 62727(1) \| rDNS: ec2-34-252-201-13.eu-west-1.compute.amazonaws.com \| F2B/ufw-honeypot@2026-10-21T01:52:54Z show less	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-10-19 02:04:53 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 34.252.201.13 (ec2-34-252-201-13.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 34.252.201.13 (ec2-34-252-201-13.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 22:04:45.953160 2026] [security2:error] [pid 31288:tid 31288] [client 34.252.201.13:64254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deborbon.me"] [uri "/.env"] [unique_id "atV6vYzdAA9IdwhquRXU1wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-13 06:24:21 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.252.201.13 (ec2-34-252-201-13.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 34.252.201.13 (ec2-34-252-201-13.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 02:24:17.543734 2026] [security2:error] [pid 6536:tid 6536] [client 34.252.201.13:23417] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "piaseci.shop"] [uri "/.git/HEAD"] [unique_id "as3OkaMOcgP46W6kATUvsAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-08 05:24:52 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.252.201.13 (ec2-34-252-201-13.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 34.252.201.13 (ec2-34-252-201-13.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 01:24:48.196393 2026] [security2:error] [pid 2045:tid 2162] [client 34.252.201.13:43484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agrigrailtechnologies.com"] [uri "/.git/HEAD"] [unique_id "ascpIDU2iHztrbNk-K1JYAAAANQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2026-10-05 04:54:38 (2 weeks ago)	(web_sensitive_file) srv201 Sensitive file probe (.env/.git/backup) 34.252.201.13 (IE/Ireland/ec2-34 ... show more (web_sensitive_file) srv201 Sensitive file probe (.env/.git/backup) 34.252.201.13 (IE/Ireland/ec2-34-252-201-13.eu-west-1.compute.amazonaws.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-29 22:41:42 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.252.201.13 (ec2-34-252-201-13.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 34.252.201.13 (ec2-34-252-201-13.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 18:41:35.550249 2026] [security2:error] [pid 2104:tid 2108] [client 34.252.201.13:36963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agrigrailtechnologies.com"] [uri "/.env"] [unique_id "arw-n3L6y_2N-NSeKdwEagAAAIA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-27 04:17:08 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.252.201.13 (ec2-34-252-201-13.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 34.252.201.13 (ec2-34-252-201-13.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 00:16:56.101560 2026] [security2:error] [pid 12815:tid 12815] [client 34.252.201.13:11169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cgcontinental.com"] [uri "/.git/HEAD"] [unique_id "ariYuLCwV8rd5_4-83i5dwAAAIA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-21 11:11:14 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.252.201.13 (ec2-34-252-201-13.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 34.252.201.13 (ec2-34-252-201-13.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 07:11:09.545143 2026] [security2:error] [pid 454:tid 454] [client 34.252.201.13:15143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "slmd.me"] [uri "/.git/HEAD"] [unique_id "arEQzVl7vOktuIWuPXflTQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-09-20 14:05:08 (1 month ago)	Abuse Detected (10)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-19 14:37:41 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.252.201.13 (ec2-34-252-201-13.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 34.252.201.13 (ec2-34-252-201-13.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 10:37:37.294597 2026] [security2:error] [pid 25565:tid 25565] [client 34.252.201.13:1304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vanmeter.me"] [uri "/.git/HEAD"] [unique_id "aq6eMYpURajJjmPBmjHaOgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 15:34:41 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.252.201.13 (ec2-34-252-201-13.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 34.252.201.13 (ec2-34-252-201-13.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 11:34:33.634176 2026] [security2:error] [pid 10648:tid 10681] [client 34.252.201.13:41586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agrigrailtechnologies.com"] [uri "/.env"] [unique_id "aq1aCX2kDMogGM6xH5ARKgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 Halux	2026-09-09 15:07:09 (1 month ago)	34.252.201.13 Probing protected path or service	Web App Attack
Anonymous	2026-09-09 09:20:02 (1 month ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-09-08 09:14:17 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.252.201.13 (ec2-34-252-201-13.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 34.252.201.13 (ec2-34-252-201-13.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 05:14:10.936887 2026] [security2:error] [pid 25234:tid 25234] [client 34.252.201.13:36556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robhoward.me"] [uri "/.env"] [unique_id "ap_R4ikA-m237mX7trJpmwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-06 21:59:18 (1 month ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-05. show less	Web App Attack SSH Hacking

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 203.31.169.162

🇦🇷 179.63.242.58

🇭🇺 178.48.181.11

🇨🇳 111.26.106.117

🇰🇷 110.14.192.20

🇨🇳 101.96.195.17

🇫🇷 91.196.152.187

🇺🇿 84.54.70.49

🇬🇧 64.205.72.132

🇸🇬 43.160.207.19

🇿🇦 41.181.156.205

🇨🇳 36.212.216.104

🇬🇧 2a06:4884:1000::2

🇺🇸 216.25.89.112

🇺🇸 185.180.141.49

🇺🇸 184.105.247.194

🇮🇳 122.187.230.121

🇮🇳 103.151.186.22

🇮🇳 103.139.157.86

🇸🇮 102.220.161.171