JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

161.178.134.243

Recent Activity

Abuse Confidence Score

100% Critical

115 reports

91 reporters · latest 2 seconds ago

ISP: Amazon Data Services Northern Virginia
Usage Type: Data Center/Web Hosting/Transit
ASN: AS16509
Hostname(s): ec2-161-178-134-243.compute-1.amazonaws.com
Domain Name: amazon.com
Country: 🇺🇸 United States of America
City: Piscataway, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

115 from 91 distinct reporters

First reported

September 9th 2026

Most recent report

2 seconds ago

Last 60 days

Top reporter locations 🇩🇪 Germany 20 🇺🇸 United States of America 16 🇳🇱 Netherlands 13

Most common categories Web App Attack 87 Hacking 30 Brute-Force 25 Bad Web Bot 23 Port Scan 10

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-13 10:01:15 UTC · (2 seconds ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Country=US; ASN=16509 AMAZON-02	Hacking
🇦🇺 2000cn.com.au	2026-11-13 09:27:12 UTC · (34 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
Anonymous	2026-11-13 09:07:02 UTC · (54 minutes ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Events=5; Hosts=incognet.io; Paths=/.env,/.git/HEAD,/.git/config,/.s3cfg,/.svn/entries; Country=US; ASN=16509 AMAZON-02	Hacking Web App Attack
Anonymous	2026-11-13 08:59:56 UTC · (1 hour ago)	2026-11-13 09:59:54,817 fail2ban.actions [640]: NOTICE [apache-custom] Ban 161.178.134.243 2026-11-13 09:59:55,061 fail2ban.actions [640]: NOTICE [apache-php-scans] Ban 161.178.134.243 2026-11-13 09:59:55,265 fail2ban.actions [ ... show more 2026-11-13 09:59:54,817 fail2ban.actions [640]: NOTICE [apache-custom] Ban 161.178.134.243 2026-11-13 09:59:55,061 fail2ban.actions [640]: NOTICE [apache-php-scans] Ban 161.178.134.243 2026-11-13 09:59:55,265 fail2ban.actions [640]: NOTICE [apache-noscript] Ban 161.178.134.243 ... show less	Brute-Force Web App Attack
🇵🇱 Budyn	2026-11-13 07:03:48 UTC · (2 hours ago)	[Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: pma.goblinpot.store \| Path: /.env \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) App ... show more [Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: pma.goblinpot.store \| Path: /.env \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| Request: [Empty / GET Request] show less	Hacking Web App Attack
🇺🇸 Blamdom	2026-11-13 06:34:26 UTC · (3 hours ago)	Secret/config-file recon: requested /.git/HEAD. 63 HTTP request(s), 2026-11-13 06:34:26 to 06:34:57 UTC (31s). Requests (method path -> status xcount): GET [site page] -> 301 x19 GET [site page] -> 404 x18 GET /?[query] -> 200 x2 GET / -> 301 ... show more Secret/config-file recon: requested /.git/HEAD. 63 HTTP request(s), 2026-11-13 06:34:26 to 06:34:57 UTC (31s). Requests (method path -> status xcount): GET [site page] -> 301 x19 GET [site page] -> 404 x18 GET /?[query] -> 200 x2 GET / -> 301 GET / -> 200 GET /.git/HEAD -> 301 GET /.svn/entries -> 301 GET /wp/wp-config.php -> 301 ...+19 more distinct requests UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 show less	Hacking Bad Web Bot Web App Attack
🇦🇺 Klaverstyn	2026-11-13 06:08:31 UTC · (3 hours ago)	Repeated 403 Forbidden responses	Web App Attack
🇫🇷 ecodehost.com	2026-11-13 05:51:06 UTC · (4 hours ago)	Domain : anahtarhastanesi.com Rule : env 2026-11-13 01:29:17 10.100.1.20 GET /.env - 443 - 161.178.134.243 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 - anahtarhastanesi.com ... show more Domain : anahtarhastanesi.com Rule : env 2026-11-13 01:29:17 10.100.1.20 GET /.env - 443 - 161.178.134.243 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 - anahtarhastanesi.com 301 0 0 361 244 152 - - show less	Hacking SQL Injection
🇫🇮 JLKnoch Software GmbH	2026-11-13 05:46:44 UTC · (4 hours ago)	CrowdSec crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
Anonymous	2026-11-13 05:40:58 UTC · (4 hours ago)	http scanning for .env files ...	Hacking Web App Attack
🇧🇷 Host One	2026-11-13 05:30:30 UTC · (4 hours ago)	Web vulnerability scanning: requests to known exploit/probe paths. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Requested paths: /dump/db.sql, /phpinfo.php, /.aws/credentials, /actuator/env, /backup.sql ... show more Web vulnerability scanning: requests to known exploit/probe paths. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Requested paths: /dump/db.sql, /phpinfo.php, /.aws/credentials, /actuator/env, /backup.sql. Automated report. show less	Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-11-13 05:20:50 UTC · (4 hours ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇺🇸 Lee Daniel	2026-11-13 05:14:22 UTC · (4 hours ago)	161.178.134.243 - - [13/Nov/2026:00:14:22 -0500] "GET /.env HTTP/1.1" 403 344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ...	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-11-13 05:09:58 UTC · (4 hours ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 161.178.134.243 (US/United States/ec2-161-178-134-243.compute-1.amazonaws.com): 1 in the last 3600 secs	Web App Attack
🇫🇮 as211431.net	2026-11-13 04:48:12 UTC · (5 hours ago)	Triggered Cloudflare WAF (linkMaze) from US. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (POST method) Endpoint: /wp-json/batch/v1 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/53 ... show more Triggered Cloudflare WAF (linkMaze) from US. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (POST method) Endpoint: /wp-json/batch/v1 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 115 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 199.165.159.223

🇨🇱 181.226.21.182

🇰🇷 175.192.67.117

🇦🇷 143.105.134.2

🇵🇰 103.26.81.183

🇷🇺 94.233.6.157

🇮🇱 87.70.14.175

🇫🇷 85.217.140.40

🇫🇷 85.217.140.39

🇺🇸 71.6.134.234

🇮🇷 62.60.207.104

🇨🇦 45.198.224.233

🇦🇺 34.40.232.161

🇮🇪 31.13.127.5

🇵🇱 2400:cb00:1056:1000:1717:d396:994a:6775

🇺🇸 206.204.25.248

🇺🇸 174.68.45.134

🇻🇬 103.47.145.76

🇫🇷 85.217.140.53

🇫🇷 85.217.140.49