JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.201.143.118

34.201.143.118 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 43%: ?

43%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-34-201-143-118.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.201.143.118

Whois 34.201.143.118

IP Abuse Reports for 34.201.143.118:

This IP address has been reported a total of 7 times from 7 distinct sources. 34.201.143.118 was first reported on July 17th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-18 21:59:58 (6 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-17. show less	Web App Attack SSH Hacking
🇮🇹 VHosting	2026-07-17 02:00:05 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇮🇩 Burayot	2026-07-17 01:42:14 (1 week ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.201.143.118 (US/United States/ec ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.201.143.118 (US/United States/ec2-34-201-143-118.compute-1.amazonaws.com): 1 in the last 3600 secs show less	Web App Attack
Anonymous	2026-07-17 01:23:07 (1 week ago)	(caddyscan) Scanner path probe from 34.201.143.118 (US/United States/ec2-34-201-143-118.compute-1.am ... show more (caddyscan) Scanner path probe from 34.201.143.118 (US/United States/ec2-34-201-143-118.compute-1.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.201.143.118 - - [17/Jul/2026:01:23:02 +0000] "GET /.env.backup HTTP/1.1" [REDACTED] 200 2627 34.201.143.118 - - [17/Jul/2026:01:23:02 +0000] "GET /.env.staging HTTP/1.1" [REDACTED] 200 2627 34.201.143.118 - - [17/Jul/2026:01:23:02 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 34.201.143.118 - - [17/Jul/2026:01:23:02 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 34.201.143.118 - - [17/Jul/2026:01:23:02 +0000] "GET /.env HTTP/1.1" show less	Port Scan
🇳🇱 Mangelot Hosting	2026-07-17 01:07:28 (1 week ago)	(modsecurity) srv101 ModSecurity 34.201.143.118 (US/United States/ec2-34-201-143-118.compute-1.amazo ... show more (modsecurity) srv101 ModSecurity 34.201.143.118 (US/United States/ec2-34-201-143-118.compute-1.amazonaws.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 dave	2026-07-17 00:58:54 (1 week ago)	threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity ... show more threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity/appsec-vpatch,crowdsecurity/vpatch-env-access,crowdsecurity/vpatch-git-config targets=cloud hit_count=3 first_seen=2026-07-17T00:58:55Z last_seen=2026-07-17T00:58:54Z show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 00:25:35 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.201.143.118 (ec2-34-201-143-118.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 34.201.143.118 (ec2-34-201-143-118.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 20:25:29.708412 2026] [security2:error] [pid 29816:tid 29816] [client 34.201.143.118:58502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artglass-jerusalem.net"] [uri "/wp-config.php"] [unique_id "all2eWjx7Way-QLruNKSygAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.238

🇳🇱 176.65.148.244

🇬🇷 83.235.16.111

🇧🇬 79.124.56.246

🇬🇧 35.203.211.201

🇹🇼 198.235.24.52

🇧🇷 189.1.191.230

🇧🇷 177.73.191.115

🇩🇪 164.92.249.85

🇵🇭 138.84.72.148

🇺🇸 135.237.126.148

🇮🇳 103.88.76.27

🇧🇩 103.26.136.173

🇨🇦 85.217.149.38

🇺🇸 66.132.186.182

🇩🇪 43.228.157.197

🇵🇪 179.6.6.81

🇦🇲 176.124.100.5

🇮🇩 163.7.9.84

🇰🇷 161.118.153.29