JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.209.244.65

34.209.244.65 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 67%: ?

67%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-34-209-244-65.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.209.244.65

Whois 34.209.244.65

IP Abuse Reports for 34.209.244.65:

This IP address has been reported a total of 16 times from 12 distinct sources. 34.209.244.65 was first reported on December 18th 2020, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-26 22:04:22 (9 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-25. show less	Web App Attack SSH Hacking
🇷🇺 DZBOT	2026-07-26 03:55:46 (1 day ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 02:48:21 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.209.244.65 (ec2-34-209-244-65.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 34.209.244.65 (ec2-34-209-244-65.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 22:48:15.628523 2026] [security2:error] [pid 1775882:tid 1775882] [client 34.209.244.65:52718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "glaswood.com"] [uri "/.git/config"] [unique_id "amV1b5nxdPGrn2lS-hf7tAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-07-26 01:18:16 (1 day ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/.env	Web App Attack
🇱🇻 garmtech.com	2026-07-26 01:18:15 (1 day ago)	IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ... show more IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478) show less	Hacking
🇨🇭 backslash	2026-07-25 19:21:02 (1 day ago)	block ruleset AA06B7315BA6AEB6421B52F0B32E14B509FD5FF0	SQL Injection
🇺🇸 TPI-Abuse	2026-07-25 16:58:50 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.209.244.65 (ec2-34-209-244-65.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 34.209.244.65 (ec2-34-209-244-65.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 12:58:47.276322 2026] [security2:error] [pid 2782366:tid 2782433] [client 34.209.244.65:39624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.browbrew.metalartgate.com"] [uri "/.git/config"] [unique_id "amTrRxVT8Y8W3ke2plyymAAAAYo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-07-25 11:05:09 (1 day ago)	Scanning/Probing (69)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 10:17:34 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.209.244.65 (ec2-34-209-244-65.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 34.209.244.65 (ec2-34-209-244-65.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 06:17:30.112690 2026] [security2:error] [pid 2904572:tid 2904588] [client 34.209.244.65:56152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.broadmoordermatology.aafm.us"] [uri "/.git/config"] [unique_id "amSNOv1zs3DvJ8n55Z185QAAAEQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-25 02:40:46 (2 days ago)	Multiple WAF Violations	Web App Attack
🇩🇪 grassau.com	2026-07-25 02:10:20 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.209.244.65 (US/United States/Oregon/ ... show more (mod_security) mod_security triggered on hostname [redacted] 34.209.244.65 (US/United States/Oregon/Boardman/ec2-34-209-244-65.us-west-2.compute.amazonaws.com) show less	SQL Injection
🇧🇪 micmor_asbl	2026-07-25 00:46:44 (2 days ago)	ase-17 : Block hidden directories=>/.git/config(/)	Hacking
Anonymous	2026-07-24 21:00:51 (2 days ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-07-24 20:55:01 (2 days ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 20:39:27 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.209.244.65 (ec2-34-209-244-65.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 34.209.244.65 (ec2-34-209-244-65.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 16:39:19.258576 2026] [security2:error] [pid 1321750:tid 1321750] [client 34.209.244.65:54984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blastjet.gulftelecom.com"] [uri "/.git/config"] [unique_id "amPNd-G4YPZdhEMKReNVjAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 107.167.34.125

🇫🇷 91.196.152.120

🇺🇸 2a09:bac1:7680:460::5e:58

🇵🇰 2407:d000:508:e22:4518:8650:be98:2558

🇰🇷 211.106.137.135

🇯🇴 109.107.231.17

🇩🇪 109.91.4.177

🇺🇸 76.132.238.43

🇺🇸 195.184.76.96

🇳🇱 195.178.110.217

🇳🇱 185.224.128.16

🇨🇳 183.155.246.36

🇯🇴 176.29.160.63

🇯🇴 92.253.52.94

🇫🇷 91.231.89.200

🇫🇷 77.32.148.23

🇩🇪 45.43.62.37

🇻🇳 42.96.19.157

🇨🇳 39.182.69.151

🇨🇳 8.163.94.85