JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.213.112.128

34.213.112.128 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-34-213-112-128.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.213.112.128

Whois 34.213.112.128

IP Abuse Reports for 34.213.112.128:

This IP address has been reported a total of 15 times from 13 distinct sources. 34.213.112.128 was first reported on March 2nd 2026, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-03-09 13:42:14 (5 months ago)	120 requests with url.path *config.json	Brute-Force Bad Web Bot
🇳🇱 Roderic	2026-03-06 18:40:46 (5 months ago)	(apache_scanners-2) Failed apache-scanners trigger with match [redacted])	Port Scan
🇬🇧 openstrike.co.uk	2026-03-06 06:13:43 (5 months ago)	44 attacks on config grabbing URLs (type 2), PHP URLs, site downloads, password grabbing URLs: GET / ... show more 44 attacks on config grabbing URLs (type 2), PHP URLs, site downloads, password grabbing URLs: GET /appspec.yaml HTTP/1.1 GET /config/settings.old.php HTTP/1.1 GET /www.sql HTTP/1.1 GET /.aws/credentials HTTP/1.1 show less	Hacking Web App Attack
Anonymous	2026-03-06 00:35:03 (5 months ago)	suspicious request in access.log	Web App Attack
🇳🇱 debestelapp	2026-03-05 20:30:04 (5 months ago)		Web App Attack
🇬🇧 venus.launch.bz	2026-03-05 17:42:55 (5 months ago)	(wpscan) WordPress probe detected from 34.213.112.128 (US/United States/ec2-34-213-112-128.us-west-2 ... show more (wpscan) WordPress probe detected from 34.213.112.128 (US/United States/ec2-34-213-112-128.us-west-2.compute.amazonaws.com) show less	Hacking
🇩🇪 Packets-Decreaser.NET	2026-03-05 01:08:40 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇳🇱 Roderic	2026-03-04 22:13:39 (5 months ago)	(apache_scanners-2) Failed apache-scanners trigger with match [redacted])	Port Scan
🇷🇺 DZBOT	2026-03-04 14:43:07 (5 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇨🇭 backslash	2026-03-03 06:57:00 (5 months ago)	block ruleset AA06B7315BA6AEB6421B52F0B32E14B509FD5FF0	SQL Injection
🇹🇼 kk_it_man	2026-03-03 06:23:07 (5 months ago)	ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE ... show more ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) show less	Port Scan
🇪🇸 el-brujo	2026-03-03 06:22:19 (5 months ago)	Cloudflare WAF: Request Path: / Request Query: Host: hwagm.elhacker.net userAgent: Mozilla/5.0 (Win ... show more Cloudflare WAF: Request Path: / Request Query: Host: hwagm.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Action: block Source: firewallManaged ASN Description: AMAZON-02 - Amazon.com, Inc. Country: US Method: POST Timestamp: 2026-03-03T06:22:19Z ruleId: 33aa8a8a948b48b28d40450c5fb92fba. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇱🇻 garmtech.com	2026-03-03 06:15:20 (5 months ago)	IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ... show more IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478) show less	Hacking
🇺🇸 TPI-Abuse	2026-03-02 20:55:40 (5 months ago)	(mod_security) mod_security (id:210831) triggered by 34.213.112.128 (ec2-34-213-112-128.us-west-2.co ... show more (mod_security) mod_security (id:210831) triggered by 34.213.112.128 (ec2-34-213-112-128.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 15:55:36.733320 2026] [security2:error] [pid 15760:tid 15760] [client 34.213.112.128:41486] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|karenbernsteinlaw.com\|F\|4"] [data "Web Downloader"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "karenbernsteinlaw.com"] [uri "/"] [unique_id "aaX5SOJT5jQ0XaZ31ZmA1AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-02 17:27:15 (5 months ago)	(mod_security) mod_security (id:210831) triggered by 34.213.112.128 (ec2-34-213-112-128.us-west-2.co ... show more (mod_security) mod_security (id:210831) triggered by 34.213.112.128 (ec2-34-213-112-128.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 12:27:06.349428 2026] [security2:error] [pid 28057:tid 28057] [client 34.213.112.128:37682] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|jeffjastro.com\|F\|4"] [data "grub-client"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "jeffjastro.com"] [uri "/"] [unique_id "aaXIai2u74hwqhZTQ7DRyQAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.151.34.14

🇧🇷 177.55.157.183

🇺🇸 136.242.97.29

🇺🇸 64.62.197.179

🇸🇬 43.134.68.231

🇺🇸 34.26.131.107

🇺🇸 216.194.90.150

🇩🇴 186.150.1.203

🇩🇪 167.94.146.58

🇨🇴 152.203.19.187

🇸🇬 103.187.147.214

🇦🇪 94.207.29.221

🇩🇪 89.163.146.197

🇩🇪 68.183.74.245

🇺🇸 65.49.1.137

🇺🇸 64.62.156.24

🇱🇹 62.60.130.230

🇬🇧 45.150.172.245

🇳🇱 45.148.10.240

🇭🇰 223.197.153.135