JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.223.106.213

34.223.106.213 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 80%: ?

80%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-34-223-106-213.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.223.106.213

Whois 34.223.106.213

IP Abuse Reports for 34.223.106.213:

This IP address has been reported a total of 14 times from 14 distinct sources. 34.223.106.213 was first reported on February 17th 2024, and the most recent report was 40 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 mkey	2026-08-28 06:12:31 (40 minutes ago)	[First: 2026-08-27 16:12:22/single] HITS=1 Repeated suspicious IDS-detected activity; sample=Attempt ... show more [First: 2026-08-27 16:12:22/single] HITS=1 Repeated suspicious IDS-detected activity; sample=Attempting to connect to a forbidden port show less	Port Scan Hacking Web App Attack
🇫🇷 service Informatique	2026-08-28 04:00:37 (2 hours ago)	GET /robots.txt	Web App Attack
🇸🇬 celestialcity	2026-08-27 13:49:13 (17 hours ago)	Blocked by UFW on celestialcityas [1500/tcp] \| SPT: 41750 \| TTL: 108 \| LEN: 60 \| TOS: 0x00 • Reporte ... show more Blocked by UFW on celestialcityas [1500/tcp] \| SPT: 41750 \| TTL: 108 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 london2038.com	2026-08-27 08:09:58 (22 hours ago)	Connection atttempts against closed TCP ports Aug 27 10:09:53 BLOCK SRC=34.223.106.213 LEN=60 TOS=0x ... show more Connection atttempts against closed TCP ports Aug 27 10:09:53 BLOCK SRC=34.223.106.213 LEN=60 TOS=0x00 PREC=0x00 TTL=121 ID=5608 DF PROTO=TCP SPT=52434 DPT=2083 WINDOW=62727 RES=0x00 SYN Aug 27 10:09:54 BLOCK SRC=34.223.106.213 LEN=60 TOS=0x00 PREC=0x00 TTL=121 ID=5609 DF PROTO=TCP SPT=52434 DPT=2083 WINDOW=62727 RES=0x00 SYN Aug 27 10:09:56 BLOCK SRC=34.223.106.213 LEN=60 TOS=0x00 PREC=0x00 TTL=121 ID=5610 DF PROTO=TCP SPT=52434 DPT=2083 WINDOW=62727 RES=0x00 SYN show less	Port Scan
Anonymous	2026-08-27 07:25:30 (23 hours ago)	denied traffic to a non-approved destination port. destination port 2222.	Port Scan
🇫🇮 000rosiu	2026-08-27 07:18:30 (23 hours ago)	Triggered Cloudflare WAF (botFight) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET) \| En ... show more Triggered Cloudflare WAF (botFight) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET) \| Endpoint: /enhancecp \| UA: Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-08-27 04:52:30 (1 day ago)	Web application attack detected.	Web App Attack
🇺🇸 ISPLtd	2026-08-27 03:48:24 (1 day ago)	Aug 27 00:48:20 34.223.106.213 TCP SPT=52162 DPT=2443 SYN Aug 27 00:48:21 34.223.106.213 TCP SPT=521 ... show more Aug 27 00:48:20 34.223.106.213 TCP SPT=52162 DPT=2443 SYN Aug 27 00:48:21 34.223.106.213 TCP SPT=52162 DPT=2443 SYN Aug 27 00:48:23 34.223.106.213 TCP SPT=52162 DPT=2443 ... show less	Port Scan
🇨🇭 ALPHANET	2026-08-27 02:46:20 (1 day ago)	SSH honeypot 2 login attempt	Hacking Brute-Force Exploited Host SSH
🇺🇸 LotPhantom	2026-08-27 02:10:06 (1 day ago)	2026-08-27T02:09:50.101816+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-08-27T02:09:50.101816+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=34.223.106.213 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=50096 DF PROTO=TCP SPT=37098 DPT=2005 WINDOW=62727 RES=0x00 SYN URGP=0 2026-08-27T02:10:05.920296+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=34.223.106.213 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=50100 DF PROTO=TCP SPT=37098 DPT=2005 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇫🇷 masterguru	2026-08-27 01:46:47 (1 day ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.223.106.213 (US/United States/ec2- ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.223.106.213 (US/United States/ec2-34-223-106-213.us-west-2.compute.amazonaws.com): 1 in the last 3600 secs (0-195) show less	Hacking
Anonymous	2026-08-26 21:17:16 (1 day ago)	Blocked by firewall on hugin [2083/tcp] \| Rule: UFW \| SPT: 46016 \| TTL: 113 \| LEN: 60 \| TOS: 0x00 • ... show more Blocked by firewall on hugin [2083/tcp] \| Rule: UFW \| SPT: 46016 \| TTL: 113 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 zupan	2026-08-26 21:15:03 (1 day ago)	Blocked by UFW on vps [2083/tcp] \| SPT: 58670 \| TTL: 113 \| LEN: 60 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on vps [2083/tcp] \| SPT: 58670 \| TTL: 113 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2024-02-17 08:11:03 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 34.223.106.213 (ec2-34-223-106-213.us-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 34.223.106.213 (ec2-34-223-106-213.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 17 03:10:58.957417 2024] [security2:error] [pid 18025] [client 34.223.106.213:34260] [client 34.223.106.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jensen.silsby.com"] [uri "/.env"] [unique_id "ZdBqEpzjhSY7DPrfYmvO_AAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.141

🇺🇸 165.154.163.10

🇺🇸 162.216.149.163

🇺🇸 162.144.20.85

🇮🇩 103.193.176.131

🇬🇧 92.30.198.138

🇳🇱 91.92.42.240

🇫🇷 85.217.140.43

🇮🇹 79.3.96.178

🇲🇽 201.137.37.131

🇧🇷 190.89.137.160

🇸🇪 158.174.210.161

🇮🇳 152.59.87.21

🇭🇰 152.32.186.39

🇹🇼 111.254.216.169

🇵🇰 103.191.119.77

🇮🇳 103.187.178.26

🇺🇸 85.239.151.10

🇭🇺 85.90.166.17

🇱🇹 77.90.185.78