JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.224.168.204

34.224.168.204 was found in our database!

This IP was reported 76 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-34-224-168-204.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.224.168.204

Whois 34.224.168.204

IP Abuse Reports for 34.224.168.204:

This IP address has been reported a total of 76 times from 64 distinct sources. 34.224.168.204 was first reported on September 13th 2025, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 6kilowatti	2026-07-11 06:56:43 (15 hours ago)	2026-07-11T09:56:42.527035+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2 ... show more 2026-07-11T09:56:42.527035+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2d:5e:71:aa:73:08:00 SRC=34.224.168.204 DST=192.168.0.102 LEN=60 TOS=0x18 PREC=0x20 TTL=112 ID=31769 DF PROTO=TCP SPT=17734 DPT=1224 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇸🇬 drewf.ink	2026-07-11 01:27:42 (21 hours ago)	[01:27] Port scanning. Port(s) scanned: TCP/9200	Port Scan
Anonymous	2026-07-10 23:25:02 (23 hours ago)	Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=22	Port Scan Hacking
🇬🇧 gbzret4d	2026-07-10 06:57:49 (1 day ago)	Honeypot [uk-production01]: Unauthorized traffic (243 bytes of payload); 10443 [1] TCP	Port Scan
🇺🇸 ras07	2026-07-10 06:00:06 (1 day ago)	Brute force SSH login attempts.	Brute-Force SSH
🇱🇹 Selckie	2026-07-10 04:31:11 (1 day ago)	fail2ban: NGINX unusual impact	Web App Attack
🇩🇪 Admins@Storch	2026-07-09 10:40:07 (2 days ago)	OPNsense: 3 hits, proto=tcp, ports=3232	Port Scan Hacking
🇫🇷 ISPLtd	2026-07-09 06:01:36 (2 days ago)	Jul 9 03:01:32 34.224.168.204 TCP SPT=53790 DPT=9200 SYN Jul 9 03:01:33 34.224.168.204 TCP SPT=537 ... show more Jul 9 03:01:32 34.224.168.204 TCP SPT=53790 DPT=9200 SYN Jul 9 03:01:33 34.224.168.204 TCP SPT=53790 DPT=9200 SYN Jul 9 03:01:36 34.224.168.204 TCP SPT=53790 DPT=9200 WIND ... show less	Port Scan
🇫🇷 Duggy_Tuxy🧱	2026-07-09 05:34:11 (2 days ago)	[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Infra/DevOps Attack)	Web App Attack Port Scan Hacking
🇯🇵 jay hung	2026-07-09 05:33:59 (2 days ago)	2026-07-09T05:33:59.097228+00:00 quarktech kernel: [2219897.758868] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-07-09T05:33:59.097228+00:00 quarktech kernel: [2219897.758868] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=34.224.168.204 DST=172.237.20.248 LEN=60 TOS=0x00 PREC=0x40 TTL=109 ID=61951 DF PROTO=TCP SPT=49354 DPT=3000 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-07-09 04:21:20 (2 days ago)	Blocked by firewall on hugin [8443/tcp] \| Rule: UFW \| SPT: 38010 \| TTL: 122 \| LEN: 60 \| TOS: 0x00 • ... show more Blocked by firewall on hugin [8443/tcp] \| Rule: UFW \| SPT: 38010 \| TTL: 122 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇬 MazenHost	2026-07-08 20:59:30 (3 days ago)	1783544370 - 07/08/2026 23:59:30 Host: 34.224.168.204/34.224.168.204 Port: 31337 TCP Blocked ...	Port Scan
🇺🇸 ISPLtd	2026-07-08 10:08:24 (3 days ago)	Jul 8 04:08:20 34.224.168.204 TCP SPT=47082 DPT=9200 SYN Jul 8 04:08:21 34.224.168.204 TCP SPT=470 ... show more Jul 8 04:08:20 34.224.168.204 TCP SPT=47082 DPT=9200 SYN Jul 8 04:08:21 34.224.168.204 TCP SPT=47082 DPT=9200 SYN Jul 8 04:08:23 34.224.168.204 TCP SPT=47082 DPT=9200 W ... show less	Port Scan
🇺🇸 itsnixk	2026-07-08 08:26:19 (3 days ago)	(mod_security) mod_security (id:920350) triggered by 34.224.168.204 (US/United States/ec2-34-224-168 ... show more (mod_security) mod_security (id:920350) triggered by 34.224.168.204 (US/United States/ec2-34-224-168-204.compute-1.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 08 04:26:17.812842 2026] [security2:error] [pid 1481590:tid 1482105] [client 34.224.168.204:14408] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+\|\\\\[[\\\\da-f:]+\\\\]\|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "ak4JqXyLWeMTNnwxI-A-3AAAAHQ"] show less	Port Scan
🇩🇪 ISPLtd	2026-07-08 04:12:27 (3 days ago)	Jul 8 01:12:23 34.224.168.204 TCP SPT=53256 DPT=9200 SYN Jul 8 01:12:24 34.224.168.204 TCP SPT=532 ... show more Jul 8 01:12:23 34.224.168.204 TCP SPT=53256 DPT=9200 SYN Jul 8 01:12:24 34.224.168.204 TCP SPT=53256 DPT=9200 SYN Jul 8 01:12:26 34.224.168.204 TCP SPT=53256 DPT=9200 ... show less	Port Scan

Showing 1 to 15 of 76 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 178.33.43.145

🇺🇸 97.74.236.4

🇳🇱 88.210.63.69

🇷🇴 80.94.92.55

🇯🇲 67.230.79.45

🇺🇸 45.61.150.163

🇺🇸 13.89.125.27

🇯🇵 202.239.44.126

🇩🇪 185.220.101.23

🇧🇩 103.153.130.145

🇺🇸 100.28.153.226

🇺🇸 2600:100f:a020:a498:39df:ed09:3bc7:db62

🇦🇪 217.164.185.180

🇺🇸 143.42.164.182

🇳🇱 45.148.10.147

🇸🇬 45.78.235.121

🇺🇸 35.236.18.74

🇰🇷 14.46.30.239

🇲🇽 201.174.234.35

🇹🇼 198.235.24.87