JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.227.227.148

Neutral Activity

Abuse Confidence Score

0% Low Risk

80 reports

39 reporters · latest 2 years ago

ISP: Amazon Technologies Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14618
Hostname(s): ec2-34-227-227-148.compute-1.amazonaws.com
Domain Name: amazon.com
Country: 🇺🇸 United States of America
City: Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

34.227.227.148 has been reported 80 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

80 from 39 distinct reporters

First reported

August 19th 2024

Most recent report

2 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 teamsecure	2024-08-22 06:53:51 UTC · (2 years ago)	Banned for trying to access env	Web App Attack
🇺🇸 deskpass.com	2024-08-22 06:46:49 UTC · (2 years ago)	GET /test.php	Web App Attack
🇺🇸 MHuiG	2024-08-22 06:10:54 UTC · (2 years ago)	The IP has triggered Cloudflare WAF. action: managed_challenge source: asn clientAsn: 14618 clientASNDescription: AMAZON-AES clientCountryName: US clientIP: 34.227.227.148 clientRequestHTTPHost: blog.mhuig.top clientRequestHTTPMethodName: GET clientR ... show more The IP has triggered Cloudflare WAF. action: managed_challenge source: asn clientAsn: 14618 clientASNDescription: AMAZON-AES clientCountryName: US clientIP: 34.227.227.148 clientRequestHTTPHost: blog.mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: / clientRequestQuery: datetime: 2024-08-22T05:52:31Z rayName: 8b7098e2cf225b3a ruleId: asn userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇩🇪 Gwyneth Llewelyn	2024-08-22 04:59:43 UTC · (2 years ago)	2024/08/22 05:59:41 [error] 1909#1909: 169328 access forbidden by rule, client: 34.227.227.148, server: getasecondlife.net, request: "GET /.env HTTP/1.1", host: "getasecondlife.net" 34.227.227.148 - - [22/Aug/2024:05:59:41 +0100] "GET /.env HTTP/1.1 ... show more 2024/08/22 05:59:41 [error] 1909#1909: 169328 access forbidden by rule, client: 34.227.227.148, server: getasecondlife.net, request: "GET /.env HTTP/1.1", host: "getasecondlife.net" 34.227.227.148 - - [22/Aug/2024:05:59:41 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 34.227.227.148 - - [22/Aug/2024:05:59:41 +0100] "GET /.env HTTP/1.1" 403 1178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" show less	Web App Attack
🇩🇪 conseilgouz	2024-08-22 01:35:44 UTC · (2 years ago)	ave-17 : Block hidden directories=>/.aws/credentials(/)	Hacking
🇪🇸 netfactotum	2024-08-22 00:34:32 UTC · (2 years ago)		Hacking Web App Attack
🇳🇿 Tripwire	2024-08-21 23:51:48 UTC · (2 years ago)	Scanning for exploits - /.env	Web App Attack
🇩🇪 Hydra-Shield.fr	2024-08-21 22:48:31 UTC · (2 years ago)	Directory Traversal on: /.env	Web App Attack
🇺🇸 nationaleventpros.com	2024-08-21 22:12:08 UTC · (2 years ago)	vulnerability scan	Web App Attack
🇵🇱 strefapi_com	2024-08-21 20:28:42 UTC · (2 years ago)	Brute-force web ...	Hacking Brute-Force Web App Attack
🇮🇹 LTM	2024-08-21 06:20:02 UTC · (2 years ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇬🇧 findlab	2024-08-21 00:25:01 UTC · (2 years ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇺🇸 thefoofighter	2024-08-20 23:03:23 UTC · (2 years ago)	[Tue Aug 20 23:03:22.313064 2024] [:error] [pid 1669091] [client 34.227.227.148:40066] [client 34.227.227.148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQU ... show more [Tue Aug 20 23:03:22.313064 2024] [:error] [pid 1669091] [client 34.227.227.148:40066] [client 34.227.227.148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sourcemodding.com"] [uri "/.aws/credentials"] [unique_id "ZsUgurpKKHT24o9umUmurwAAAAo"] [Tue Aug 20 23:03:22.313393 2024] [:error] [pid 1669090] [client 34.227.227.148:40052] [client 34.227.227.148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-20 22:56:07 UTC · (2 years ago)	(mod_security) mod_security (id:210492) triggered by 34.227.227.148 (ec2-34-227-227-148.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 20 18:56:02.785097 2024] [security2:error] [pid 12146 ... show more (mod_security) mod_security (id:210492) triggered by 34.227.227.148 (ec2-34-227-227-148.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 20 18:56:02.785097 2024] [security2:error] [pid 12146:tid 12146] [client 34.227.227.148:34064] [client 34.227.227.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.homebuilt.org"] [uri "/.env"] [unique_id "ZsUfAun6nIXx5U40dVcjJgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 conseilgouz	2024-08-20 22:52:59 UTC · (2 years ago)	sae-17 : Block hidden directories=>/.env(/)	Hacking

Showing 1 to 15 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 213.209.159.231

🇸🇬 165.154.199.128

🇵🇱 145.239.89.124

🇨🇭 104.244.73.42

🇷🇴 80.94.92.234

🇺🇸 50.231.243.28

🇬🇧 35.203.210.195

🇹🇼 211.23.109.116

🇺🇦 91.237.243.43

🇫🇮 45.133.115.64

🇸🇬 43.156.115.178

🇸🇳 213.154.80.51

🇺🇸 159.203.164.81

🇺🇸 147.185.132.104

🇸🇬 146.190.109.125

🇨🇳 120.211.133.12

🇨🇳 106.15.236.209

🇪🇪 94.246.204.146

🇳🇱 77.239.124.36

🇰🇷 203.238.210.25