JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.228.142.241

34.228.142.241 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 79%: ?

79%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-34-228-142-241.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.228.142.241

Whois 34.228.142.241

IP Abuse Reports for 34.228.142.241:

This IP address has been reported a total of 28 times from 20 distinct sources. 34.228.142.241 was first reported on January 17th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 TheCoon	2026-07-28 01:15:01 (1 day ago)	Automated: Credential theft attempt - JSON bomb served	Web App Attack Hacking
🇳🇱 homeshowdomain.nl	2026-07-27 22:01:32 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-26. show less	Web App Attack SSH Hacking
🇫🇷 Octopuce	2026-07-27 19:01:03 (1 day ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇩🇪 big-cloud.nl	2026-07-27 16:54:36 (1 day ago)	Try to access /.git/config	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 15:41:58 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.228.142.241 (ec2-34-228-142-241.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 34.228.142.241 (ec2-34-228-142-241.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 11:41:54.309686 2026] [security2:error] [pid 20096:tid 20096] [client 34.228.142.241:47640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sedemo.xyz"] [uri "/.git/config"] [unique_id "amd8Qp_na8FwOXtOu7psuAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 14:07:10 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.228.142.241 (ec2-34-228-142-241.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 34.228.142.241 (ec2-34-228-142-241.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 10:07:04.856726 2026] [security2:error] [pid 8355:tid 8355] [client 34.228.142.241:53528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "securityzonepr.com"] [uri "/.git/config"] [unique_id "amdmCNxiXWLd-Bq1v7gsWwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 13:33:16 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.228.142.241 (ec2-34-228-142-241.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 34.228.142.241 (ec2-34-228-142-241.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 09:33:08.612878 2026] [security2:error] [pid 1931914:tid 1931914] [client 34.228.142.241:50078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "securitymontana.com"] [uri "/.git/config"] [unique_id "amdeFIRVNH3w2JEMvVD5yQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 realstuffie	2026-07-27 13:19:05 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch	Web App Attack
🇺🇸 FreeMyIP	2026-07-27 12:32:57 (1 day ago)	Automated fail2ban report: web application attack / scanning for exploitable paths.	Bad Web Bot Web App Attack
🇫🇮 as211431.net	2026-07-27 12:18:35 (1 day ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST met ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 nyt	2026-07-27 11:01:50 (1 day ago)	Sensitive File Probe	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 08:36:11 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.228.142.241 (ec2-34-228-142-241.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 34.228.142.241 (ec2-34-228-142-241.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 04:36:06.295288 2026] [security2:error] [pid 864158:tid 864158] [client 34.228.142.241:50544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "secureonebank.net"] [uri "/.git/config"] [unique_id "amcYdkFHuafCFiUTtYlCmwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 04:58:37 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.228.142.241 (ec2-34-228-142-241.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 34.228.142.241 (ec2-34-228-142-241.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 00:58:32.028562 2026] [security2:error] [pid 1831109:tid 1831117] [client 34.228.142.241:40548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "secure.vnbcares.com"] [uri "/.git/config"] [unique_id "ambleKnEj5agjtJ_4uj5EgAAAMI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-26 10:05:30 (2 days ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (41/60 min)'; Requests=41	Port Scan
🇫🇷 dynamix	2026-07-26 08:34:35 (2 days ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.53

🇩🇪 185.65.202.199

🇮🇹 158.47.241.182

🇬🇧 157.245.34.56

🇺🇸 157.230.239.134

🇺🇸 157.230.191.249

🇻🇳 103.252.123.105

🇧🇩 103.183.62.2

🇺🇸 91.230.168.1

🇨🇳 59.36.233.74

🇺🇸 20.65.193.206

🇬🇧 16.61.145.6

🇨🇳 221.229.220.180

🇺🇿 185.213.229.28

🇰🇿 185.103.168.69

🇺🇸 157.230.141.197

🇫🇮 157.180.66.246

🇺🇸 144.172.102.126

🇮🇳 138.252.100.167

🇮🇳 114.79.176.152