JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.229.101.216

34.229.101.216 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 69%: ?

69%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-34-229-101-216.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.229.101.216

Whois 34.229.101.216

IP Abuse Reports for 34.229.101.216:

This IP address has been reported a total of 18 times from 16 distinct sources. 34.229.101.216 was first reported on March 28th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-09-06 00:02:39 (1 week ago)	Web application attack detected	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-05 21:59:10 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-04. show less	Web App Attack SSH Hacking
🇭🇺 miszterx.hu	2026-09-04 11:02:26 (1 week ago)	XORP (haproxy): 220x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_i ... show more XORP (haproxy): 220x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu) show less	Web App Attack
🇳🇱 Savvii	2026-09-04 05:25:28 (1 week ago)	20 attempts against mh-misbehave-ban on orcus	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-09-04 05:24:51 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 34.229.101.216 (US/United States/Virgin ... show more (mod_security) mod_security triggered on hostname [redacted] 34.229.101.216 (US/United States/Virginia/Ashburn/ec2-34-229-101-216.compute-1.amazonaws.com) show less	SQL Injection
🇬🇧 openstrike.co.uk	2026-09-04 05:13:47 (1 week ago)	161 attacks on VC URLs, env grabbing URLs, PHP URLs: GET /.git/config HTTP/1.1 GET /bulk/.env HTTP/1 ... show more 161 attacks on VC URLs, env grabbing URLs, PHP URLs: GET /.git/config HTTP/1.1 GET /bulk/.env HTTP/1.1 GET /smtp/phpinfo.php HTTP/1.1 show less	Hacking Web App Attack
Anonymous	2026-09-04 04:28:02 (1 week ago)	Bot / scanning and/or hacking attempts: GET /site/.env HTTP/1.1, GET /.env.stage HTTP/1.1, GET /apps ... show more Bot / scanning and/or hacking attempts: GET /site/.env HTTP/1.1, GET /.env.stage HTTP/1.1, GET /apps/.env HTTP/1.1, GET /.env.staging HTTP/1.1, GET /api/.env HTTP/1.1, GET /.env.uat HTTP/1.1, GET /public/.env HTTP/1.1, GET /.env.swp HTTP/1.1, GET /.env.preprod HTTP/1.1, GET /.env.ci HTTP/1.1, GET /.env.live HTTP/1.1, GET /.env.docker HTTP/1.1, GET /.env.dist HTTP/1.1, GET /app/.env HTTP/1.1, GET /web/.env HTTP/1.1, GET /.env~ HTTP/1.1 show less	Hacking Web App Attack
🇧🇪 cmbplf	2026-09-04 03:26:36 (1 week ago)	4.302 requests with url.path .env 570 requests with url.path phpinfo.php	Brute-Force Bad Web Bot
🇩🇪 Guardian	2026-09-04 03:21:12 (1 week ago)	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retr ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x3), Unauthorized attempt to retrieve configuration file (x5) 34.229.101.216 [04/Sep/2026:05:21:10 +0200] "GET / HTTP/1.1" 34.229.101.216 [04/Sep/2026:05:21:11 +0200] "POST / HTTP/1.1" 34.229.101.216 [04/Sep/2026:05:21:11 +0200] "POST / HTTP/1.1" 34.229.101.216 [04/Sep/2026:05:21:11 +0200] "POST / HTTP/1.1" 34.229.101.216 [04/Sep/2026:05:21:11 +0200] "GET /.git/config HTTP/1.1" 34.229.101.216 [04/Sep/2026:05:21:11 +0200] "POST / HTTP/1.1" 34.229.101.216 [04/Sep/2026:05:21:11 +0200] "GET /.env HTTP/1.1" 34.229.101.216 [04/Sep/2026:05:21:11 +0200] "GET /.env.local HTTP/1.1" 34.229.101.216 [04/Sep/2026:05:21:11 +0200] "GET /.env.production HTTP/1.1" 34.229.101.216 [04/Sep/2026:05:21:11 +0200] "GET /.env.staging HTTP/1.1" 34.229.101.216 [04/Sep/2026:05:21:11 +0200] "GET /.env.development HTTP/1.1" show less	Port Scan Web App Attack
Anonymous	2026-09-04 02:08:57 (1 week ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇵🇱 Budyn	2026-09-04 02:02:04 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.definitelynotahoneypot.online \| URI: /.git/config \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 nyt	2026-09-04 00:48:40 (1 week ago)	Sensitive File Probe	Web App Attack
🇵🇱 strefapi_com	2026-09-04 00:34:52 (1 week ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
Anonymous	2026-09-03 23:06:34 (1 week ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇮🇹 VHosting	2026-09-03 21:30:04 (1 week ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 193.8.79.246

🇺🇸 100.29.192.45

🇫🇷 91.231.89.250

🇦🇷 45.4.163.237

🇧🇷 34.95.146.171

🇧🇪 198.235.24.233

🇧🇪 198.235.24.232

🇩🇪 194.88.98.88

🇰🇷 175.45.161.140

🇪🇨 157.100.54.190

🇲🇬 153.67.85.87

🇺🇸 143.14.6.58

🇳🇬 102.88.169.23

🇫🇷 85.204.70.92

🇺🇸 216.73.216.69

🇧🇪 198.235.24.229

🇧🇪 198.235.24.224

🇳🇱 195.178.110.105

🇧🇷 177.220.170.28

🇮🇳 161.248.37.160