34.229.92.5

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
126 reports
80 reporters · latest 37 minutes ago
ISP
Amazon Technologies Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14618
Hostname(s)
ec2-34-229-92-5.compute-1.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸 United States of America
City
Ashburn, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
126 from 80 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 44 🇫🇷 France 20 🇺🇸 United States of America 13
Most common categories Port Scan 82 Web App Attack 35 Hacking 26 Brute-Force 12 SSH 7
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇮 iamxorum
Port Scan
🇩🇪 NetShield-DE
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-11-13T01:07:01+0100. Last: 2026-11-13T01:07:01+0100. Samples: - 2026-11-08 02:31:20,285 fail2ban.actions [855]: NOTICE [abuseipdb] Ban 34.229.92.5
Web App Attack
🇯🇵 jsys
Automated report (nfacl NetFlow analysis, 300s window): host sweep (1024 distinct dst hosts); SYN-flood-like small-packet flows (1024 small-packet flows)
DDoS Attack Port Scan
🇪🇸 whatda
FTP unauthorized access: "AUTH TLS"
FTP Brute-Force Brute-Force
🇩🇪 NetShield-DE
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-11-12T21:07:01+0100. Last: 2026-11-12T21:07:01+0100. Samples: - 2026-11-08 02:31:20,285 fail2ban.actions [855]: NOTICE [abuseipdb] Ban 34.229.92.5
Web App Attack
Anonymous
2026-11-12T21:02:38.483057+01:00 [redacted] sshd[5910]: Connection closed by 34.229.92.5 port 48726 [preauth]
Brute-Force SSH
🇩🇪 xavier-momain.eu
CrowdSec ban — scenario: xavier/nftables-scan-any-port | report #2
Port Scan
🇧🇷 somosbr
[2026-11-12T16:24:25Z] Unsolicited scan from 34.229.92.5 to port 10443/tcp
Port Scan
🇩🇪 NetShield-DE
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-11-12T16:07:02+0100. Last: 2026-11-12T16:07:02+0100. Samples: - 2026-11-08 02:31:20,285 fail2ban.actions [855]: NOTICE [abuseipdb] Ban 34.229.92.5
Web App Attack
🇺🇸 cwytech
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.
Hacking
🇨🇿 david1117
Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=1244
Port Scan Hacking
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇩🇪 NetShield-DE
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-11-12T11:07:02+0100. Last: 2026-11-12T11:07:02+0100. Samples: - 2026-11-08 02:31:20,285 fail2ban.actions [855]: NOTICE [abuseipdb] Ban 34.229.92.5
Web App Attack
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized traffic (243 bytes of payload); 3232 [1] TCP
Port Scan
🇩🇪 NetShield-DE
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-11-12T06:07:02+0100. Last: 2026-11-12T06:07:02+0100. Samples: - 2026-11-08 02:31:20,285 fail2ban.actions [855]: NOTICE [abuseipdb] Ban 34.229.92.5
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 193.47.62.69
🇧🇬 185.255.212.178
🇨🇦 172.70.50.181
🇺🇸 170.168.173.225
🇺🇸 162.216.149.223
🇮🇳 157.49.179.49
🇷🇺 91.143.161.208
🇸🇬 85.203.21.183
🇺🇸 50.6.111.141
🇸🇬 47.128.61.17
🇨🇳 47.99.112.241
🇧🇷 201.15.147.234
🇺🇸 198.11.179.136
🇭🇰 191.223.40.6
🇹🇷 185.28.61.19
🇨🇳 182.148.168.18
🇩🇿 154.255.72.83
🇧🇩 103.164.255.146
🇦🇪 20.46.45.121
🇨🇳 1.83.125.60
feedback