JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.238.122.244

34.238.122.244 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 0%: ?

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-34-238-122-244.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.238.122.244

Whois 34.238.122.244

IP Abuse Reports for 34.238.122.244:

This IP address has been reported a total of 50 times from 40 distinct sources. 34.238.122.244 was first reported on February 7th 2026, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2026-02-10 20:11:30 (5 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 SpaceHost-Server	2026-02-09 23:41:59 (5 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2026-02-09 20:11:28 (5 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 SpaceHost-Server	2026-02-08 23:38:15 (5 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2026-02-08 20:11:27 (5 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 macrob	2026-02-08 11:34:07 (5 months ago)	2026/02/08 11:34:06 [error] 1028708#1028708: 274793767 access forbidden by rule, client: 34.238.122 ... show more 2026/02/08 11:34:06 [error] 1028708#1028708: 274793767 access forbidden by rule, client: 34.238.122.244, server: binixo.pl, request: "GET //wp-includes/wlwmanifest.xml HTTP/2.0", host: "binixo.pl" 2026/02/08 11:34:06 [error] 1028708#1028708: 274793767 access forbidden by rule, client: 34.238.122.244, server: binixo.pl, request: "GET //xmlrpc.php?rsd HTTP/2.0", host: "binixo.pl" 2026/02/08 11:34:06 [error] 1028710#1028710: 274802925 access forbidden by rule, client: 34.238.122.244, server: binixo.pl, request: "GET //blog/wp-includes/wlwmanifest.xml HTTP/2.0", host: "binixo.pl" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-08 10:28:51 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 34.238.122.244 (ec2-34-238-122-244.compute-1.am ... show more (mod_security) mod_security (id:225170) triggered by 34.238.122.244 (ec2-34-238-122-244.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 05:28:47.271023 2026] [security2:error] [pid 11457:tid 11457] [client 34.238.122.244:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.barryherbach.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.barryherbach.com"] [uri "/blog/wp-json/wp/v2/users/"] [unique_id "aYhlX07bvK5GXoiV9ZM_tAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-02-08 09:04:00 (5 months ago)	IPBlock protected site ID [669-fx]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇺🇸 Major Hostility	2026-02-08 07:47:08 (5 months ago)	"GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /xmlrpc.php?rsd HTTP/1.1" 403 "GET /blog/wp-inc ... show more "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /xmlrpc.php?rsd HTTP/1.1" 403 "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /media/wp-includes/wlwmanifest.xml HTTP/1.1" 404 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-08 07:30:39 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 34.238.122.244 (ec2-34-238-122-244.compute-1.am ... show more (mod_security) mod_security (id:225170) triggered by 34.238.122.244 (ec2-34-238-122-244.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 02:30:34.638416 2026] [security2:error] [pid 6580:tid 6580] [client 34.238.122.244:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|southernbroadcast.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southernbroadcast.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYg7mhn4kFWm5WH3HKSE2gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2026-02-08 07:26:15 (5 months ago)	34.238.122.244 - - [08/Feb/2026:07:26:09 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.0" 404 1073 ... show more 34.238.122.244 - - [08/Feb/2026:07:26:09 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.0" 404 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 34.238.122.244 - - [08/Feb/2026:07:26:10 +0000] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 34.238.122.244 - - [08/Feb/2026:07:26:10 +0000] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.0" 404 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" ... show less	Hacking Web App Attack
🇩🇪 macrob	2026-02-08 07:03:55 (5 months ago)	2026/02/08 07:03:54 [error] 1003014#1003014: 274440478 access forbidden by rule, client: 34.238.122 ... show more 2026/02/08 07:03:54 [error] 1003014#1003014: 274440478 access forbidden by rule, client: 34.238.122.244, server: binixo.es, request: "GET //wp-includes/wlwmanifest.xml HTTP/2.0", host: "binixo.es" 2026/02/08 07:03:54 [error] 1003014#1003014: 274440471 access forbidden by rule, client: 34.238.122.244, server: binixo.es, request: "GET //xmlrpc.php?rsd HTTP/2.0", host: "binixo.es" 2026/02/08 07:03:54 [error] 1003014#1003014: 274456020 access forbidden by rule, client: 34.238.122.244, server: binixo.es, request: "GET //blog/wp-includes/wlwmanifest.xml HTTP/2.0", host: "binixo.es" ... show less	Web App Attack
🇬🇧 openstrike.co.uk	2026-02-08 06:13:37 (5 months ago)	18 attacks on PHP URLs, Wordpress URLs: GET //xmlrpc.php?rsd HTTP/1.1 GET //sito/wp-includes/wlwmani ... show more 18 attacks on PHP URLs, Wordpress URLs: GET //xmlrpc.php?rsd HTTP/1.1 GET //sito/wp-includes/wlwmanifest.xml HTTP/1.1 show less	Web App Attack
🇸🇬 Cloudkul Cloudkul	2026-02-08 05:36:28 (5 months ago)	Attempted Brute Force on our application	Brute-Force Web App Attack
🇧🇪 taivas.nl	2026-02-08 05:32:23 (5 months ago)	Many_bad_calls	Web App Attack

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 106.215.181.122

🇰🇿 89.218.69.66

🇧🇷 2804:d51:74fa:5b00:c4b7:a75:cdc5:bf7e

🇳🇱 2400:cb00:556:1000:71c2:3c4c:5e98:627b

🇳🇬 165.154.10.250

🇺🇸 129.121.75.215

🇮🇹 62.97.49.213

🇿🇦 4.168.228.242

🇧🇷 177.44.71.76

🇺🇸 172.239.64.86

🇭🇰 162.141.78.119

🇨🇳 118.81.198.74

🇺🇸 107.175.56.6

🇻🇳 103.200.25.79

🇺🇸 100.51.6.16

🇳🇱 89.248.168.227

🇺🇸 52.168.141.47

🇪🇬 45.240.49.126

🇸🇮 31.57.184.229

🇸🇮 31.57.184.228