JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.244.189.195

34.244.189.195 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 78%: ?

78%

ISP	Amazon Data Services Ireland Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-34-244-189-195.eu-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.244.189.195

Whois 34.244.189.195

IP Abuse Reports for 34.244.189.195:

This IP address has been reported a total of 19 times from 13 distinct sources. 34.244.189.195 was first reported on July 24th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-25 22:03:50 (11 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-24. show less	Web App Attack SSH Hacking
Anonymous	2026-07-25 21:05:01 (12 hours ago)	suspicious request in access.log	Web App Attack
🇺🇸 nyt	2026-07-25 20:07:01 (13 hours ago)	Sensitive File Probe	Web App Attack
🇫🇷 Octopuce	2026-07-25 17:33:37 (15 hours ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇩🇪 big-cloud.nl	2026-07-25 15:14:47 (18 hours ago)	Try to access /.git/config	Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 13:07:46 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.244.189.195 (ec2-34-244-189-195.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 34.244.189.195 (ec2-34-244-189-195.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 09:07:39.996456 2026] [security2:error] [pid 2267663:tid 2267663] [client 34.244.189.195:36886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.idmadventures.com"] [uri "/.git/config"] [unique_id "amS1G47hjlWk0O_CrLtPPwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-25 10:57:38 (22 hours ago)	(caddyscan) Scanner path probe from 34.244.189.195 (IE/Ireland/ec2-34-244-189-195.eu-west-1.compute. ... show more (caddyscan) Scanner path probe from 34.244.189.195 (IE/Ireland/ec2-34-244-189-195.eu-west-1.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.244.189.195 - - [25/Jul/2026:10:57:36 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.244.189.195 - - [25/Jul/2026:10:57:36 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 34.244.189.195 - - [25/Jul/2026:10:57:37 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 34.244.189.195 - - [25/Jul/2026:10:57:37 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 34.244.189.195 - - [25/Jul/2026:10:57:37 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
🇱🇻 garmtech.com	2026-07-25 03:50:57 (1 day ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/vendor/.env	Web App Attack
Anonymous	2026-07-24 20:05:07 (1 day ago)	PHP file probing detected by Fail2Ban	Web App Attack
Anonymous	2026-07-24 18:05:39 (1 day ago)	[ssd5.kdns.gr] httpd-config-scan: sites=www.mail.homeburger.gr; logs=/var/log/httpd/domains/homeburg ... show more [ssd5.kdns.gr] httpd-config-scan: sites=www.mail.homeburger.gr; logs=/var/log/httpd/domains/homeburger.gr.log; samples=/.git/config \| /.env \| /.env.local show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 18:03:24 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.244.189.195 (ec2-34-244-189-195.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 34.244.189.195 (ec2-34-244-189-195.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 14:03:19.508642 2026] [security2:error] [pid 4107359:tid 4107359] [client 34.244.189.195:58840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.homebuilt.michaelsabbey.org"] [uri "/.git/config"] [unique_id "amOo58lc-7ykJOt_YiUWmgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 akasolutions.de	2026-07-24 17:11:55 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 34.244.189.195 (IE/Ireland/ec2-34-244-1 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.244.189.195 (IE/Ireland/ec2-34-244-189-195.eu-west-1.compute.amazonaws.com) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-07-24 15:07:47 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.244.189.195 (ec2-34-244-189-195.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 34.244.189.195 (ec2-34-244-189-195.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 11:07:41.712698 2026] [security2:error] [pid 3815072:tid 3815072] [client 34.244.189.195:39068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.holtzheimer.buynorthwest.com"] [uri "/.git/config"] [unique_id "amN_venKt9tFsW-oX-zsiQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 14:50:07 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.244.189.195 (ec2-34-244-189-195.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 34.244.189.195 (ec2-34-244-189-195.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 10:50:01.175160 2026] [security2:error] [pid 1206604:tid 1206645] [client 34.244.189.195:38712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.holoshot.geoception.com"] [uri "/.git/config"] [unique_id "amN7md3bG5RogQOeGUupywAAAYs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 12:42:30 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.244.189.195 (ec2-34-244-189-195.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 34.244.189.195 (ec2-34-244-189-195.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 08:42:24.896413 2026] [security2:error] [pid 4035281:tid 4035281] [client 34.244.189.195:33646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.holland-kadaster-registration.com.boatregistrationdelaware.com"] [uri "/.git/config"] [unique_id "amNdsObUXyy-FqzuZrQjgAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 195.182.16.23

🇺🇸 104.154.170.246

🇯🇵 8.216.1.79

🇺🇸 192.178.118.81

🇧🇷 187.125.176.130

🇩🇪 172.70.242.93

🇩🇪 164.90.169.163

🇺🇸 136.116.183.231

🇪🇸 5.182.83.231

🇩🇪 213.209.159.235

🇺🇸 192.178.115.84

🇱🇻 185.75.238.232

🇯🇵 139.162.119.49

🇧🇷 136.248.121.226

🇨🇳 117.43.156.153

🇺🇸 109.105.209.14

🇨🇦 85.217.149.68

🇳🇱 79.137.194.175

🇩🇪 69.5.169.186

🇺🇸 34.29.189.29