JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.254.241.122

34.254.241.122 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 82%: ?

82%

ISP	Amazon Data Services Ireland Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-34-254-241-122.eu-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.254.241.122

Whois 34.254.241.122

IP Abuse Reports for 34.254.241.122:

This IP address has been reported a total of 22 times from 14 distinct sources. 34.254.241.122 was first reported on July 24th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-27 09:08:25 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.254.241.122 (ec2-34-254-241-122.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 34.254.241.122 (ec2-34-254-241-122.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 05:08:20.879010 2026] [security2:error] [pid 1799389:tid 1799401] [client 34.254.241.122:37540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "re52s.com"] [uri "/.git/config"] [unique_id "amcgBLtjI3Vu78ATbdCVxQAAAgY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-07-27 06:50:14 (1 day ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇫🇷 dynamix	2026-07-27 06:43:16 (1 day ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 06:16:59 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.254.241.122 (ec2-34-254-241-122.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 34.254.241.122 (ec2-34-254-241-122.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 02:16:53.414965 2026] [security2:error] [pid 24051:tid 24051] [client 34.254.241.122:54936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rdsparts.com"] [uri "/.git/config"] [unique_id "amb31bCgTp_WS9PS4k1XpAAAAC0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-27 04:56:31 (1 day ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-07-26 09:03:53 (2 days ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇺🇸 Starburst SysOp Team	2026-07-26 07:33:14 (2 days ago)	Malware host detected by rbl.malware.expert. RBL lookup of 122.241.254.34.rbl.malware.expert succeed ... show more Malware host detected by rbl.malware.expert. RBL lookup of 122.241.254.34.rbl.malware.expert succeeded at REMOTE_ADDR. (400010-stl2-17) show less	Hacking
🇩🇪 Petros Stefanakis	2026-07-26 05:45:18 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.254.241.122 (IE/Ireland/ec2-34-254-2 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.254.241.122 (IE/Ireland/ec2-34-254-241-122.eu-west-1.compute.amazonaws.com) show less	SQL Injection
🇨🇭 4server	2026-07-26 05:34:40 (2 days ago)	[SunJul2607:34:32.7020932026][security2:error][pid2934362:tid2934735][client34.254.241.122:0]ModSecu ... show more [SunJul2607:34:32.7020932026][security2:error][pid2934362:tid2934735][client34.254.241.122:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\\\\\\\\\$\\|.\\)\\\\\\\\\)\\|\\\\\\\\{.\\\\\\\\\}\)\\|[\<\>]\\\\\\\\$.\\\\\\\\\$\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$$\(41\271$\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require$child_process$.execsync$echo\$\(\(41\271$\)\\|base64-w0\).tostring.trimthrowobject.assign$newerror\(next_redirect${digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"retepastoralebelli.ch\"][uri\"/\"][unique_id\"amWcaADGjFrxnBIkV_Z2TQAAANY\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 02:54:28 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.254.241.122 (ec2-34-254-241-122.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 34.254.241.122 (ec2-34-254-241-122.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 22:54:22.303486 2026] [security2:error] [pid 17475:tid 17475] [client 34.254.241.122:52098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qwixel.com"] [uri "/.git/config"] [unique_id "amQlXjwIG2-y7fd12gGExwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-25 01:26:29 (3 days ago)	Excessive 404/403 errors	Brute-Force
🇳🇿 Antinson	2026-07-24 15:44:14 (4 days ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-24 14:50:01 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 34.254.241.122 (ec2-34-254-241-122.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 34.254.241.122 (ec2-34-254-241-122.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 10:49:54.805899 2026] [security2:error] [pid 972783:tid 972783] [client 34.254.241.122:50498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bosdkbook.joepeters.org"] [uri "/.git/config"] [unique_id "amN7kmUElYCgVmOKLKw3GAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-24 13:29:51 (4 days ago)	Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ... show more Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195) show less	Hacking
🇫🇷 dynamix	2026-07-24 13:01:08 (4 days ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.65

🇧🇷 201.71.51.231

🇧🇷 201.46.20.229

🇮🇳 182.95.230.74

🇰🇪 102.210.149.105

🇮🇷 94.182.149.20

🇫🇷 46.16.202.73

🇷🇴 2.57.122.209

🇮🇳 209.38.121.186

🇺🇸 162.216.150.222

🇬🇧 87.115.187.195

🇳🇱 45.148.10.244

🇳🇱 45.148.10.157

🇮🇩 41.216.177.55

🇺🇸 20.168.127.154

🇺🇸 209.38.129.134

🇮🇳 103.204.167.40

🇦🇺 91.124.88.47

🇱🇹 77.90.185.20

🇩🇪 31.25.11.143