JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 44.248.34.34

44.248.34.34 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 37%: ?

37%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-44-248-34-34.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 44.248.34.34

Whois 44.248.34.34

IP Abuse Reports for 44.248.34.34:

This IP address has been reported a total of 16 times from 16 distinct sources. 44.248.34.34 was first reported on July 24th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-29 07:00:00 (1 month ago)	Apache probe; attempts=816; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.en ... show more Apache probe; attempts=816; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.env.bak \| /.env.ci \| /.env.dev \| /.env.development \| /.env.dist \| /.env.docker \| /.env.example \| /.env.json \| /.env.live \| /.env.local \| /.env.old \| /.env.preprod \| /.env.prod \| /.env.production \| /.env.remote \| /.env.sample \| /.env.save \| /.env.stage \| /.env.staging \| /.env.swp \| /.env.test \| /.env.txt \| /.env.uat \| /.env.yaml \| /.env.yml \| /.env~ \| /.git/.env \| /.git/config \| /actions/.env \| /admin-panel/.env \| /admin/.env \| /administrator/.env \| /angular/.env \| /ansible/.env \| /api/.env \| /api/dev/.env \| /api/staging/.env \| /api/v1/.env \| /api/v2/.env \| /api/v3/.env \| /app/.env \| /application/.env \| /apps/.env \| /assets/.env \| /aws/.env \| /azure/.env \| /backend/.env \| /backup/.env \| /backups/.env \| /beta/.env \| /bin/.env \| /bootstrap/.env \| /brevo/.env \| /build/.env \| /buildkite/.env \| /bulk/.env \| /cache/.en \| ... [204 exact paths total] show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-27 22:01:02 (1 month ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-26. show less	Web App Attack SSH Hacking
Anonymous	2026-07-27 10:30:07 (1 month ago)	\| Suspicious URL access.	Web App Attack Hacking SQL Injection
🇦🇹 Shadow77	2026-07-27 10:17:00 (1 month ago)	44.248.34.34 - - [27/Jul/2026:11:51:48 +0200] "GET /wp-admin/phpinfo.php HTTP/1.1" 302 5339 "-" "Moz ... show more 44.248.34.34 - - [27/Jul/2026:11:51:48 +0200] "GET /wp-admin/phpinfo.php HTTP/1.1" 302 5339 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 44.248.34.34 - - [27/Jul/2026:11:51:56 +0200] "GET /administrator/phpinfo.php HTTP/1.1" 302 5339 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack Hacking
🇩🇪 mravb	2026-07-27 06:23:20 (1 month ago)	44.248.34.34 - - [27/Jul/2026:09:23:20 +0300] "GET /shared/.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 ( ... show more 44.248.34.34 - - [27/Jul/2026:09:23:20 +0300] "GET /shared/.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack Hacking
🇺🇸 MatCat	2026-07-27 06:05:03 (1 month ago)	Banned by fail2ban: apache-webprobe	Port Scan Bad Web Bot
🇩🇪 Petros Stefanakis	2026-07-26 08:21:25 (1 month ago)	(mod_security) mod_security triggered on hostname [redacted] 44.248.34.34 (US/United States/ec2-44-2 ... show more (mod_security) mod_security triggered on hostname [redacted] 44.248.34.34 (US/United States/ec2-44-248-34-34.us-west-2.compute.amazonaws.com) show less	SQL Injection
🇮🇹 CoreTech srl	2026-07-26 07:53:56 (1 month ago)	cloudlinux2 fail2ban: 2026-07-26 09:50:34,218 fail2ban.filter [1888]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-07-26 09:50:34,218 fail2ban.filter [1888]: INFO [plesk-wordpress] Found 67.227.179.74 - 2026-07-26 09:50:34cloudlinux2 fail2ban: 2026-07-26 09:52:18,919 fail2ban.filter [1888]: INFO [plesk-modsecurity] Found 44.248.34.34 - 2026-07-26 09:52:18cloudlinux2 fail2ban: 2026-07-26 09:52:18,105 fail2ban.filter [1888]: INFO [plesk-modsecurity] Found 44.248.34.34 - 2026-07-26 09:52:18cloudlinux2 fail2ban: 2026-07-26 09:52:17,305 fail2ban.filter [1888]: INFO [plesk-modsecurity] Found 44.248.34.34 - 2026-07-26 09:52:17cloudlinux2 fail2ban: 2026-07-26 09:52:18,819 fail2ban.filter [1888]: INFO [recidive] Found 44.248.34.34 - 2026-07-26 09:52:18cloudlinux2 fail2ban: 2026-07-26 09:52:18,820 fail2ban.filter [1888]: INFO [plesk-modsecurity] Found 44.248.34.34 - 2026-07-26 09:52:18cloudlinux2 fail2ban: 2026-07-26 09:52:16,834 fail2ban.filter [1888]: INFO [plesk-modsecurity] Found 44.248.34.34 - 2026-07-26 09:52:16cloudlinux2 show less	Web App Attack
🇫🇷 Octopuce	2026-07-26 05:43:45 (1 month ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇩🇪 4server	2026-07-26 02:57:33 (1 month ago)	[SunJul2604:57:28.9859092026][security2:error][pid1068034:tid1068059][client44.248.34.34:0]ModSecuri ... show more [SunJul2604:57:28.9859092026][security2:error][pid1068034:tid1068059][client44.248.34.34:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"agenziastella.ch.136-243-54-122.cpanel.site\"][uri\"/.env.bak\"][unique_id\"amV3mAbcb5QxACBp60vhWQAAAI8\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 Mangelot Hosting	2026-07-25 03:16:24 (1 month ago)	(modsecurity) srv103 ModSecurity 44.248.34.34 (US/United States/ec2-44-248-34-34.us-west-2.compute.a ... show more (modsecurity) srv103 ModSecurity 44.248.34.34 (US/United States/ec2-44-248-34-34.us-west-2.compute.amazonaws.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇮🇹 VHosting	2026-07-25 02:35:04 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2026-07-25 01:38:21 (1 month ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇫🇷 masterguru	2026-07-25 00:35:57 (1 month ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇳🇱 Site.eu	2026-07-24 04:21:26 (1 month ago)	Excessive 404/403 errors	Brute-Force

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.218.68.192

🇯🇵 136.110.99.237

🇳🇱 94.154.43.201

🇺🇸 52.86.225.103

🇺🇿 195.158.14.232

🇩🇪 193.124.20.233

🇨🇳 180.76.236.71

🇺🇸 146.190.124.215

🇺🇸 100.26.102.117

🇩🇪 91.40.159.147

🇫🇷 85.217.140.41

🇳🇱 45.156.128.78

🇺🇸 20.127.197.119

🇺🇸 216.180.246.103

🇺🇸 195.184.76.220

🇵🇦 190.123.46.136

🇺🇸 136.107.20.91

🇩🇪 79.231.71.182

🇺🇸 75.112.23.30

🇰🇪 41.215.133.245