JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 174.129.137.28

174.129.137.28 was found in our database!

This IP was reported 79 times. Confidence of Abuse is 0%: ?

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-174-129-137-28.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 174.129.137.28

Whois 174.129.137.28

IP Abuse Reports for 174.129.137.28:

This IP address has been reported a total of 79 times from 42 distinct sources. 174.129.137.28 was first reported on September 27th 2025, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 ISPLtd	2025-10-01 02:34:43 (10 months ago)	Hacking, URL manipulation, malformed requests, or requests for invalid/hidden files like .git/config ... show more Hacking, URL manipulation, malformed requests, or requests for invalid/hidden files like .git/config or .env. Vulnerability probe, 404s or other invalid requests, no referrer, null agent or fake antiquated desktop or mobile agents. show less	Hacking Web App Attack
🇧🇪 sid3windr	2025-09-30 14:50:21 (10 months ago)	GET /.env (Tarpitted for 1d15h8m28s, wasted 8.06MB)	Web App Attack
🇪🇸 masterguru	2025-09-30 08:30:42 (10 months ago)	Restricted File Access Attempt. Matched phrase "/.env" at REQUEST_FILENAME. (930130-122)	Hacking Web App Attack
🇺🇸 octageeks.com	2025-09-30 04:07:58 (10 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇬🇧 Shadymint	2025-09-30 03:57:06 (10 months ago)	url probing from IP marked as abusive	Web App Attack
🇬🇧 ISPLtd	2025-09-30 03:22:12 (10 months ago)	174.129.137.28 - - [30/Sep/2025:00:22:11 -0300] "GET /.env 174.129.137.28 - - [30/Sep/2025:00:22:11 ... show more 174.129.137.28 - - [30/Sep/2025:00:22:11 -0300] "GET /.env 174.129.137.28 - - [30/Sep/2025:00:22:11 -0300] "GET /.env ... show less	Hacking Web App Attack
🇳🇱 MM-bot	2025-09-30 02:31:27 (10 months ago)	URL-probe: HTTP/1.1 GET request on /.env (2025-09-30 04:31:27 UTC+2)	Hacking Web App Attack
🇺🇸 shabi	2025-09-30 01:05:47 (10 months ago)	IP: 174.129.137.28 [Country: US] triggered WAF (firewallCustom). Action: managed_challenge ASN: 1461 ... show more IP: 174.129.137.28 [Country: US] triggered WAF (firewallCustom). Action: managed_challenge ASN: 14618 (AMAZON-AES) Protocol: HTTP/1.1 (method GET) Endpoint: /.env Time: 2025-09-29T22:15:50Z User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 --- Report generated by CFWAF2AbuseIPDB. show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ut-addicted.com	2025-09-29 19:23:55 (10 months ago)	\[Mon Sep 29 21:23:53.071822 2025\] \[:error\] \[pid 19189:tid 140572090152704\] \[client 174.129.13 ... show more \[Mon Sep 29 21:23:53.071822 2025\] \[:error\] \[pid 19189:tid 140572090152704\] \[client 174.129.137.28:56940\] \[client 174.129.137.28\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "www.crx.it"\] \[uri "/.env"\] \[unique_id "aNrcyfIy5qZw4pC0O69PHwAAAMY"\] show less	Brute-Force Web App Attack
🇫🇮 YF	2025-09-29 16:30:07 (10 months ago)	Suspicious Endpoint Access	Brute-Force Web App Attack
🇺🇸 COMPLEX	2025-09-29 14:44:11 (10 months ago)	Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE ASN: 14618 (AMAZON-AES) ... show more Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE ASN: 14618 (AMAZON-AES) Protocol: HTTP/1.1 (GET method) Endpoint: /.env show less	Bad Web Bot
🇳🇱 BlueWire Hosting	2025-09-29 14:10:21 (10 months ago)	Probing for application vulnerabilities	Brute-Force Web App Attack
🇬🇧 Swiptly	2025-09-29 13:23:49 (10 months ago)	Bot scanning for environment files .env .env/\* ...	Web App Attack
🇫🇷 Security_Whaller	2025-09-29 11:51:37 (10 months ago)	Malicious activity detected on Honeypot.	Hacking Brute-Force Web App Attack
🇦🇹 Pingger Shikkoken	2025-09-29 08:53:34 (10 months ago)	2025-09-29T08:53:34+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2025-09-29T08:53:34+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=174.129.137.28 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=117 ID=55971 DF PROTO=TCP SPT=42356 DPT=443 WINDOW=62727 RES=0x00 SYN URGP=0 2025-09-29T08:53:35+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=174.129.137.28 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=117 ID=55972 DF PROTO=TCP SPT=42356 DPT=443 WINDOW=62727 RES=0x00 SYN URGP=0 2025-09-29T08:53:37+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=174.129.137.28 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=117 ID=55973 DF PROTO=TCP SPT=42356 DPT=443 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.61

🇺🇸 205.210.31.32

🇺🇸 147.185.132.13

🇧🇬 212.233.134.7

🇧🇷 189.126.4.42

🇬🇧 188.240.59.38

🇧🇷 186.209.177.84

🇺🇸 159.223.176.158

🇰🇷 115.68.192.28

🇺🇸 104.223.16.108

🇳🇱 95.173.207.168

🇫🇷 91.231.89.76

🇺🇸 64.62.197.210

🇳🇱 45.148.10.152

🇪🇸 45.95.196.240

🇨🇳 39.72.100.159

🇺🇸 20.168.127.123

🇳🇱 213.176.24.162

🇺🇸 205.210.31.21

🇺🇸 202.81.210.247