JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.133.28.136

18.133.28.136 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 0%: ?

ISP	Amazon Data Services UK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-133-28-136.eu-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.133.28.136

Whois 18.133.28.136

IP Abuse Reports for 18.133.28.136:

This IP address has been reported a total of 18 times from 8 distinct sources. 18.133.28.136 was first reported on September 14th 2025, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 pinguin	2026-02-09 15:40:25 (6 months ago)	Triggered Cloudflare WAF (linkMaze) from GB. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (PO ... show more Triggered Cloudflare WAF (linkMaze) from GB. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (POST method) Endpoint: / UA: python-requests/2.31.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-09-14 17:01:32 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 18.133.28.136 (ec2-18-133-28-136.eu-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 18.133.28.136 (ec2-18-133-28-136.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 13:01:25.017464 2025] [security2:error] [pid 4726:tid 4726] [client 18.133.28.136:50792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tradersworldmarket.com"] [uri "/.env"] [unique_id "aMb05b84D0GVPi-irPttEQAAAAk"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-14 15:44:34 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 18.133.28.136 (ec2-18-133-28-136.eu-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 18.133.28.136 (ec2-18-133-28-136.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 11:44:28.352001 2025] [security2:error] [pid 16939:tid 16939] [client 18.133.28.136:47344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tradenaples.com"] [uri "/.env"] [unique_id "aMbi3JQsjyVbXSj7YhFdtwAAAAs"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-14 15:19:56 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 18.133.28.136 (ec2-18-133-28-136.eu-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 18.133.28.136 (ec2-18-133-28-136.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 11:19:50.309847 2025] [security2:error] [pid 16945:tid 16945] [client 18.133.28.136:34602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trademarkexaminerscom.karenbernsteinlaw.net"] [uri "/.env"] [unique_id "aMbdFlSTJATaTuu469MXugAAAAs"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-14 14:56:06 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 18.133.28.136 (ec2-18-133-28-136.eu-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 18.133.28.136 (ec2-18-133-28-136.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 10:56:00.532551 2025] [security2:error] [pid 27292:tid 27292] [client 18.133.28.136:34270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trade.dodojuice.com"] [uri "/.env"] [unique_id "aMbXgO7KOjfa0BuPkCZxsAAAABA"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 zorrigas	2025-09-14 14:02:55 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 18.133.28.136 (GB/United Kingdom/ec2-18-133-28- ... show more (mod_security) mod_security (id:210492) triggered by 18.133.28.136 (GB/United Kingdom/ec2-18-133-28-136.eu-west-2.compute.amazonaws.com): 5 in the last 3600 secs show less	Brute-Force
🇳🇱 Site.eu	2025-09-14 13:14:10 (11 months ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2025-09-14 12:25:10 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 18.133.28.136 (ec2-18-133-28-136.eu-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 18.133.28.136 (ec2-18-133-28-136.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 08:25:05.116429 2025] [security2:error] [pid 1979420:tid 1979518] [client 18.133.28.136:35436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "track.ahsdistance.org"] [uri "/.env"] [unique_id "aMa0ITsYREVBNPrvxrFXXAAAAEg"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-14 11:15:32 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 18.133.28.136 (ec2-18-133-28-136.eu-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 18.133.28.136 (ec2-18-133-28-136.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 07:15:29.154244 2025] [security2:error] [pid 5441:tid 5441] [client 18.133.28.136:35996] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pondplain.org"] [uri "/.env"] [unique_id "aMaj0Q3H6hGVPTPyOTloNgAAABc"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-14 08:16:42 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 18.133.28.136 (ec2-18-133-28-136.eu-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 18.133.28.136 (ec2-18-133-28-136.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 04:16:38.538001 2025] [security2:error] [pid 29378:tid 29378] [client 18.133.28.136:35064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "polygonresearch.seekingthemind.com"] [uri "/.env"] [unique_id "aMZ55qttVtm3vB7pN4XEDwAAACk"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-09-14 07:50:34 (11 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
🇬🇧 Apache	2025-09-14 07:35:25 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 18.133.28.136 (GB/United Kingdom/ec2-18-133-28- ... show more (mod_security) mod_security (id:210492) triggered by 18.133.28.136 (GB/United Kingdom/ec2-18-133-28-136.eu-west-2.compute.amazonaws.com): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-09-14 06:46:05 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 18.133.28.136 (ec2-18-133-28-136.eu-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 18.133.28.136 (ec2-18-133-28-136.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 02:46:01.481080 2025] [security2:error] [pid 7989:tid 7989] [client 18.133.28.136:41520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "polishedspaservices.com"] [uri "/.env"] [unique_id "aMZkqSRaqVhtkjcD_gDdYgAAAAU"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-14 06:14:04 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 18.133.28.136 (ec2-18-133-28-136.eu-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 18.133.28.136 (ec2-18-133-28-136.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 02:13:57.950045 2025] [security2:error] [pid 4136:tid 4168] [client 18.133.28.136:57138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "politicalanalyst.aafm.us"] [uri "/.env"] [unique_id "aMZdJV-AfHOqxM74FJ486gAAAJY"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-09-14 06:11:16 (11 months ago)	Detected attack by Imunify360	Brute-Force Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 181.129.133.130

🇬🇧 185.210.157.84

🇩🇪 167.94.145.20

🇺🇸 147.185.132.192

🇷🇺 81.200.247.11

🇮🇩 43.157.230.160

🇺🇸 3.85.74.0

🇰🇿 194.146.42.247

🇺🇦 194.44.229.213

🇷🇸 178.220.125.96

🇹🇷 178.18.196.174

🇷🇺 176.214.240.102

🇫🇷 172.71.127.53

🇮🇳 103.86.180.10

🇺🇸 52.173.67.116

🇹🇭 43.128.199.208

🇮🇷 31.214.169.114

🇬🇧 2a06:4882:d000::f4

🇺🇸 198.57.247.148

🇵🇱 185.63.109.152