JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.134.147.173

18.134.147.173 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	Amazon Data Services UK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-134-147-173.eu-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.134.147.173

Whois 18.134.147.173

IP Abuse Reports for 18.134.147.173:

This IP address has been reported a total of 17 times from 10 distinct sources. 18.134.147.173 was first reported on September 13th 2025, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-08 18:24:37 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 18.134.147.173 (ec2-18-134-147-173.eu-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 18.134.147.173 (ec2-18-134-147-173.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 14:24:29.810274 2026] [security2:error] [pid 994:tid 994] [client 18.134.147.173:36818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.servecon.co.herston.net"] [uri "/.git/config"] [unique_id "af4qXZ8KLWZjgQFGdmdZsQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-05-08 18:05:08 (3 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2025-09-14 21:59:06 (11 months ago)	Auto-ban: >3000 req/min op 2025-09-14	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2025-09-14 18:18:39 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 18.134.147.173 (ec2-18-134-147-173.eu-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 18.134.147.173 (ec2-18-134-147-173.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 14:18:34.678513 2025] [security2:error] [pid 5951:tid 5951] [client 18.134.147.173:58944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sfsdesignsproductions.com"] [uri "/.env"] [unique_id "aMcG-noC4LBrzMerzzSAwQAAABo"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-14 17:52:53 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 18.134.147.173 (ec2-18-134-147-173.eu-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 18.134.147.173 (ec2-18-134-147-173.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 13:52:48.051885 2025] [security2:error] [pid 22749:tid 22749] [client 18.134.147.173:55122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sfprivatechef.com"] [uri "/.env"] [unique_id "aMcA8CwABbSRdjYU5Fs3ZwAAAAU"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-14 15:35:21 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 18.134.147.173 (ec2-18-134-147-173.eu-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 18.134.147.173 (ec2-18-134-147-173.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 11:35:18.273609 2025] [security2:error] [pid 6388:tid 6388] [client 18.134.147.173:44138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sfholidayrentals.com"] [uri "/.env"] [unique_id "aMbgtiVr9QT4TP5RTopjGgAAABQ"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-14 14:33:04 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 18.134.147.173 (ec2-18-134-147-173.eu-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 18.134.147.173 (ec2-18-134-147-173.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 10:32:57.883593 2025] [security2:error] [pid 29902:tid 29902] [client 18.134.147.173:43944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seychelles-boat-registration.com"] [uri "/.env"] [unique_id "aMbSGZLfSRHc4JMxDDKZJAAAABA"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-09-14 14:05:14 (11 months ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (30/60 min)'; Requests=30	Port Scan
🇺🇸 TPI-Abuse	2025-09-14 13:45:56 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 18.134.147.173 (ec2-18-134-147-173.eu-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 18.134.147.173 (ec2-18-134-147-173.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 09:45:53.758542 2025] [security2:error] [pid 2663959:tid 2663959] [client 18.134.147.173:58394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sexycyborg.net"] [uri "/.env"] [unique_id "aMbHEbH7BSu7_05w51PXRwAAAAE"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 RoboSOC	2025-09-14 08:07:58 (11 months ago)	phpunit Remote Code Execution Vulnerability, PTR: ec2-18-134-147-173.eu-west-2.compute.amazonaws.com ... show more phpunit Remote Code Execution Vulnerability, PTR: ec2-18-134-147-173.eu-west-2.compute.amazonaws.com. show less	Hacking
Anonymous	2025-09-14 07:46:27 (11 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-09-14 06:28:13 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 18.134.147.173 (ec2-18-134-147-173.eu-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 18.134.147.173 (ec2-18-134-147-173.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 02:28:08.033257 2025] [security2:error] [pid 15249:tid 15249] [client 18.134.147.173:32928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pressentertoexit.com"] [uri "/.env"] [unique_id "aMZgeMRuaENFxKkJCSkJoAAAABQ"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2025-09-14 04:54:57 (11 months ago)	18.134.147.173 - - [14/Sep/2025:07:54:48 +0300] "GET /.env HTTP/1.1" 404 2876 "https://www.google.co ... show more 18.134.147.173 - - [14/Sep/2025:07:54:48 +0300] "GET /.env HTTP/1.1" 404 2876 "https://www.google.com/" "Mozilla/5.0 (Windows; U; MSIE 9.0; Macintosh; .NET CLR 2.2.3758; Intel Mac OS X 11_5_2)" 18.134.147.173 - - [14/Sep/2025:07:54:55 +0300] "GET /vendor/.env HTTP/1.1" 404 2796 "https://www.google.com/" "Mozilla/5.0 (Windows; U; MSIE 9.0; Macintosh; .NET CLR 2.2.3758; Intel Mac OS X 11_5_2)" ... show less	Web App Attack
🇺🇸 zorrigas	2025-09-13 23:15:12 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 18.134.147.173 (GB/United Kingdom/ec2-18-134-14 ... show more (mod_security) mod_security (id:210492) triggered by 18.134.147.173 (GB/United Kingdom/ec2-18-134-147-173.eu-west-2.compute.amazonaws.com): 5 in the last 3600 secs show less	Brute-Force
Anonymous	2025-09-13 22:33:11 (11 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:ff10:c8:594::4

🇮🇳 185.100.212.141

🇧🇷 170.81.216.78

🇭🇰 101.32.49.171

🇷🇴 92.118.39.50

🇩🇪 88.214.25.125

🇺🇸 66.132.186.202

🇰🇷 61.73.123.20

🇧🇷 205.210.31.218

🇬🇧 193.32.209.229

🇳🇱 185.223.235.61

🇺🇸 154.40.38.233

🇩🇪 151.243.11.12

🇨🇳 124.90.50.135

🇨🇳 123.132.190.16

🇨🇳 120.227.128.121

🇨🇳 120.48.71.14

🇨🇳 120.48.22.219

🇨🇳 116.179.32.109

🇭🇰 113.28.194.234