JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.144.3.89

18.144.3.89 was found in our database!

This IP was reported 54 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-144-3-89.us-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.144.3.89

Whois 18.144.3.89

IP Abuse Reports for 18.144.3.89:

This IP address has been reported a total of 54 times from 34 distinct sources. 18.144.3.89 was first reported on March 21st 2023, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 DZBOT	2026-07-02 12:55:01 (6 hours ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇩🇪 www.Examensfragen.de	2026-07-02 08:27:57 (11 hours ago)		Web Spam Bad Web Bot
🇦🇺 rubixstudios	2026-07-02 07:24:02 (12 hours ago)	Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360	DDoS Attack Brute-Force Web App Attack
🇺🇸 Charlesiv	2026-07-02 02:32:02 (17 hours ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 16509 (Amazon.com, Inc.) ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 16509 (Amazon.com, Inc.) Protocol: HTTP/1.1 (GET method) Endpoint: /.env Timestamp: 2026-07-02T00:49:10Z Ray ID: a149a6265f8b98ce UA: Mozilla/5.0 (Linux; Android 10; MAR-LX1M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Mobile Safari/537.36 show less	Bad Web Bot
🇱🇻 garmtech.com	2026-07-02 00:13:26 (19 hours ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/.env	Web App Attack
Anonymous	2026-07-01 20:22:34 (23 hours ago)	http scanning for .env files ...	Hacking Web App Attack
🇺🇸 chronos	2026-07-01 17:53:39 (1 day ago)	[AUTORAVALT][[01/07/2026 - 14:53:38 -03:00 UTC] Attack from [Amazon Technologies Inc.] [18.144.3.89] ... show more [AUTORAVALT][[01/07/2026 - 14:53:38 -03:00 UTC] Attack from [Amazon Technologies Inc.] [18.144.3.89][ec2-18-144-3-89.us-west-1.compute.amazonaws.com] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, for] ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 12:21:46 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 18.144.3.89 (ec2-18-144-3-89.us-west-1.compute. ... show more (mod_security) mod_security (id:210492) triggered by 18.144.3.89 (ec2-18-144-3-89.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 08:21:38.884702 2026] [security2:error] [pid 18853:tid 18853] [client 18.144.3.89:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "easy-byte.net"] [uri "/.env"] [unique_id "akUGUta4y3DsbVnps135EgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2026-07-01 10:37:43 (1 day ago)	vee-17 : Block hidden directories=>/.env(/)	Hacking
🇺🇸 dtorrer	2026-06-30 22:19:10 (1 day ago)	General vulnerability scan.	Port Scan
🇩🇪 Didier Lagaert	2026-06-30 19:26:30 (2 days ago)	lie-17 : Block hidden directories=>/.env(/)	Hacking
🇺🇸 TPI-Abuse	2026-06-30 14:56:46 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 18.144.3.89 (ec2-18-144-3-89.us-west-1.compute. ... show more (mod_security) mod_security (id:210492) triggered by 18.144.3.89 (ec2-18-144-3-89.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 10:56:41.370959 2026] [security2:error] [pid 4587:tid 4587] [client 18.144.3.89:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail-pmg.com"] [uri "/.env"] [unique_id "akPZKSQFLo1d7M1S4vy2eQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 www.Examensfragen.de	2026-06-30 14:27:40 (2 days ago)		Web Spam Bad Web Bot
Anonymous	2026-06-30 09:45:26 (2 days ago)	http scanning for .env files ...	Hacking Web App Attack
🇵🇱 sefinek.net	2026-06-30 01:07:41 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.env \| UA: Mozilla/5.0 (Linux; Android 10; MAR-LX1M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Mobile Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.39

🇺🇸 147.185.132.31

🇻🇳 116.193.70.26

🇨🇳 101.126.55.95

🇹🇼 61.56.193.111

🇸🇬 47.236.192.26

🇺🇸 45.56.82.11

🇺🇸 198.74.58.148

🇳🇱 77.91.71.11

🇨🇳 114.55.179.151

🇮🇳 20.235.74.118

🇻🇳 14.225.173.146

🇨🇳 120.76.116.45

🇧🇬 91.191.209.118

🇿🇦 20.87.219.67

🇧🇷 200.199.184.141

🇳🇱 185.93.89.36

🇩🇪 161.35.65.86

🇺🇸 147.185.132.77

🇺🇸 141.11.88.3