JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.133.109.146

3.133.109.146 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 81%: ?

81%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-133-109-146.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.133.109.146

Whois 3.133.109.146

IP Abuse Reports for 3.133.109.146:

This IP address has been reported a total of 18 times from 13 distinct sources. 3.133.109.146 was first reported on July 24th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-26 08:13:31 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.133.109.146 (ec2-3-133-109-146.us-east-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 3.133.109.146 (ec2-3-133-109-146.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 04:13:26.378146 2026] [security2:error] [pid 1405355:tid 1405355] [client 3.133.109.146:33934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ibook.micahgartman.com"] [uri "/.git/config"] [unique_id "amXBpg2wwGz-Ol_PTcOl1gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-07-26 06:38:37 (13 hours ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 3.133.109.146 (US/United States/ec2 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 3.133.109.146 (US/United States/ec2-3-133-109-146.us-east-2.compute.amazonaws.com): 1 in the last 3600 secs show less	Web App Attack
🇳🇱 Site.eu	2026-07-26 06:14:07 (14 hours ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-07-26 05:29:13 (14 hours ago)	Fail2Ban - Nginx Bot Probes	Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 04:01:04 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.133.109.146 (ec2-3-133-109-146.us-east-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 3.133.109.146 (ec2-3-133-109-146.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 00:01:00.057037 2026] [security2:error] [pid 4155023:tid 4155040] [client 3.133.109.146:33352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.iacsb.com.aafm.us"] [uri "/.git/config"] [unique_id "amWGfP-Bh195vLMAEoIFnAAAAMs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-25 22:01:28 (22 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-24. show less	Web App Attack SSH Hacking
Anonymous	2026-07-25 16:32:09 (1 day ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇱🇻 garmtech.com	2026-07-25 05:20:19 (1 day ago)	IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ... show more IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478) show less	Hacking
🇳🇱 Site.eu	2026-07-25 04:10:20 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 Site.eu	2026-07-25 03:49:37 (1 day ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-07-25 00:04:25 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 3.133.109.146 (ec2-3-133-109-146.us-east-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 3.133.109.146 (ec2-3-133-109-146.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 20:04:20.638184 2026] [security2:error] [pid 1445535:tid 1445535] [client 3.133.109.146:57494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hancockcountyfarmersmarket.com.daisydoesoap.com"] [uri "/.git/config"] [unique_id "amP9hBndi8FmkvzipHBtgwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-24 22:03:48 (1 day ago)	Auto-ban: >3000 req/min op 2026-07-24	Web App Attack SSH Hacking
Anonymous	2026-07-24 11:38:04 (2 days ago)	Bot / scanning and/or hacking attempts: GET /.env.swp HTTP/1.1, GET /.env.uat HTTP/1.1, GET /.env.pr ... show more Bot / scanning and/or hacking attempts: GET /.env.swp HTTP/1.1, GET /.env.uat HTTP/1.1, GET /.env.preprod HTTP/1.1 show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-07-24 10:02:25 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27	Exploited Host Web App Attack
🇳🇱 Mangelot Hosting	2026-07-24 09:10:40 (2 days ago)	(modsecurity) srv103 ModSecurity 3.133.109.146 (US/United States/ec2-3-133-109-146.us-east-2.compute ... show more (modsecurity) srv103 ModSecurity 3.133.109.146 (US/United States/ec2-3-133-109-146.us-east-2.compute.amazonaws.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 98.94.61.21

🇩🇪 51.75.64.35

🇺🇸 2607:f8b0:4001:c72::12a

🇳🇬 197.211.57.9

🇨🇳 183.34.160.163

🇩🇪 164.92.178.97

🇮🇩 163.7.3.26

🇺🇸 104.42.186.50

🇬🇷 79.129.11.212

🇨🇦 51.161.37.223

🇳🇱 45.153.34.15

🇺🇸 20.64.105.196

🇰🇿 2.134.15.12

🇺🇸 192.129.128.23

🇬🇧 188.166.175.1

🇪🇸 158.158.32.226

🇨🇱 136.248.242.166

🇨🇳 116.179.37.231

🇨🇳 39.170.37.133

🇮🇩 34.101.94.70