AbuseIPDB » 3.133.120.141
3.133.120.141
This IP was reported 8 times. Confidence of
Abuse
is 43% : ?
ISP
Amazon Technologies Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-3-133-120-141.us-east-2.compute.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸
United States of America
City
Columbus, Ohio
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 3.133.120.141 :
This IP address has been reported a total of
8
times from
6 distinct
sources.
3.133.120.141 was first reported on
June 19th 2026 , and the most recent report was
15 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-06-19 08:21:51
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 3.133.120.141 (ec2-3-133-120-141.us-east-2.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 3.133.120.141 (ec2-3-133-120-141.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 04:21:44.649301 2026] [security2:error] [pid 31233:tid 31233] [client 3.133.120.141:36858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.194"] [uri "/.git/HEAD"] [unique_id "ajT8GKwXmJDwI5r8G86vxQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 07:23:10
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 3.133.120.141 (ec2-3-133-120-141.us-east-2.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 3.133.120.141 (ec2-3-133-120-141.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 03:23:05.669534 2026] [security2:error] [pid 27138:tid 27138] [client 3.133.120.141:42976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.245"] [uri "/.git/logs/HEAD"] [unique_id "ajTuWdU3BToCY65sd2oIXwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
sthoyer.de
2026-06-19 05:50:01
(17 hours ago)
3.133.120.141 - - [19/Jun/2026:07:49:32 +0200] "GET /.env HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Window ...
show more
3.133.120.141 - - [19/Jun/2026:07:49:32 +0200] "GET /.env HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0"
3.133.120.141 - - [19/Jun/2026:07:49:33 +0200] "GET /.env.local HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0"
3.133.120.141 - - [19/Jun/2026:07:49:59 +0200] "GET /backup/database.sql HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇧🇷
SOC PR
2026-06-19 05:10:48
(18 hours ago)
IPS: Suspicious URL access.
Hacking
🇳🇱
Roderic
2026-06-19 04:22:41
(19 hours ago)
(apache_scanners-2) Failed apache-scanners trigger with match [redacted])
Port Scan
🇳🇱
soverin
2026-06-19 03:04:12
(20 hours ago)
Network scan on port 80
Email Spam
🇷🇸
Scan
2026-06-19 02:28:32
(21 hours ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-06-19 01:46:15
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 3.133.120.141 (ec2-3-133-120-141.us-east-2.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 3.133.120.141 (ec2-3-133-120-141.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 21:46:08.572064 2026] [security2:error] [pid 8598:tid 8598] [client 3.133.120.141:49004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.157"] [uri "/.env.backup"] [unique_id "ajSfYA5JVZlFE50ufjvH8gAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: