JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

18.116.71.255

Neutral Activity

Abuse Confidence Score

0% Low Risk

27 reports

19 reporters · latest 1 year ago

ISP: Amazon Technologies Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS16509
Hostname(s): ec2-18-116-71-255.us-east-2.compute.amazonaws.com
Domain Name: amazon.com
Country: 🇺🇸 United States of America
City: Columbus, Ohio

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

18.116.71.255 has been reported 27 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

27 from 19 distinct reporters

First reported

October 20th 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2025-10-21 21:59:36 UTC · (1 year ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-10-20.	Hacking Web App Attack SSH
🇬🇧 openstrike.co.uk	2025-10-21 05:14:00 UTC · (1 year ago)	11 attacks on PHP URLs, env grabbing URLs: GET /phpinfo.php HTTP/1.1 GET /new/.env.staging HTTP/1.1	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2025-10-20 22:02:12 UTC · (1 year ago)	Auto-ban: >3000 req/min op 2025-10-20	Hacking Web App Attack SSH
🇦🇺 nzhost.co.nz	2025-10-20 12:51:40 UTC · (1 year ago)	$f2bV_matches	Hacking Brute-Force
🇵🇱 ketovoila.pl	2025-10-20 12:26:48 UTC · (1 year ago)	ketovoila.pl HONEYPOT traffic: count=1, paths=1; sample_path=ketovoila.pl/; UA=; window=2025-10-20T12:04:18Z..2025-10-20T12:04:18Z	Port Scan Hacking Brute-Force
Anonymous	2025-10-20 11:58:51 UTC · (1 year ago)	[20/Oct/2025:22:58:50 +1100] "GET /.git/config HTTP/1.1" 301 252 "Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0"	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-10-20 11:01:41 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 18.116.71.255 (ec2-18-116-71-255.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 20 07:01:33.573521 2025] [security2:error] [pid ... show more (mod_security) mod_security (id:210492) triggered by 18.116.71.255 (ec2-18-116-71-255.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 20 07:01:33.573521 2025] [security2:error] [pid 28954:tid 28954] [client 18.116.71.255:58784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "johnatuttle.us"] [uri "/.env"] [unique_id "aPYWjc0U9sV7IPlv4fpH5QAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 as211431.net	2025-10-20 10:48:49 UTC · (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB	Bad Web Bot
🇬🇧 Mendip_Defender	2025-10-20 10:03:35 UTC · (1 year ago)	18.116.71.255 - - [20/Oct/2025:11:03:27 +0100] "GET /_profiler/phpinfo HTTP/1.0" 404 5017 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 18.116.71.255 - - [20/Oct/2025:11:03:29 +0100] "GET /_profiler/phpinfo/info. ... show more 18.116.71.255 - - [20/Oct/2025:11:03:27 +0100] "GET /_profiler/phpinfo HTTP/1.0" 404 5017 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 18.116.71.255 - - [20/Oct/2025:11:03:29 +0100] "GET /_profiler/phpinfo/info.php HTTP/1.0" 404 5017 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 18.116.71.255 - - [20/Oct/2025:11:03:30 +0100] "GET /_profiler/phpinfo/phpinfo.php HTTP/1.0" 404 5017 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-10-20 08:55:08 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 18.116.71.255 (ec2-18-116-71-255.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 20 04:55:02.910648 2025] [security2:error] [pid ... show more (mod_security) mod_security (id:210492) triggered by 18.116.71.255 (ec2-18-116-71-255.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 20 04:55:02.910648 2025] [security2:error] [pid 27187:tid 27187] [client 18.116.71.255:60058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "internationalavionics.com"] [uri "/.git/config"] [unique_id "aPX45iRIzv8vRNeOxuE1NwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WizardsToolkit	2025-10-20 08:47:56 UTC · (1 year ago)	attempted to access /portal/.env	Web App Attack
🇳🇱 debestelapp	2025-10-20 08:35:03 UTC · (1 year ago)		Web App Attack
🇺🇸 TPI-Abuse	2025-10-20 08:23:00 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 18.116.71.255 (ec2-18-116-71-255.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 20 04:22:52.415494 2025] [security2:error] [pid ... show more (mod_security) mod_security (id:210492) triggered by 18.116.71.255 (ec2-18-116-71-255.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 20 04:22:52.415494 2025] [security2:error] [pid 26433:tid 26433] [client 18.116.71.255:33094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "industrialgraphicdesign.com"] [uri "/.env"] [unique_id "aPXxXBI2nqm0dck3HbyLQwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2025-10-20 08:04:06 UTC · (1 year ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2025-10-20 07:54:12 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 18.116.71.255 (ec2-18-116-71-255.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 20 03:54:08.268304 2025] [security2:error] [pid ... show more (mod_security) mod_security (id:210492) triggered by 18.116.71.255 (ec2-18-116-71-255.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 20 03:54:08.268304 2025] [security2:error] [pid 32664:tid 32664] [client 18.116.71.255:35814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ilil.net"] [uri "/.env"] [unique_id "aPXqoC007o7IPSFB2J-2RQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2a10:4a01:a215:3a82:451:295:7c45:ca7e

🇨🇳 220.161.52.149

🇨🇳 220.154.134.180

🇰🇷 220.126.58.114

🇷🇺 213.177.102.141

🇩🇪 194.88.98.113

🇳🇱 193.47.62.69

🇳🇱 176.65.132.93

🇩🇪 161.120.218.128

🇺🇸 157.245.242.193

🇺🇸 143.244.164.209

🇨🇦 143.110.220.4

🇳🇱 138.226.239.233

🇨🇦 138.197.169.143

🇺🇸 108.29.201.14

🇯🇵 104.165.161.225

🇮🇩 103.183.75.60

🇸🇬 47.82.8.179

🇪🇬 41.42.30.104

🇨🇦 24.157.236.250