JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.117.114.202

18.117.114.202 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 0%: ?

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-117-114-202.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.117.114.202

Whois 18.117.114.202

IP Abuse Reports for 18.117.114.202:

This IP address has been reported a total of 34 times from 25 distinct sources. 18.117.114.202 was first reported on March 17th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Catalin Negru	2026-07-16 09:46:48 (1 month ago)	2026-06-18 13:34:35,348 fail2ban.actions [2945670]: NOTICE [apache-dirscan] Ban 18.117.114.2 ... show more 2026-06-18 13:34:35,348 fail2ban.actions [2945670]: NOTICE [apache-dirscan] Ban 18.117.114.202 2026-06-18 13:34:35,379 fail2ban.actions [2945670]: NOTICE [laravel-auth] Ban 18.117.114.202 2026-06-18 13:34:35,442 fail2ban.actions [2945670]: NOTICE [web-scanner] Ban 18.117.114.202 2026-06-18 13:34:35,654 fail2ban.actions [2945670]: NOTICE [apache-security] Ban 18.117.114.202 2026-06-18 13:34:35,748 fail2ban.actions [2945670]: NOTICE [apache-404] Ban 18.117.114.202 ... show less	Brute-Force Web App Attack
🇫🇷 Catalin Negru	2026-07-04 17:05:15 (1 month ago)	2026-06-18 13:34:35,348 fail2ban.actions [2945670]: NOTICE [apache-dirscan] Ban 18.117.114.2 ... show more 2026-06-18 13:34:35,348 fail2ban.actions [2945670]: NOTICE [apache-dirscan] Ban 18.117.114.202 2026-06-18 13:34:35,379 fail2ban.actions [2945670]: NOTICE [laravel-auth] Ban 18.117.114.202 2026-06-18 13:34:35,442 fail2ban.actions [2945670]: NOTICE [web-scanner] Ban 18.117.114.202 2026-06-18 13:34:35,654 fail2ban.actions [2945670]: NOTICE [apache-security] Ban 18.117.114.202 2026-06-18 13:34:35,748 fail2ban.actions [2945670]: NOTICE [apache-404] Ban 18.117.114.202 ... show less	Brute-Force Web App Attack
🇧🇷 Peregrine	2026-06-22 03:13:02 (2 months ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 18.117.114.202 - - [18/Jun/2026:16:43:33 -0300] " ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 18.117.114.202 - - [18/Jun/2026:16:43:33 -0300] "GET /.git/logs/HEAD HTTP/1.1" 404 18193 show less	Bad Web Bot
🇧🇷 Peregrine	2026-06-20 03:13:04 (2 months ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 18.117.114.202 - - [18/Jun/2026:16:43:33 -0300] " ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 18.117.114.202 - - [18/Jun/2026:16:43:33 -0300] "GET /.git/logs/HEAD HTTP/1.1" 404 18193 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-18 22:26:04 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 18.117.114.202 (ec2-18-117-114-202.us-east-2.co ... show more (mod_security) mod_security (id:210492) triggered by 18.117.114.202 (ec2-18-117-114-202.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 18:25:56.977658 2026] [security2:error] [pid 13333:tid 13415] [client 18.117.114.202:56106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.21"] [uri "/.git/HEAD"] [unique_id "ajRwdIWJ3gz7maXF_8pTLQAAAQw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Starburst SysOp Team	2026-06-18 22:24:25 (2 months ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-nue6-1)	Hacking Bad Web Bot
🇫🇮 oh.mg	2026-06-18 21:30:50 (2 months ago)	[Thu Jun 18 23:30:48.411572 2026] [security2:error] [pid 3892201:tid 3892214] [client 18.117.114.202 ... show more [Thu Jun 18 23:30:48.411572 2026] [security2:error] [pid 3892201:tid 3892214] [client 18.117.114.202:47374] [client 18.117.114.202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "95.216.72.247"] [uri "/.git/HEAD"] [unique_id "ajRjiK2XQMcSEDhMDsaPRQAAAMs"] [Thu Jun 18 23:30:50.584123 2026] [security2:error] [pid 3892662:tid 3892673] [client 18.117.114.202:47376] [client 18.117.114.202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev ... show less	Web App Attack Bad Web Bot
🇦🇺 gregoo23	2026-06-18 21:10:49 (2 months ago)	18.117.114.202 - - [19/Jun/2026:07:10:42 +1000] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Wi ... show more 18.117.114.202 - - [19/Jun/2026:07:10:42 +1000] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 18.117.114.202 - - [19/Jun/2026:07:10:44 +1000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36" 18.117.114.202 - - [19/Jun/2026:07:10:47 +1000] "GET /.git/refs/heads/master HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" ... show less	Bad Web Bot Web App Attack
🇺🇸 MPL	2026-06-18 20:56:10 (2 months ago)	tcp port scan (9 or more attempts)	Port Scan
🇦🇺 clapper	2026-06-18 20:48:01 (2 months ago)	(mod_security) mod_security (id:949110) triggered by 18.117.114.202 (US/United States/ec2-18-117-114 ... show more (mod_security) mod_security (id:949110) triggered by 18.117.114.202 (US/United States/ec2-18-117-114-202.us-east-2.compute.amazonaws.com): 5 in the last 600 secs; ID: rub show less	Brute-Force Bad Web Bot
🇳🇱 knock	2026-06-18 20:19:07 (2 months ago)	Knock-Knock honeypot brute-force: proto8 (39 total hits)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-18 20:03:39 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 18.117.114.202 (ec2-18-117-114-202.us-east-2.co ... show more (mod_security) mod_security (id:210492) triggered by 18.117.114.202 (ec2-18-117-114-202.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 16:03:33.174846 2026] [security2:error] [pid 26332:tid 26332] [client 18.117.114.202:43216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.104"] [uri "/.git/logs/HEAD"] [unique_id "ajRPFSSUM_p_Yw-GshTKUwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-06-18 19:43:44 (2 months ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 18.117.114.202 - - [18/Jun/2026:16:43:33 -0300] " ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 18.117.114.202 - - [18/Jun/2026:16:43:33 -0300] "GET /.git/logs/HEAD HTTP/1.1" 404 18193 show less	Bad Web Bot
🇩🇪 8legz.net	2026-06-18 19:28:12 (2 months ago)	[Thu Jun 18 20:28:01.252842 2026] [php:error] [pid 1527529] [client 18.117.114.202:46272] script '/v ... show more [Thu Jun 18 20:28:01.252842 2026] [php:error] [pid 1527529] [client 18.117.114.202:46272] script '/var/www/html/wp-config.php' not found or unable to stat [Thu Jun 18 20:28:08.916902 2026] [php:error] [pid 1525806] [client 18.117.114.202:39412] script '/var/www/html/info.php' not found or unable to stat [Thu Jun 18 20:28:12.517998 2026] [php:error] [pid 1525800] [client 18.117.114.202:39434] script '/var/www/html/config.php' not found or unable to stat ... show less	Brute-Force
Anonymous	2026-06-18 19:06:21 (2 months ago)	Automated report from Fail2Ban firewall ban	Brute-Force SSH IoT Targeted

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2600:3c02::2000:f6ff:fe9b:769c

🇬🇧 193.163.125.52

🇮🇳 182.18.161.165

🇩🇪 162.62.223.77

🇨🇳 111.113.88.103

🇳🇱 45.148.10.151

🇯🇵 43.165.170.19

🇺🇿 213.230.66.211

🇦🇷 190.173.40.112

🇦🇷 181.209.87.243

🇨🇳 180.153.236.7

🇺🇸 172.215.210.48

🇬🇧 167.172.50.99

🇷🇺 95.79.223.107

🇨🇳 222.176.201.37

🇮🇩 163.7.13.250

🇳🇱 91.84.106.19

🇺🇦 81.162.244.254

🇧🇬 78.128.114.46

🇱🇹 62.60.130.253