JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.117.98.170

18.117.98.170 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 60%: ?

60%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-117-98-170.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.117.98.170

Whois 18.117.98.170

IP Abuse Reports for 18.117.98.170:

This IP address has been reported a total of 12 times from 9 distinct sources. 18.117.98.170 was first reported on July 24th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-25 04:13:34 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 18.117.98.170 (ec2-18-117-98-170.us-east-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 18.117.98.170 (ec2-18-117-98-170.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 00:13:27.291147 2026] [security2:error] [pid 2273650:tid 2273650] [client 18.117.98.170:51448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arsndetx.com"] [uri "/.git/config"] [unique_id "amQ357c9HM-cC6zT3emQNgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-25 04:03:45 (1 hour ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇳🇱 ConsulHosting	2026-07-25 03:27:03 (1 hour ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 02:20:40 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.117.98.170 (ec2-18-117-98-170.us-east-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 18.117.98.170 (ec2-18-117-98-170.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 22:20:32.729685 2026] [security2:error] [pid 10143:tid 10143] [client 18.117.98.170:42134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arrasmithquill.com"] [uri "/.git/config"] [unique_id "amQdcN-29c3M-fZpgh3EWQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-07-25 02:16:49 (3 hours ago)	Try to access /arrangementen/.git/config	Web App Attack
🇪🇸 masterguru	2026-07-25 01:36:00 (3 hours ago)	Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ... show more Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122) show less	Hacking
🇺🇸 jsjdmediallc	2026-07-25 01:20:04 (4 hours ago)	Auto-blocked: score 2357 (threshold 10). Tier: HIGH. Hits: 538. Flags: 404-scanner, credentials, sec ... show more Auto-blocked: score 2357 (threshold 10). Tier: HIGH. Hits: 538. Flags: 404-scanner, credentials, secret-file, conf-file, phpinfo, info-file, error-scan, backup-file, joomla-admin, server-info, server-status, test-file, env-file, mysql-probe, git-exposure, joomla-probe, git-config. Paths: /key.json, /firebase-adminsdk.json, /.config/gcloud/application_default_credentials.json, /key.json, /application_default_credentials.json show less	Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-25 01:18:10 (4 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇱🇻 garmtech.com	2026-07-25 00:17:47 (5 hours ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/api/staging/.env	Web App Attack
🇱🇻 garmtech.com	2026-07-25 00:17:18 (5 hours ago)	IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ... show more IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478) show less	Hacking
🇳🇱 Site.eu	2026-07-24 04:42:17 (1 day ago)	Excessive 404/403 errors	Brute-Force
🇮🇹 VHosting	2026-07-24 03:45:03 (1 day ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇪 197.248.207.138

🇨🇳 182.43.235.218

🇷🇺 81.177.141.233

🇺🇸 45.3.37.23

🇺🇸 18.212.20.153

🇳🇱 204.76.203.18

🇮🇩 180.253.251.229

🇲🇾 165.154.147.69

🇻🇳 152.32.163.183

🇨🇦 104.207.61.42

🇺🇸 104.167.25.208

🇨🇦 85.217.149.69

🇷🇺 80.234.76.70

🇧🇬 79.124.62.230

🇧🇬 79.124.62.126

🇩🇪 69.5.169.36

🇺🇸 66.29.143.251

🇳🇱 45.153.34.144

🇳🇱 45.148.10.151

🇺🇸 3.86.230.159