JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.118.129.47

18.118.129.47 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 81%: ?

81%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-118-129-47.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.118.129.47

Whois 18.118.129.47

IP Abuse Reports for 18.118.129.47:

This IP address has been reported a total of 14 times from 14 distinct sources. 18.118.129.47 was first reported on August 22nd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-23 22:02:02 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-22. show less	Web App Attack SSH Hacking
🇳🇱 WeCloudit-Anti-Abuse	2026-08-23 05:49:23 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇫🇷 dwmp	2026-08-23 05:38:19 (2 days ago)	[23/Aug/2026:07:38:18.078714 +0200] aoqHStemVwZOieeeVe28dAAAAAM 18.118.129.47 38536 38.242.227.117 7 ... show more [23/Aug/2026:07:38:18.078714 +0200] aoqHStemVwZOieeeVe28dAAAAAM 18.118.129.47 38536 38.242.227.117 7081 [23/Aug/2026:07:38:18.082702 +0200] aoqHStemVwZOieeeVe28dQAAAAQ 18.118.129.47 38552 38.242.227.117 7081 [23/Aug/2026:07:38:18.489160 +0200] aoqHStemVwZOieeeVe28dgAAABY 18.118.129.47 38558 38.242.227.117 7081 ... show less	Brute-Force SSH
🇲🇾 Rizzy	2026-08-23 04:24:39 (2 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇳🇱 middelkoopcc	2026-08-23 02:47:01 (2 days ago)	2026-08-23 04:43:20 GET /.git/config [301] && 2026-08-23 04:43:22 GET /.env [301] && 2026-08-23 04:4 ... show more 2026-08-23 04:43:20 GET /.git/config [301] && 2026-08-23 04:43:22 GET /.env [301] && 2026-08-23 04:43:46 GET /app/.env [301] && 154 more within 20 minutes show less	Web App Attack
Anonymous	2026-08-23 02:26:46 (2 days ago)	18.118.129.47 - - [23/Aug/2026:04:26:45 +0200] "GET /.git/config HTTP/1.1" 200 3264 "-" "Mozilla/5.0 ... show more 18.118.129.47 - - [23/Aug/2026:04:26:45 +0200] "GET /.git/config HTTP/1.1" 200 3264 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH
🇬🇧 Aetherweb Ark	2026-08-23 00:45:42 (2 days ago)	(mod_security) mod_security (id:949110) triggered by 18.118.129.47 (US/United States/ec2-18-118-129- ... show more (mod_security) mod_security (id:949110) triggered by 18.118.129.47 (US/United States/ec2-18-118-129-47.us-east-2.compute.amazonaws.com): N in the last X secs show less	Web App Attack
🇫🇷 Octopuce	2026-08-22 20:20:05 (2 days ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇺🇸 mnsf	2026-08-22 15:05:13 (2 days ago)	Scanning/Probing (15)	Brute-Force Web App Attack
🇩🇪 hchristo	2026-08-22 14:01:40 (2 days ago)	[Sat Aug 22 16:01:26.894182 2026] [authz_core:error] [pid 11327:tid 11382] [client 18.118.129.47:562 ... show more [Sat Aug 22 16:01:26.894182 2026] [authz_core:error] [pid 11327:tid 11382] [client 18.118.129.47:56212] AH01630: client denied by server configuration: /var/www/kd1103/htdocs/fortunecafe.de/.env.bak [Sat Aug 22 16:01:28.061104 2026] [authz_core:error] [pid 11327:tid 11404] [client 18.118.129.47:56212] AH01630: client denied by server configuration: /var/www/kd1103/htdocs/fortunecafe.de/.env.save [Sat Aug 22 16:01:28.165100 2026] [authz_core:error] [pid 11327:tid 11397] [client 18.118.129.47:56212] AH01630: client denied by server configuration: /var/www/kd1103/htdocs/fortunecafe.de/.env.old [Sat Aug 22 16:01:40.146731 2026] [authz_core:error] [pid 11327:tid 11385] [client 18.118.129.47:56212] AH01630: client denied by server configuration: /var/www/kd1103/htdocs/fortunecafe.de/.env.swp [Sat Aug 22 16:01:40.250549 2026] [authz_core:error] [pid 11327:tid 11381] [client 18.118.129.47:56212] AH01630: client denied by server configuration: /var/www/kd1103/htdocs/fortunecafe.de/.env~ ... show less	Brute-Force
Anonymous	2026-08-22 04:40:02 (3 days ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 04:32:43 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 18.118.129.47 (ec2-18-118-129-47.us-east-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 18.118.129.47 (ec2-18-118-129-47.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 00:32:35.777105 2026] [security2:error] [pid 1130:tid 1130] [client 18.118.129.47:36860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fabrikaz.com"] [uri "/.git/config"] [unique_id "aokmY73fRSNHY0q-OqAAwwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 GabrielJST	2026-08-22 03:47:52 (3 days ago)	(mod_security) mod_security triggered on hostname [redacted] 18.118.129.47 (US/United States/ec2-18- ... show more (mod_security) mod_security triggered on hostname [redacted] 18.118.129.47 (US/United States/ec2-18-118-129-47.us-east-2.compute.amazonaws.com): (CF_ENABLE) show less	SQL Injection
🇮🇹 VHosting	2026-08-22 02:10:05 (3 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2400:cb00:119:1000:d5d0:28be:6cf0:9069

🇱🇹 213.176.26.134

🇷🇺 95.131.77.95

🇰🇷 221.161.150.151

🇨🇴 181.118.154.109

🇦🇷 181.23.36.88

🇭🇰 152.32.212.226

🇩🇪 151.243.11.9

🇳🇱 141.11.1.95

🇧🇩 103.60.175.207

🇭🇰 101.36.119.146

🇩🇪 91.99.216.127

🇱🇹 77.90.185.207

🇺🇸 74.208.9.170

🇺🇸 45.55.153.86

🇵🇰 39.48.15.196

🇺🇸 205.210.31.89

🇬🇧 87.236.176.125

🇺🇸 2400:cb00:988:1000:e69d:2ad0:9642:4429

🇬🇧 217.154.42.110