JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.145.90.0

18.145.90.0 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 46%: ?

46%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-145-90-0.us-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.145.90.0

Whois 18.145.90.0

IP Abuse Reports for 18.145.90.0:

This IP address has been reported a total of 13 times from 7 distinct sources. 18.145.90.0 was first reported on July 24th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-28 03:34:39 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.145.90.0 (ec2-18-145-90-0.us-west-1.compute. ... show more (mod_security) mod_security (id:210492) triggered by 18.145.90.0 (ec2-18-145-90-0.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 23:34:32.710450 2026] [security2:error] [pid 1121:tid 1121] [client 18.145.90.0:50524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "johngutierrez.com"] [uri "/.git/config"] [unique_id "amgjSDkkl4FFJ00ZRmkMZQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-28 03:12:41 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.145.90.0 (ec2-18-145-90-0.us-west-1.compute. ... show more (mod_security) mod_security (id:210492) triggered by 18.145.90.0 (ec2-18-145-90-0.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 23:12:33.955635 2026] [security2:error] [pid 72552:tid 72552] [client 18.145.90.0:58926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "johnedwardsconsulting.com"] [uri "/.git/config"] [unique_id "amgeIdDiWMRUULjirvuC2QAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-28 02:34:54 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.145.90.0 (ec2-18-145-90-0.us-west-1.compute. ... show more (mod_security) mod_security (id:210492) triggered by 18.145.90.0 (ec2-18-145-90-0.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 22:34:46.181732 2026] [security2:error] [pid 1283905:tid 1283905] [client 18.145.90.0:47664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "john-bell-associates.com"] [uri "/.git/config"] [unique_id "amgVRnv-9RyZVngPh2aPAAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 zynex	2026-07-28 01:38:53 (5 hours ago)	URL Probing: /backend/.env	Web App Attack
Anonymous	2026-07-28 00:34:04 (6 hours ago)	IP banned by Fail2Ban due to multiple malicious requests on Nginx	Brute-Force SSH Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 16:23:39 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.145.90.0 (ec2-18-145-90-0.us-west-1.compute. ... show more (mod_security) mod_security (id:210492) triggered by 18.145.90.0 (ec2-18-145-90-0.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 12:23:32.338608 2026] [security2:error] [pid 1826498:tid 1826498] [client 18.145.90.0:36182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kahnzollbeck.org"] [uri "/.git/config"] [unique_id "ameGBHfNEaS0vTDbM79YDgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-27 12:18:33 (19 hours ago)	Excessive 404/403 errors	Brute-Force
🇫🇮 indev.fi	2026-07-27 10:37:20 (20 hours ago)	kadence.peltopiri.com 18.145.90.0 - - [27/Jul/2026:13:36:21 +0300] "GET /.git/config HTTP/1.1" 444 0 ... show more kadence.peltopiri.com 18.145.90.0 - - [27/Jul/2026:13:36:21 +0300] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" kadence.peltopiri.com 18.145.90.0 - - [27/Jul/2026:13:36:22 +0300] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" kadence.peltopiri.com 18.145.90.0 - - [27/Jul/2026:13:36:22 +0300] "GET /.env.local HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Port Scan Hacking Bad Web Bot Web App Attack
🇩🇪 Blexyel	2026-07-24 18:47:42 (3 days ago)	18.145.90.0 - - [24/Jul/2026:20:47:42 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 (X ... show more 18.145.90.0 - - [24/Jul/2026:20:47:42 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 12:25:11 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 18.145.90.0 (ec2-18-145-90-0.us-west-1.compute. ... show more (mod_security) mod_security (id:210492) triggered by 18.145.90.0 (ec2-18-145-90-0.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 08:25:06.237826 2026] [security2:error] [pid 3864170:tid 3864170] [client 18.145.90.0:57470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tinkerlabyrinth.com"] [uri "/.git/config"] [unique_id "amNZojbI8Wdh-V0W-zyozQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-24 09:19:23 (3 days ago)	Excessive 404/403 errors	Brute-Force
🇱🇻 garmtech.com	2026-07-24 09:03:18 (3 days ago)	IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ... show more IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-24 06:38:03 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 18.145.90.0 (ec2-18-145-90-0.us-west-1.compute. ... show more (mod_security) mod_security (id:210492) triggered by 18.145.90.0 (ec2-18-145-90-0.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 02:37:55.875990 2026] [security2:error] [pid 3861126:tid 3861126] [client 18.145.90.0:42084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "timjbutler.com"] [uri "/.git/config"] [unique_id "amMIQwnbRit93RbN8CK8PgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.32.209.228

🇨🇳 180.95.238.122

🇨🇴 177.93.44.222

🇺🇸 162.216.150.194

🇨🇳 39.164.94.190

🇬🇧 35.203.211.134

🇺🇸 162.216.149.43

🇹🇼 128.14.227.52

🇻🇳 123.25.115.189

🇺🇸 104.22.1.128

🇩🇪 93.152.221.206

🇮🇹 93.146.1.122

🇷🇴 92.118.39.77

🇺🇸 91.230.168.232

🇷🇴 80.94.92.234

🇰🇷 59.31.235.60

🇨🇳 36.33.167.165

🇬🇧 35.203.211.231

🇨🇳 14.103.41.249

🇺🇸 195.184.76.203