JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.189.44.89

18.189.44.89 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 83%: ?

83%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-189-44-89.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.189.44.89

Whois 18.189.44.89

IP Abuse Reports for 18.189.44.89:

This IP address has been reported a total of 19 times from 16 distinct sources. 18.189.44.89 was first reported on September 24th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 David Koswari	2026-10-23 05:14:00 (4 hours ago)	REQ_BLOCKED_SECURITY	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇺🇦 URAN Publishing Service	2026-10-22 06:11:29 (1 day ago)	[22/Oct/2026:09:11:28 +0300] -- 18.189.44.89 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /. ... show more [22/Oct/2026:09:11:28 +0300] -- 18.189.44.89 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /.env HTTP/1.1 show less	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-22 03:54:49 (1 day ago)	[cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 18.189.44.89 - - [22/Oct/2026:05:54:39 +0200] "GET /.env.local HTTP/1.1" 404 1350 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-10-22 03:14:21 (1 day ago)	Repeated requests for suspicious nonexistent URLs, for example: /.env.old (HTTP/1.1 port 443, user a ... show more Repeated requests for suspicious nonexistent URLs, for example: /.env.old (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36") show less	Web App Attack
🇺🇸 mnsf	2026-10-21 23:05:16 (1 day ago)	Too many Status 40X (16) Scanning/Probing (16)	Brute-Force Web App Attack
🇯🇵 VXG-NET	2026-10-21 18:02:50 (1 day ago)	port=443, indicator_type=spyware	Email Spam
Anonymous	2026-10-21 14:05:09 (1 day ago)	Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=36	Hacking
🇺🇸 TPI-Abuse	2026-10-21 13:48:23 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 18.189.44.89 (ec2-18-189-44-89.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 18.189.44.89 (ec2-18-189-44-89.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 09:48:15.341514 2026] [security2:error] [pid 19796:tid 19796] [client 18.189.44.89:45572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boardinjapan.com"] [uri "/.env.bak"] [unique_id "atjCnyuXCwTvrTq2d1O-WwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇼 kk_it_man	2026-10-21 06:33:02 (2 days ago)	ET INFO Request to Hidden Environment File - Inbound ET SCAN Laravel Debug Mode Information Disclo ... show more ET INFO Request to Hidden Environment File - Inbound ET SCAN Laravel Debug Mode Information Disclosure Probe Inbound show less	Port Scan
Anonymous	2026-10-21 04:20:09 (2 days ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-20 22:45:41 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 18.189.44.89 (ec2-18-189-44-89.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 18.189.44.89 (ec2-18-189-44-89.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 18:45:35.195650 2026] [security2:error] [pid 28545:tid 28545] [client 18.189.44.89:56688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.calvarycavaliers.org"] [uri "/.env.bak"] [unique_id "atfvD074jPLi9_9RkEWmpQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-10-20 20:13:53 (2 days ago)	[20/Oct/2026:23:13:52 +0300] -- 18.189.44.89 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /. ... show more [20/Oct/2026:23:13:52 +0300] -- 18.189.44.89 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /.env HTTP/1.1 show less	Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-10-20 19:18:40 (2 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇬🇧 oja	2026-10-20 19:13:11 (2 days ago)	Aggressive web scanner	Web App Attack
🇺🇸 TPI-Abuse	2026-10-20 10:57:33 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 18.189.44.89 (ec2-18-189-44-89.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 18.189.44.89 (ec2-18-189-44-89.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 06:57:27.993522 2026] [security2:error] [pid 23798:tid 23812] [client 18.189.44.89:33096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "internationalboardofstandards.com"] [uri "/.env"] [unique_id "atdJF6U1TZBtDIpq6P0ouwAAAQU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 2.57.122.76

🇨🇦 216.73.162.226

🇻🇪 190.153.46.203

🇺🇸 172.59.106.244

🇯🇵 128.27.97.4

🇺🇸 72.24.175.76

🇺🇸 68.198.189.52

🇳🇱 45.148.10.141

🇸🇬 43.133.39.225

🇭🇰 195.21.155.24

🇸🇬 167.71.205.98

🇯🇵 128.27.97.7

🇧🇪 87.64.216.15

🇺🇸 65.49.1.232

🇺🇸 34.148.97.93

🇻🇳 27.79.41.99

🇰🇷 211.178.247.182

🇳🇱 178.16.53.246

🇩🇪 165.245.218.176

🇩🇪 69.5.169.188