JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.191.245.85

18.191.245.85 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 65%: ?

65%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-191-245-85.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.191.245.85

Whois 18.191.245.85

IP Abuse Reports for 18.191.245.85:

This IP address has been reported a total of 17 times from 15 distinct sources. 18.191.245.85 was first reported on December 5th 2021, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-07-25 01:05:29 (5 hours ago)	Scanning/Probing (31)	Brute-Force Web App Attack
Anonymous	2026-07-24 23:40:29 (6 hours ago)	(caddyscan) Scanner path probe from 18.191.245.85 (US/United States/ec2-18-191-245-85.us-east-2.comp ... show more (caddyscan) Scanner path probe from 18.191.245.85 (US/United States/ec2-18-191-245-85.us-east-2.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 18.191.245.85 - - [24/Jul/2026:23:40:25 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 18.191.245.85 - - [24/Jul/2026:23:40:25 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 18.191.245.85 - - [24/Jul/2026:23:40:25 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 18.191.245.85 - - [24/Jul/2026:23:40:25 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 18.191.245.85 - - [24/Jul/2026:23:40:25 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
🇳🇱 debestelapp	2026-07-24 23:30:12 (7 hours ago)		Web App Attack
🇳🇿 Antinson	2026-07-24 17:32:46 (13 hours ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-24 16:14:16 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.191.245.85 (ec2-18-191-245-85.us-east-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 18.191.245.85 (ec2-18-191-245-85.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 12:14:10.292540 2026] [security2:error] [pid 4327:tid 4327] [client 18.191.245.85:34540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.portraitartisans.vittariadesign.com"] [uri "/.git/config"] [unique_id "amOPUpNvx2nS1DJT9k6CywAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 14:42:37 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.191.245.85 (ec2-18-191-245-85.us-east-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 18.191.245.85 (ec2-18-191-245-85.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 10:42:33.761921 2026] [security2:error] [pid 2041030:tid 2041030] [client 18.191.245.85:34620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.portfolio.rnance.com"] [uri "/.git/config"] [unique_id "amN52UkgptA1hk1XOUpLcAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-24 14:04:53 (16 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-24 13:49:12 (16 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 13:45:51 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.191.245.85 (ec2-18-191-245-85.us-east-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 18.191.245.85 (ec2-18-191-245-85.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 09:45:46.471999 2026] [security2:error] [pid 2737766:tid 2737766] [client 18.191.245.85:32812] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.porterpromo.dance4ovations.com"] [uri "/.git/config"] [unique_id "amNsigqRKrn8spQ1gnjfgwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-24 10:05:41 (20 hours ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (41/60 min)'; Requests=41	Port Scan
🇮🇹 VHosting	2026-07-24 09:40:03 (20 hours ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇫🇷 dynamix	2026-07-24 08:07:51 (22 hours ago)	Multiple WAF Violations	Web App Attack
🇬🇧 Mendip_Defender	2025-06-19 08:35:47 (1 year ago)	18.191.245.85 - - [19/Jun/2025:09:35:41 +0100] "GET / HTTP/1.0" 301 904 "-" "Mozilla/5.0 (Macintosh; ... show more 18.191.245.85 - - [19/Jun/2025:09:35:41 +0100] "GET / HTTP/1.0" 301 904 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; ClaudeBot/1.0; [email protected])" ... show less	Bad Web Bot
🇨🇦 mitsurugi	2021-12-07 09:15:58 (4 years ago)	WordPress brute-force	Brute-Force Web App Attack
🇨🇿 plzenskypruvodce.cz	2021-12-05 20:19:56 (4 years ago)	Dec 6 02:19:54 b-vps wordpress(tzb-chmelarova.cz)[3299505]: Authentication attempt for unknown user ... show more Dec 6 02:19:54 b-vps wordpress(tzb-chmelarova.cz)[3299505]: Authentication attempt for unknown user chmelda from 18.191.245.85 ... show less	Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇿🇦 197.234.243.107

🇲🇦 196.64.171.11

🇨🇴 181.129.31.42

🇺🇸 162.216.149.120

🇺🇦 159.224.132.77

🇮🇹 151.63.155.246

🇺🇸 147.185.132.132

🇵🇰 103.229.252.77

🇨🇦 85.217.149.72

🇺🇸 72.1.148.55

🇺🇸 66.132.224.94

🇺🇸 66.132.195.121

🇺🇸 66.132.172.127

🇫🇷 46.105.54.208

🇺🇸 35.231.253.138

🇬🇧 35.203.210.138

🇺🇸 2604:a940:301:225:0:13::

🇺🇦 193.107.108.226

🇵🇦 191.98.196.14

🇮🇳 172.83.83.194