JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.192.114.112

18.192.114.112 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 61%: ?

61%

ISP	A100 ROW GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-192-114-112.eu-central-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.192.114.112

Whois 18.192.114.112

IP Abuse Reports for 18.192.114.112:

This IP address has been reported a total of 14 times from 10 distinct sources. 18.192.114.112 was first reported on July 24th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-07-24 13:23:01 (3 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 13:09:46 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.192.114.112 (ec2-18-192-114-112.eu-central-1 ... show more (mod_security) mod_security (id:210492) triggered by 18.192.114.112 (ec2-18-192-114-112.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 09:09:40.506674 2026] [security2:error] [pid 2440695:tid 2440695] [client 18.192.114.112:48340] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "varnadorefamily.com"] [uri "/.git/config"] [unique_id "amNkFKZWY7yoBbaO6C2N3gAAAD4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-24 13:05:33 (4 hours ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (40/60 min)'; Requests=40	Port Scan
🇩🇪 DocNetzwerk	2026-07-24 10:17:53 (6 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 18.192.114.112 (DE/Germany/ec2-18-192-1 ... show more (mod_security) mod_security triggered on hostname [redacted] 18.192.114.112 (DE/Germany/ec2-18-192-114-112.eu-central-1.compute.amazonaws.com) show less	SQL Injection
Anonymous	2026-07-24 09:00:14 (8 hours ago)	Bot / scanning and/or hacking attempts: GET /.env2 HTTP/1.1, GET /svelte/.env HTTP/1.1, GET /src/.en ... show more Bot / scanning and/or hacking attempts: GET /.env2 HTTP/1.1, GET /svelte/.env HTTP/1.1, GET /src/.env HTTP/1.1, GET /.env.live HTTP/1.1, GET /express/.env HTTP/1.1, GET /gitlab/.env HTTP/1.1, GET /.env.preprod HTTP/1.1, GET /dev/phpinfo.php HTTP/1.1, GET /production/.env HTTP/1.1, GET /backend/.env HTTP/1.1, GET /en/.env HTTP/1.1, GET /admin/.env HTTP/1.1 show less	Hacking Web App Attack
🇳🇱 Savvii	2026-07-24 08:40:04 (8 hours ago)	20 attempts against mh-misbehave-ban on pf221105	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 08:22:30 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.192.114.112 (ec2-18-192-114-112.eu-central-1 ... show more (mod_security) mod_security (id:210492) triggered by 18.192.114.112 (ec2-18-192-114-112.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 04:22:21.955838 2026] [security2:error] [pid 3808229:tid 3808299] [client 18.192.114.112:45394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vancekelly.com"] [uri "/.git/config"] [unique_id "amMgve4j2LiI724vDKAODwAAAEc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 07:09:10 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.192.114.112 (ec2-18-192-114-112.eu-central-1 ... show more (mod_security) mod_security (id:210492) triggered by 18.192.114.112 (ec2-18-192-114-112.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 03:09:03.683515 2026] [security2:error] [pid 250699:tid 250699] [client 18.192.114.112:44798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "valueproducersalliance.org"] [uri "/.git/config"] [unique_id "amMPj3Cdrw5AXbe3pj23aAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 06:25:42 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.192.114.112 (ec2-18-192-114-112.eu-central-1 ... show more (mod_security) mod_security (id:210492) triggered by 18.192.114.112 (ec2-18-192-114-112.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 02:25:33.740217 2026] [security2:error] [pid 3491640:tid 3491640] [client 18.192.114.112:39672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "valueandmeaning.com"] [uri "/.git/config"] [unique_id "amMFXeNeKyP2oswlZSzmjgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure	2026-07-24 06:01:58 (11 hours ago)	csagent: score 20.0: secrets grab x2; 1 domain(s) in 0s	Web App Attack
Anonymous	2026-07-24 05:18:10 (11 hours ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇨🇦 Dunham Support	2026-07-24 04:51:30 (12 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 18.192.114.112 (DE/Germany/ec2-18-192-1 ... show more (mod_security) mod_security triggered on hostname [redacted] 18.192.114.112 (DE/Germany/ec2-18-192-114-112.eu-central-1.compute.amazonaws.com) show less	SQL Injection
🇩🇪 paissangroup	2026-07-24 04:45:24 (12 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 04:31:31 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.192.114.112 (ec2-18-192-114-112.eu-central-1 ... show more (mod_security) mod_security (id:210492) triggered by 18.192.114.112 (ec2-18-192-114-112.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 00:31:27.529193 2026] [security2:error] [pid 1062253:tid 1062253] [client 18.192.114.112:54460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "valkyriepanthers.com"] [uri "/.git/config"] [unique_id "amLqnwXPWQp2_dujgm9Z7QAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 158.47.199.158

🇮🇹 151.59.126.78

🇫🇷 51.77.158.34

🇧🇷 205.210.31.251

🇧🇴 200.87.92.148

🇺🇸 198.20.191.129

🇧🇷 179.191.82.115

🇻🇳 171.231.194.207

🇺🇸 162.216.150.129

🇳🇱 45.153.34.243

🇨🇭 209.99.189.177

🇺🇸 198.20.191.128

🇵🇰 175.107.225.50

🇺🇸 142.93.10.93

🇨🇳 106.13.122.214

🇧🇩 103.135.90.96

🇷🇴 80.94.92.234

🇺🇸 51.81.171.148

🇺🇸 3.17.13.223

🇧🇷 205.210.31.155