JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.192.20.40

18.192.20.40 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 53%: ?

53%

ISP	A100 ROW GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-192-20-40.eu-central-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.192.20.40

Whois 18.192.20.40

IP Abuse Reports for 18.192.20.40:

This IP address has been reported a total of 17 times from 11 distinct sources. 18.192.20.40 was first reported on September 26th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hazzard	2026-07-17 00:25:34 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)	SQL Injection
🇳🇱 homeshowdomain.nl	2026-07-16 22:00:56 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-15. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-16 19:58:57 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 18.192.20.40 (ec2-18-192-20-40.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 18.192.20.40 (ec2-18-192-20-40.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 15:58:49.128845 2026] [security2:error] [pid 32084:tid 32084] [client 18.192.20.40:59256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.noemontes.com"] [uri "/.git/config"] [unique_id "alk3-Rhi6GgOqZz6l7WL9AAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 18:19:14 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 18.192.20.40 (ec2-18-192-20-40.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 18.192.20.40 (ec2-18-192-20-40.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 14:19:08.286972 2026] [security2:error] [pid 13864:tid 13864] [client 18.192.20.40:36906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.niecy-d.com"] [uri "/.git/config"] [unique_id "alkgnHAhIHKTzHAg9sigmAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 alferez	2026-07-16 15:56:21 (1 week ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
Anonymous	2026-07-16 14:09:59 (1 week ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 05:59:39 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 18.192.20.40 (ec2-18-192-20-40.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 18.192.20.40 (ec2-18-192-20-40.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 01:59:34.067581 2026] [security2:error] [pid 29654:tid 29681] [client 18.192.20.40:41936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.mountainresortsmanagement.com"] [uri "/.git/config"] [unique_id "alhzRs5x9S3YQlCxWB_NiQAAAFg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-07-16 05:26:13 (1 week ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 04:20:07 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 18.192.20.40 (ec2-18-192-20-40.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 18.192.20.40 (ec2-18-192-20-40.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 00:20:01.839677 2026] [security2:error] [pid 15465:tid 15465] [client 18.192.20.40:46058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.moongoth.com"] [uri "/.git/config"] [unique_id "alhb8Xoqbjk9Ad-NK1rtlAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 04:01:37 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 18.192.20.40 (ec2-18-192-20-40.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 18.192.20.40 (ec2-18-192-20-40.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 00:01:31.787274 2026] [security2:error] [pid 14782:tid 14782] [client 18.192.20.40:55474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.montymilburn.com"] [uri "/.git/config"] [unique_id "alhXm-EJZHIdnT0XQMT3kwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-16 03:22:49 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 18.192.20.40 (DE/Germany/ec2-18-192-20- ... show more (mod_security) mod_security triggered on hostname [redacted] 18.192.20.40 (DE/Germany/ec2-18-192-20-40.eu-central-1.compute.amazonaws.com) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-07-16 02:45:21 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 18.192.20.40 (ec2-18-192-20-40.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 18.192.20.40 (ec2-18-192-20-40.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 22:45:17.174612 2026] [security2:error] [pid 31608:tid 31608] [client 18.192.20.40:45340] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.molliemorningstar.com"] [uri "/.git/config"] [unique_id "alhFvc-gWgVq4ohMndAt7wAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-16 00:49:48 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 18.192.20.40 (DE/Germany/ec2-18-192-20- ... show more (mod_security) mod_security triggered on hostname [redacted] 18.192.20.40 (DE/Germany/ec2-18-192-20-40.eu-central-1.compute.amazonaws.com) show less	SQL Injection
🇳🇱 homeshowdomain.nl	2026-07-15 21:59:50 (1 week ago)	Auto-ban: >3000 req/min op 2026-07-15	Web App Attack SSH Hacking
🇩🇪 big-cloud.nl	2026-07-15 21:06:21 (1 week ago)	Try to access /.git/config	Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 173.194.170.84

🇺🇸 144.225.6.161

🇺🇸 35.227.153.166

🇶🇦 2600:1900:4260:40e::20

🇺🇸 216.25.89.101

🇺🇸 198.46.152.106

🇺🇸 170.106.161.78

🇺🇸 167.17.73.68

🇺🇦 46.133.171.6

🇳🇱 45.155.90.234

🇳🇱 45.148.10.152

🇲🇲 37.111.53.110

🇺🇸 205.210.31.64

🇷🇴 193.32.162.34

🇵🇰 101.50.83.146

🇭🇺 89.134.23.190

🇧🇬 78.128.113.46

🇺🇸 74.125.181.156

🇳🇱 45.198.224.18

🇺🇸 185.191.171.8