JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.194.237.215

18.194.237.215 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 40%: ?

40%

ISP	A100 ROW GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-194-237-215.eu-central-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.194.237.215

Whois 18.194.237.215

IP Abuse Reports for 18.194.237.215:

This IP address has been reported a total of 19 times from 13 distinct sources. 18.194.237.215 was first reported on June 1st 2026, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-03 18:54:08 (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 18.194.237.215 (ec2-18-194-237-215.eu-central-1 ... show more (mod_security) mod_security (id:225170) triggered by 18.194.237.215 (ec2-18-194-237-215.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 14:54:03.084984 2026] [security2:error] [pid 28868:tid 28868] [client 18.194.237.215:37774] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rohanbyles.com.au\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rohanbyles.com.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiB4S1h3QHBZ1exaSKvwjgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 ptlab	2026-06-03 18:45:09 (4 weeks ago)	Detected wp_login attack from WP-host.	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 17:20:23 (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 18.194.237.215 (ec2-18-194-237-215.eu-central-1 ... show more (mod_security) mod_security (id:225170) triggered by 18.194.237.215 (ec2-18-194-237-215.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 13:20:19.058967 2026] [security2:error] [pid 6813:tid 6813] [client 18.194.237.215:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ipv6.local639.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ipv6.local639.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiBiUy_BAkpnuqwVWcHrJAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Martin Lundstrom	2026-06-03 16:45:19 (4 weeks ago)	https://www.eagleeye-intelligence.com — WordPress attack. Automatically detected and blocked.	Web App Attack
🇺🇸 lostswordfish.com	2026-06-03 12:50:07 (4 weeks ago)	Wordfence waf block on floridaactioncommittee	Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 11:17:14 (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 18.194.237.215 (ec2-18-194-237-215.eu-central-1 ... show more (mod_security) mod_security (id:225170) triggered by 18.194.237.215 (ec2-18-194-237-215.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 07:17:08.645342 2026] [security2:error] [pid 403:tid 403] [client 18.194.237.215:60660] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gabbyspetnanny.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gabbyspetnanny.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiANNJbXx6pDqZR3LW2w7wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-06-03 07:49:47 (4 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 07:03:18 (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 18.194.237.215 (ec2-18-194-237-215.eu-central-1 ... show more (mod_security) mod_security (id:225170) triggered by 18.194.237.215 (ec2-18-194-237-215.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 03:03:14.378977 2026] [security2:error] [pid 25469:tid 25469] [client 18.194.237.215:38280] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.jesussotoca.bigchus.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jesussotoca.bigchus.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ah_RsqKpZ-3AW2FQVYb8dAAAACk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 YF	2026-06-03 01:02:09 (1 month ago)	WordPress author enumeration	Web App Attack
🇩🇪 FeG Deutschland	2026-06-02 17:57:46 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇫🇷 masterguru	2026-06-02 04:11:23 (1 month ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 18.194.237.215 (DE/Germany/ec2-18-194-237-215 ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 18.194.237.215 (DE/Germany/ec2-18-194-237-215.eu-central-1.compute.amazonaws.com): 1 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 octageeks.com	2026-06-02 04:07:06 (1 month ago)	Wordpress malicious attack:[octawp]	Web App Attack
Anonymous	2026-06-02 02:42:39 (1 month ago)	WordPress Brute Force	Brute-Force
🇺🇸 nationaleventpros.com	2026-06-02 00:29:35 (1 month ago)	WordPress login attempt	Brute-Force
🇩🇪 LRob	2026-06-01 21:45:11 (1 month ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.101

🇵🇹 185.228.3.54

🇵🇱 176.53.159.197

🇺🇸 173.239.240.226

🇧🇷 170.82.105.118

🇺🇿 146.158.94.16

🇺🇸 104.28.160.110

🇺🇸 94.131.64.249

🇺🇸 94.131.64.241

🇺🇸 91.230.168.237

🇵🇱 85.155.230.78

🇬🇧 51.195.183.184

🇺🇸 20.228.193.165

🇷🇴 2.57.121.25

🇩🇪 2a00:1450:4001:c07::12d

🇺🇸 209.46.124.48

🇸🇬 194.164.107.4

🇪🇨 186.68.83.105

🇵🇹 185.228.3.90

🇵🇹 185.228.3.83