JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.195.214.99

18.195.214.99 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 71%: ?

71%

ISP	A100 ROW GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-195-214-99.eu-central-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.195.214.99

Whois 18.195.214.99

IP Abuse Reports for 18.195.214.99:

This IP address has been reported a total of 13 times from 12 distinct sources. 18.195.214.99 was first reported on July 24th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 zumbo.net	2026-07-25 01:59:37 (3 hours ago)	[Sat Jul 25 04:59:36.043078 2026] [proxy_fcgi:error] [pid 1693726:tid 1693744] [client 18.195.214.99 ... show more [Sat Jul 25 04:59:36.043078 2026] [proxy_fcgi:error] [pid 1693726:tid 1693744] [client 18.195.214.99:0] AH01071: Got error 'Primary script unknown' [Sat Jul 25 04:59:36.053991 2026] [proxy_fcgi:error] [pid 1693724:tid 1693776] [client 18.195.214.99:0] AH01071: Got error 'Primary script unknown' [Sat Jul 25 04:59:36.064436 2026] [proxy_fcgi:error] [pid 1693724:tid 1693748] [client 18.195.214.99:0] AH01071: Got error 'Primary script unknown' [Sat Jul 25 04:59:36.075183 2026] [proxy_fcgi:error] [pid 1693724:tid 1693752] [client 18.195.214.99:0] AH01071: Got error 'Primary script unknown' [Sat Jul 25 04:59:36.086329 2026] [proxy_fcgi:error] [pid 1693726:tid 1693755] [client 18.195.214.99:0] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇳🇱 debestelapp	2026-07-24 23:40:06 (5 hours ago)		Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-24 22:03:49 (7 hours ago)	Auto-ban: >3000 req/min op 2026-07-24	Web App Attack SSH Hacking
Anonymous	2026-07-24 15:39:51 (13 hours ago)	[ns3.backorder.gr] httpd-config-scan: sites=www.example.com,debug-gosolar.gr,www.gosolar.gr; logs=/v ... show more [ns3.backorder.gr] httpd-config-scan: sites=www.example.com,debug-gosolar.gr,www.gosolar.gr; logs=/var/log/httpd/access_log,/var/log/httpd/domains/debug-gosolar.gr.log,/var/log/httpd/domains/gosolar.gr.log; samples=/.git/config \| /.env \| /.env.local show less	Hacking Web App Attack
🇩🇪 grassau.com	2026-07-24 11:46:48 (17 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 18.195.214.99 (DE/Germany/Hesse/Frankfu ... show more (mod_security) mod_security triggered on hostname [redacted] 18.195.214.99 (DE/Germany/Hesse/Frankfurt am Main/ec2-18-195-214-99.eu-central-1.compute.amazonaws.com) show less	SQL Injection
🇫🇷 dynamix	2026-07-24 11:14:17 (17 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 10:27:27 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.195.214.99 (ec2-18-195-214-99.eu-central-1.c ... show more (mod_security) mod_security (id:210492) triggered by 18.195.214.99 (ec2-18-195-214-99.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 06:27:19.481169 2026] [security2:error] [pid 3682333:tid 3682333] [client 18.195.214.99:47590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wisdomwfo.systemcapacityoptimization.com"] [uri "/.git/config"] [unique_id "amM-Bxwr8dsMq3gu7HjlBwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 Klaverstyn	2026-07-24 09:43:00 (19 hours ago)	High-volume automated HTTP scanning	Web App Attack
🇨🇭 backslash	2026-07-24 06:42:07 (22 hours ago)	block ruleset likely probe for CVE-2025-55182 619E65C9C14E5E741C55CC8FD5E5630F031EBB6A	Web App Attack
🇳🇱 Site.eu	2026-07-24 06:11:19 (23 hours ago)	Excessive 404/403 errors	Brute-Force
🇸🇪 vaia.cloud	2026-07-24 06:00:05 (23 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-07-24 05:27:06 (23 hours ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/.env.local	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 05:18:51 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.195.214.99 (ec2-18-195-214-99.eu-central-1.c ... show more (mod_security) mod_security (id:210492) triggered by 18.195.214.99 (ec2-18-195-214-99.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 01:18:45.597721 2026] [security2:error] [pid 1820429:tid 1820429] [client 18.195.214.99:53034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.willowriver3.artfranz.com"] [uri "/.git/config"] [unique_id "amL1tcjWPQ0tYfDmkcbpNgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 144.76.32.239

🇮🇳 128.185.56.205

🇺🇸 100.29.192.62

🇫🇷 85.217.140.41

🇸🇬 47.79.10.175

🇺🇸 45.156.131.17

🇳🇱 45.148.10.157

🇳🇱 45.148.10.141

🇳🇱 45.142.193.169

🇿🇦 34.35.79.171

🇺🇸 23.95.168.162

🇮🇳 202.141.103.127

🇧🇷 189.113.47.155

🇩🇪 167.94.145.31

🇭🇰 103.231.56.22

🇩🇪 94.159.108.238

🇷🇺 87.250.212.48

🇫🇷 80.87.206.19

🇸🇬 47.84.101.217

🇧🇷 205.210.31.185