JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.200.241.196

18.200.241.196 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 52%: ?

52%

ISP	Amazon Data Services Ireland Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-200-241-196.eu-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.200.241.196

Whois 18.200.241.196

IP Abuse Reports for 18.200.241.196:

This IP address has been reported a total of 12 times from 8 distinct sources. 18.200.241.196 was first reported on July 3rd 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-24 22:00:33 (11 hours ago)	Auto-ban: >3000 req/min op 2026-07-24	Web App Attack SSH Hacking
🇸🇪 vaia.cloud	2026-07-24 13:15:02 (19 hours ago)	crowdsecurity/http-crawl-non_statics	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 12:25:32 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.200.241.196 (ec2-18-200-241-196.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 18.200.241.196 (ec2-18-200-241-196.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 08:25:25.128111 2026] [security2:error] [pid 691603:tid 691674] [client 18.200.241.196:39472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.naiveromantic.merart.com"] [uri "/.git/config"] [unique_id "amNZtcK_hTaI1t8o_HSu9gAAARM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-24 12:05:30 (21 hours ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (41/60 min)'; Requests=41	Port Scan
Anonymous	2026-07-24 11:48:27 (21 hours ago)	18.200.241.196 - - [24/Jul/2026:13:48:27 +0200] "GET /.git/config HTTP/1.1" 403 183 "-" "Mozilla/5.0 ... show more 18.200.241.196 - - [24/Jul/2026:13:48:27 +0200] "GET /.git/config HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 11:04:10 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.200.241.196 (ec2-18-200-241-196.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 18.200.241.196 (ec2-18-200-241-196.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 07:04:03.497993 2026] [security2:error] [pid 2242522:tid 2242522] [client 18.200.241.196:39622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nafsi-paris.mtalame.com"] [uri "/.git/config"] [unique_id "amNGozFfX0JkuCarF3cqmQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-07-24 10:12:03 (22 hours ago)	block ruleset AA06B7315BA6AEB6421B52F0B32E14B509FD5FF0	SQL Injection
🇳🇱 Site.eu	2026-07-24 09:53:35 (23 hours ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-07-24 09:02:40 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 18.200.241.196 (ec2-18-200-241-196.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 18.200.241.196 (ec2-18-200-241-196.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 05:02:37.447233 2026] [security2:error] [pid 1047231:tid 1047231] [client 18.200.241.196:51534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.n4fh.cosentient.com"] [uri "/.git/config"] [unique_id "amMqLS_8uj2tp3fBuyMmfAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 05:10:37 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 18.200.241.196 (ec2-18-200-241-196.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 18.200.241.196 (ec2-18-200-241-196.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 01:10:30.939703 2026] [security2:error] [pid 3772533:tid 3772533] [client 18.200.241.196:34848] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.myshineart.com.sobhrach.com"] [uri "/.git/config"] [unique_id "amLzxj8em4gGL4dn4P7cCQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 03:28:12 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 18.200.241.196 (ec2-18-200-241-196.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 18.200.241.196 (ec2-18-200-241-196.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 23:28:07.850758 2026] [security2:error] [pid 3324738:tid 3324738] [client 18.200.241.196:45854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.myouenji.ichi51e.net"] [uri "/.git/config"] [unique_id "amLbx-qgqboUrnvsetGX7gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 COMAITE	2026-07-03 03:04:22 (3 weeks ago)	Common web attack from 18.200.241.196.	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 152.32.171.184

🇨🇳 125.77.73.145

🇮🇩 114.10.43.184

🇨🇦 85.217.149.71

🇸🇬 84.75.150.63

🇨🇳 223.167.168.192

🇳🇱 195.178.110.217

🇳🇱 172.94.9.37

🇺🇸 162.216.149.69

🇨🇳 123.120.53.24

🇭🇰 118.193.45.65

🇺🇸 109.105.210.74

🇧🇩 103.138.171.235

🇮🇩 103.90.67.3

🇸🇬 82.38.180.139

🇬🇧 81.19.219.234

🇪🇸 62.82.230.47

🇺🇸 35.196.42.3

🇩🇪 195.254.165.248

🇹🇷 195.174.132.129