JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.206.200.240

18.206.200.240 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-18-206-200-240.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.206.200.240

Whois 18.206.200.240

IP Abuse Reports for 18.206.200.240:

This IP address has been reported a total of 36 times from 20 distinct sources. 18.206.200.240 was first reported on April 15th 2024, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-07-20 01:27:06 (3 minutes ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 01:11:21 (19 minutes ago)	(mod_security) mod_security (id:210492) triggered by 18.206.200.240 (ec2-18-206-200-240.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 18.206.200.240 (ec2-18-206-200-240.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 21:11:13.666745 2026] [security2:error] [pid 29304:tid 29304] [client 18.206.200.240:53700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "christinaetran.com"] [uri "/.env"] [unique_id "al11sc3ow5kjj4EE8lc2fQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Bedios GmbH	2026-07-19 23:34:01 (1 hour ago)	Login credentials theft attempt	Hacking
🇿🇦 conure	2026-07-19 23:04:02 (2 hours ago)	csagent: score 20.2: secrets grab x2, 404 noise floor x1; 1 domain(s) in 0s	Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 21:47:21 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.206.200.240 (ec2-18-206-200-240.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 18.206.200.240 (ec2-18-206-200-240.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 17:47:17.511340 2026] [security2:error] [pid 5200:tid 5224] [client 18.206.200.240:59476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mandhco.com"] [uri "/.env"] [unique_id "al1F5USGJokmaOJ6X_nd6gAAAFU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 21:19:45 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.206.200.240 (ec2-18-206-200-240.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 18.206.200.240 (ec2-18-206-200-240.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 17:19:39.870523 2026] [security2:error] [pid 11399:tid 11399] [client 18.206.200.240:45412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jerrylogoluso.com"] [uri "/.git/config"] [unique_id "al0_a7vAAZ8vou4GUQSFGQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 mail.avx.gr	2026-07-19 19:11:18 (6 hours ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 18.206.200.240 - - [19/Jul/2026:22:11:18 +0300] " ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 18.206.200.240 - - [19/Jul/2026:22:11:18 +0300] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" show less	Web App Attack
Anonymous	2026-07-19 18:25:04 (7 hours ago)	Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1, GET /.env HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 17:07:03 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.206.200.240 (ec2-18-206-200-240.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 18.206.200.240 (ec2-18-206-200-240.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 13:06:59.759673 2026] [security2:error] [pid 3453:tid 3453] [client 18.206.200.240:53546] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artocratic.com"] [uri "/.env"] [unique_id "al0EM5n-Io7quhHRwnsWngAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 16:47:15 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.206.200.240 (ec2-18-206-200-240.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 18.206.200.240 (ec2-18-206-200-240.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 12:47:10.867036 2026] [security2:error] [pid 19138:tid 19138] [client 18.206.200.240:41152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emmavance.com"] [uri "/.env"] [unique_id "alz_jmUUY6JMJgXpqaU0zQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 polycoda	2026-07-19 16:01:36 (9 hours ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based ... show more AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based) show less	Hacking Web App Attack
🇩🇪 Kreapptivo	2026-07-19 15:12:41 (10 hours ago)	[19/Jul/2026:17:12:37 +0200] Web-Request: "GET /.git/config", User-Agent: "Mozilla/5.0 (Windows NT 6 ... show more [19/Jul/2026:17:12:37 +0200] Web-Request: "GET /.git/config", User-Agent: "Mozilla/5.0 (Windows NT 6.1; rv:33.0) Gecko/20100101 Firefox/33.0" show less	Bad Web Bot Web App Attack
🇩🇪 Ba-Yu	2026-07-19 12:58:29 (12 hours ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 12:37:07 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.206.200.240 (ec2-18-206-200-240.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 18.206.200.240 (ec2-18-206-200-240.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 08:37:03.118635 2026] [security2:error] [pid 1588920:tid 1588920] [client 18.206.200.240:50428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atlwarehouse.net"] [uri "/.git/config"] [unique_id "alzE76Al8KZiY2ob5spMBQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 11:31:42 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.206.200.240 (ec2-18-206-200-240.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 18.206.200.240 (ec2-18-206-200-240.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 07:31:37.019711 2026] [security2:error] [pid 797:tid 797] [client 18.206.200.240:54606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "juliataylor.us"] [uri "/.git/config"] [unique_id "aly1meNbCaPnTy3P7WBGYQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.80

🇦🇲 195.250.79.2

🇬🇧 185.247.137.103

🇧🇪 185.132.187.28

🇺🇸 172.69.7.233

🇩🇪 167.94.146.72

🇮🇷 151.234.202.234

🇨🇳 121.43.184.203

🇺🇸 107.132.153.59

🇺🇸 104.175.229.39

🇷🇸 91.226.241.32

🇫🇷 85.25.172.249

🇷🇴 80.94.92.234

🇺🇸 66.132.172.112

🇱🇹 45.227.254.170

🇩🇪 43.165.7.135

🇺🇸 20.9.15.100

🇸🇬 4.194.24.143

🇹🇭 202.29.232.118

🇧🇪 198.235.24.202