JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.208.215.98

18.208.215.98 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 90%: ?

90%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-18-208-215-98.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.208.215.98

Whois 18.208.215.98

IP Abuse Reports for 18.208.215.98:

This IP address has been reported a total of 30 times from 19 distinct sources. 18.208.215.98 was first reported on June 23rd 2021, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-27 22:03:19 (21 hours ago)	Auto-ban: >3000 req/min op 2026-07-27	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-27 21:35:10 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.208.215.98 (ec2-18-208-215-98.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 18.208.215.98 (ec2-18-208-215-98.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 17:35:03.553798 2026] [security2:error] [pid 1509237:tid 1509237] [client 18.208.215.98:36818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.macisdead.edgeimprov.com"] [uri "/.git/config"] [unique_id "amfPB7-tlK0jF2MkLVZnkAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2026-07-27 19:55:33 (23 hours ago)	(modsecurity) srv101 ModSecurity 18.208.215.98 (US/United States/ec2-18-208-215-98.compute-1.amazona ... show more (modsecurity) srv101 ModSecurity 18.208.215.98 (US/United States/ec2-18-208-215-98.compute-1.amazonaws.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 18:05:18 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 18.208.215.98 (ec2-18-208-215-98.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 18.208.215.98 (ec2-18-208-215-98.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 14:05:10.871200 2026] [security2:error] [pid 3944882:tid 3944882] [client 18.208.215.98:40650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.macallanmitchell.macryder.com"] [uri "/.git/config"] [unique_id "amed1hAN68tcvOe_loCZCwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-07-27 16:09:25 (1 day ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇳🇱 Site.eu	2026-07-27 15:33:45 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 juutis	2026-07-27 15:27:22 (1 day ago)	Multiple WAF abuses - IP blocked	Hacking Brute-Force Web App Attack
🇺🇸 MatCat	2026-07-27 13:05:03 (1 day ago)	Banned by fail2ban: apache-webprobe	Port Scan Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-27 11:07:31 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 18.208.215.98 (ec2-18-208-215-98.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 18.208.215.98 (ec2-18-208-215-98.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 07:07:27.710765 2026] [security2:error] [pid 4157100:tid 4157100] [client 18.208.215.98:42072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.m2oblivion.talkingmess.com"] [uri "/.git/config"] [unique_id "amc77ws1ES8aVKQB0e6jawAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 08:47:59 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 18.208.215.98 (ec2-18-208-215-98.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 18.208.215.98 (ec2-18-208-215-98.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 04:47:53.125899 2026] [security2:error] [pid 2318219:tid 2318366] [client 18.208.215.98:47522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.m.tapdd.com"] [uri "/.git/config"] [unique_id "amcbOeuN_BPXHp7D7qnDLgAAANY"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-07-27 07:55:17 (1 day ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 18.208.215.98 (US/United States/ec2 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 18.208.215.98 (US/United States/ec2-18-208-215-98.compute-1.amazonaws.com): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 07:51:07 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 18.208.215.98 (ec2-18-208-215-98.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 18.208.215.98 (ec2-18-208-215-98.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 03:50:59.870100 2026] [security2:error] [pid 1227699:tid 1227699] [client 18.208.215.98:36780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.m.jbaycabs.com"] [uri "/.git/config"] [unique_id "amcN46Pd-qsoClbq28Y2fgAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 07:33:52 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 18.208.215.98 (ec2-18-208-215-98.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 18.208.215.98 (ec2-18-208-215-98.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 03:33:45.111153 2026] [security2:error] [pid 3045448:tid 3045448] [client 18.208.215.98:59018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.m.gatheringsattheschool.com"] [uri "/.git/config"] [unique_id "amcJ2Tlw04C5j9Q9GrS55AAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 07:05:06 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 18.208.215.98 (ec2-18-208-215-98.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 18.208.215.98 (ec2-18-208-215-98.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 03:05:01.204137 2026] [security2:error] [pid 3487695:tid 3487695] [client 18.208.215.98:32844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.m.closedfortheseason.com"] [uri "/.git/config"] [unique_id "amcDHbeB0WjckCmbzDqOHgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-26 22:01:29 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-25. show less	Web App Attack SSH Hacking

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.187.176.243

🇩🇪 2a01:4f8:c2c:b35a::1

🇬🇧 213.166.84.53

🇯🇵 202.78.167.117

🇧🇴 190.186.19.180

🇺🇸 104.22.56.152

🇫🇮 95.216.156.178

🇬🇧 87.115.187.195

🇺🇸 85.121.240.25

🇶🇦 78.100.129.165

🇬🇧 18.170.221.239

🇯🇵 202.78.167.217

🇺🇸 144.172.106.35

🇨🇳 106.117.114.183

🇺🇸 91.230.168.235

🇧🇷 205.210.31.175

🇨🇳 175.17.191.101

🇺🇸 172.69.6.123

🇸🇬 43.134.163.229

🇭🇰 199.45.154.182