JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.215.180.211

18.215.180.211 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 58%: ?

58%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-18-215-180-211.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.215.180.211

Whois 18.215.180.211

IP Abuse Reports for 18.215.180.211:

This IP address has been reported a total of 18 times from 10 distinct sources. 18.215.180.211 was first reported on June 19th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 lcpacs	2026-08-23 20:28:39 (1 day ago)	Auto-flagged by honeypot: tripped /.svn/entries	Bad Web Bot Web App Attack
🇩🇪 Blexyel	2026-08-23 19:22:37 (1 day ago)	18.215.180.211 - - [23/Aug/2026:21:22:36 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "ureq/2.12.1 ... show more 18.215.180.211 - - [23/Aug/2026:21:22:36 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "ureq/2.12.1" "pingusmc.org" ... show less	Brute-Force Web App Attack
🇩🇪 XICTRON	2026-08-23 11:25:05 (1 day ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 10:56:40 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 18.215.180.211 (ec2-18-215-180-211.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 18.215.180.211 (ec2-18-215-180-211.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 06:56:32.490255 2026] [security2:error] [pid 31571:tid 31571] [client 18.215.180.211:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "graydortmotors.com"] [uri "/.env.local"] [unique_id "aorR4KTmkevdDc1cbEc2pwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-08-23 08:34:57 (2 days ago)	1.797 requests with url.path .git/	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-23 07:35:09 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 18.215.180.211 (ec2-18-215-180-211.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 18.215.180.211 (ec2-18-215-180-211.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 03:34:58.520525 2026] [security2:error] [pid 20428:tid 20428] [client 18.215.180.211:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drjasonkolber.com"] [uri "/.git/HEAD"] [unique_id "aoqiouTfpBfZ630Fy2H3DgAAABE"], referer: https://www.google.com/search?q=drjasonkolber.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 06:52:56 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 18.215.180.211 (ec2-18-215-180-211.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 18.215.180.211 (ec2-18-215-180-211.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 02:52:50.048751 2026] [security2:error] [pid 12784:tid 12784] [client 18.215.180.211:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deanfountain.com"] [uri "/.env.backup"] [unique_id "aoqYwrG13UUtOS1kPy2oOwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 04:02:06 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 18.215.180.211 (ec2-18-215-180-211.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 18.215.180.211 (ec2-18-215-180-211.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 00:02:00.410592 2026] [security2:error] [pid 23057:tid 23091] [client 18.215.180.211:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blurmypic.com"] [uri "/.env.old"] [unique_id "aopwuOYnVGG3hxyfAvqoMAAAAJY"], referer: https://www.google.com/search?q=blurmypic.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 03:30:39 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 18.215.180.211 (ec2-18-215-180-211.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 18.215.180.211 (ec2-18-215-180-211.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 23:30:35.250711 2026] [security2:error] [pid 9727:tid 9727] [client 18.215.180.211:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autumn-kennedy.com"] [uri "/.git/config"] [unique_id "aoppWwlRV2HSEUDWZ6WXVAAAAAU"], referer: https://www.google.com/search?q=autumn-kennedy.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 21:54:40 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 18.215.180.211 (ec2-18-215-180-211.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 18.215.180.211 (ec2-18-215-180-211.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 17:54:30.693562 2026] [security2:error] [pid 1773:tid 1773] [client 18.215.180.211:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.theseventhcongregationofladderdayvixens.org.tortoisehosting.com"] [uri "/.env.production"] [unique_id "aooaliwb9gwwjwD3KoNYvgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-22 20:00:19 (2 days ago)	Multiple WAF Violations	Web App Attack
🇳🇿 Tripwire	2026-08-22 19:58:59 (2 days ago)	Fake Googlebot "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"	Bad Web Bot
Anonymous	2026-08-22 19:05:01 (2 days ago)	suspicious request in access.log	Web App Attack
🇿🇦 conure.sh	2026-08-22 16:21:13 (2 days ago)	csagent: score 19.9: 404 noise floor x2, secrets grab x2; 2 domain(s) in 11s	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 16:07:30 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 18.215.180.211 (ec2-18-215-180-211.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 18.215.180.211 (ec2-18-215-180-211.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 12:07:22.021667 2026] [security2:error] [pid 8576:tid 8576] [client 18.215.180.211:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bizecommnet.bizecomm.com"] [uri "/.env.local"] [unique_id "aonJOghG9BF7CNs-w6CtbQAAACY"], referer: https://www.google.com/search?q=www.bizecommnet.bizecomm.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.189.253.198

🇧🇷 200.50.225.153

🇨🇴 181.129.41.162

🇺🇸 179.61.137.164

🇭🇺 178.48.104.19

🇺🇸 172.178.125.218

🇺🇸 162.253.42.116

🇺🇸 154.90.139.204

🇦🇺 149.118.68.211

🇬🇧 135.136.23.229

🇹🇷 131.222.250.185

🇰🇷 121.169.106.30

🇮🇳 103.49.232.226

🇺🇸 71.6.232.20

🇸🇬 47.79.15.46

🇨🇳 36.138.34.237

🇺🇸 2607:ff10:c8:594::7

🇷🇺 217.9.152.177

🇺🇸 207.90.244.28

🇩🇪 162.19.245.239