JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.217.12.96

18.217.12.96 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 52%: ?

52%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-217-12-96.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.217.12.96

Whois 18.217.12.96

IP Abuse Reports for 18.217.12.96:

This IP address has been reported a total of 10 times from 8 distinct sources. 18.217.12.96 was first reported on July 16th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-18 22:01:38 (2 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-17. show less	Web App Attack SSH Hacking
🇳🇱 Mangelot Hosting	2026-07-18 04:35:14 (2 days ago)	(modsecurity) srv104 ModSecurity 18.217.12.96 (US/United States/ec2-18-217-12-96.us-east-2.compute.a ... show more (modsecurity) srv104 ModSecurity 18.217.12.96 (US/United States/ec2-18-217-12-96.us-east-2.compute.amazonaws.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
Anonymous	2026-07-18 03:23:45 (2 days ago)	[server.tmg.gr] httpd-config-scan: sites=www.example.com; logs=/var/log/httpd/access_log; samples=/. ... show more [server.tmg.gr] httpd-config-scan: sites=www.example.com; logs=/var/log/httpd/access_log; samples=/.git/config \| /.env \| /.env.local show less	Hacking Web App Attack
🇳🇱 Mangelot Hosting	2026-07-18 02:47:44 (2 days ago)	(modsecurity) srv201 ModSecurity 18.217.12.96 (US/United States/ec2-18-217-12-96.us-east-2.compute.a ... show more (modsecurity) srv201 ModSecurity 18.217.12.96 (US/United States/ec2-18-217-12-96.us-east-2.compute.amazonaws.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 R.G.	2026-07-18 02:45:04 (2 days ago)	(ScanningForFiles) Scanning for files triggerd 18.217.12.96 (US/United States/ec2-18-217-12-96.us-ea ... show more (ScanningForFiles) Scanning for files triggerd 18.217.12.96 (US/United States/ec2-18-217-12-96.us-east-2.compute.amazonaws.com): 10 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-18 01:58:28 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
Anonymous	2026-07-18 00:28:53 (2 days ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇨🇿 Countryman	2026-07-17 20:36:51 (3 days ago)	IPS detection: React.Server.Components.react-flight.Remote.Code.Execution	Hacking
🇺🇸 TPI-Abuse	2026-07-16 21:45:06 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 18.217.12.96 (ec2-18-217-12-96.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 18.217.12.96 (ec2-18-217-12-96.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 17:45:02.576544 2026] [security2:error] [pid 32271:tid 32271] [client 18.217.12.96:57268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tigerchess.club"] [uri "/.git/config"] [unique_id "allQ3ur7qkU3bd2ycddZngAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 13:31:33 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 18.217.12.96 (ec2-18-217-12-96.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 18.217.12.96 (ec2-18-217-12-96.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 09:31:28.530489 2026] [security2:error] [pid 4014:tid 4014] [client 18.217.12.96:58382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tiesidebikinis.com"] [uri "/.git/config"] [unique_id "aljdMLGX1_19eTPlYaRZOwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.24.219.202

🇧🇷 128.201.148.139

🇩🇪 80.158.109.51

🇧🇷 205.210.31.230

🇩🇪 164.92.161.148

🇺🇸 147.185.132.165

🇱🇻 31.56.197.158

🇺🇸 23.95.122.71

🇩🇪 213.209.159.114

🇨🇳 180.76.179.77

🇧🇷 167.250.160.139

🇬🇧 157.245.34.56

🇭🇰 156.225.1.86

🇷🇴 92.118.39.78

🇪🇪 90.191.86.133

🇺🇸 35.247.85.217

🇺🇸 147.185.132.168

🇻🇳 103.237.144.204

🇳🇱 45.148.10.39

🇺🇸 35.144.151.99