JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.217.52.148

18.217.52.148 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 57%: ?

57%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-217-52-148.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.217.52.148

Whois 18.217.52.148

IP Abuse Reports for 18.217.52.148:

This IP address has been reported a total of 13 times from 10 distinct sources. 18.217.52.148 was first reported on February 16th 2021, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-16 06:59:46 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.217.52.148 (ec2-18-217-52-148.us-east-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 18.217.52.148 (ec2-18-217-52-148.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 02:59:40.585043 2026] [security2:error] [pid 7131:tid 7131] [client 18.217.52.148:56524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.csf-pos.computerservicesofflorida.com"] [uri "/.git/config"] [unique_id "aliBXJl8WqZfbtuj3BSu6QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-07-16 06:23:06 (4 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 DocNetzwerk	2026-07-16 06:22:34 (4 hours ago)	18.217.52.148 (US/United States/ec2-18-217-52-148.us-east-2.compute.amazonaws.com), more than 7 Apac ... show more 18.217.52.148 (US/United States/ec2-18-217-52-148.us-east-2.compute.amazonaws.com), more than 7 Apache 403 hits show less	Hacking
🇫🇷 dynamix	2026-07-16 03:01:35 (7 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 01:28:37 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.217.52.148 (ec2-18-217-52-148.us-east-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 18.217.52.148 (ec2-18-217-52-148.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 21:28:29.851401 2026] [security2:error] [pid 4625:tid 4625] [client 18.217.52.148:48236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.crr-construction.321q.com"] [uri "/.git/config"] [unique_id "algzvX4FlP3YcMYFix5NLwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 zynex	2026-07-15 22:54:00 (11 hours ago)	URL Probing: /server/.env	Web App Attack
🇧🇪 cmbplf	2026-07-15 22:44:37 (12 hours ago)	2.428 requests with url.path *.env	Brute-Force Bad Web Bot
🇳🇱 homeshowdomain.nl	2026-07-15 22:01:22 (12 hours ago)	Auto-ban: >3000 req/min op 2026-07-15	Web App Attack SSH Hacking
🇮🇹 VHosting	2026-07-15 21:35:03 (13 hours ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 21:12:34 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.217.52.148 (ec2-18-217-52-148.us-east-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 18.217.52.148 (ec2-18-217-52-148.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 17:12:29.005517 2026] [security2:error] [pid 2008:tid 2020] [client 18.217.52.148:43408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.robertbellamystudio.robertbellamy.com"] [uri "/.git/config"] [unique_id "alf3vQ1GiFxWcMiWuhHjEQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Roderic	2026-06-04 20:23:11 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
Anonymous	2021-02-16 10:30:09 (5 years ago)	Time: Tue Feb 16 12:24:15 2021 -0300 IP: 18.217.52.148 (US/United States/ec2-18-217-52-14 ... show more Time: Tue Feb 16 12:24:15 2021 -0300 IP: 18.217.52.148 (US/United States/ec2-18-217-52-148.us-east-2.compute.amazonaws.com) Failures: 30 (smtpauth) Interval: 3600 seconds Blocked: Permanent Block show less	Brute-Force
Anonymous	2021-02-16 01:30:13 (5 years ago)	Time: Tue Feb 16 03:15:59 2021 -0300 IP: 18.217.52.148 (US/United States/ec2-18-217-52-14 ... show more Time: Tue Feb 16 03:15:59 2021 -0300 IP: 18.217.52.148 (US/United States/ec2-18-217-52-148.us-east-2.compute.amazonaws.com) Failures: 30 (smtpauth) Interval: 3600 seconds Blocked: Permanent Block show less	Brute-Force

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.242.141.83

🇮🇳 203.145.143.163

🇺🇸 192.3.21.67

🇨🇴 190.61.47.154

🇺🇸 172.206.224.165

🇭🇰 150.5.141.198

🇱🇰 112.134.243.140

🇺🇸 103.143.231.2

🇷🇺 5.165.90.126

🇪🇹 196.188.93.169

🇦🇷 170.155.12.4

🇸🇮 102.220.160.47

🇷🇴 92.118.39.71

🇫🇷 80.87.206.20

🇺🇸 71.223.129.39

🇲🇾 49.124.152.237

🇭🇰 47.243.58.151

🇬🇧 35.203.210.82

🇩🇪 167.94.145.25

🇫🇷 147.135.252.138