JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.218.120.147

18.218.120.147 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 15%: ?

15%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-218-120-147.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.218.120.147

Whois 18.218.120.147

IP Abuse Reports for 18.218.120.147:

This IP address has been reported a total of 11 times from 8 distinct sources. 18.218.120.147 was first reported on January 17th 2024, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 adembaysal	2026-08-21 23:15:14 (16 hours ago)	Domain : estore.kvkkasistan.com Rule : env 2026-08-21 23:12:09 *hidden-privacy* GET /server-info ... show more Domain : estore.kvkkasistan.com Rule : env 2026-08-21 23:12:09 *hidden-privacy* GET /server-info.php - 443 - 18.218.120.147 HTTP/1.1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - estore.kvkkasistan.com 404 0 2 1642 310 143 - - show less	Hacking SQL Injection
🇫🇷 masterguru	2026-08-21 22:56:53 (17 hours ago)	Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ... show more Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195) show less	Hacking
🇹🇷 rtbh.com.tr	2024-10-22 00:53:53 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2024-10-20 20:53:40 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2024-10-19 20:53:42 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ghostwarriors	2024-10-18 20:50:03 (1 year ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ksol-hostmaster	2024-10-18 20:19:46 (1 year ago)	2024/10/18 22:19:45 [error] 57142#630591: 7351735 limiting requests, excess: 0.009 by zone "crawler ... show more 2024/10/18 22:19:45 [error] 57142#630591: 7351735 limiting requests, excess: 0.009 by zone "crawler", client: 18.218.120.147, server: crxforum.ksol.io, request: "GET /showAnswers.php?commentUniqId=5dea9fe7c1da2&seed=66a6300f860dd&topicId=128 HTTP/2.0", host: "crxforum.ksol.io" ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2024-10-18 12:31:23 (1 year ago)	(mod_security) mod_security (id:225080) triggered by 18.218.120.147 (ec2-18-218-120-147.us-east-2.co ... show more (mod_security) mod_security (id:225080) triggered by 18.218.120.147 (ec2-18-218-120-147.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 18 08:31:16.687343 2024] [security2:error] [pid 5350:tid 5376] [client 18.218.120.147:7418] [client 18.218.120.147] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:C" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)\|\|darkestmoonart.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "darkestmoonart.com"] [uri "/wp-includes/js/"] [unique_id "ZxJVFCnLgGZcVLNKtoe0AAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 syokadmin	2024-05-29 02:01:56 (2 years ago)	(mod_security) mod_security (id:77350374) triggered by 18.218.120.147 (US/United States/ec2-18-218-1 ... show more (mod_security) mod_security (id:77350374) triggered by 18.218.120.147 (US/United States/ec2-18-218-120-147.us-east-2.compute.amazonaws.com): 1 in the last 3600 secs show less	Brute-Force
🇫🇷 bigorre.org	2024-05-28 18:30:59 (2 years ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2024-01-17 16:07:33 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 18.218.120.147 (ec2-18-218-120-147.us-east-2.co ... show more (mod_security) mod_security (id:210492) triggered by 18.218.120.147 (ec2-18-218-120-147.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 17 11:07:27.623324 2024] [security2:error] [pid 29730] [client 18.218.120.147:40490] [client 18.218.120.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sveum.net"] [uri "/wp-config.php"] [unique_id "Zaf7P-lVwpWT416nvIY3gAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.235

🇺🇸 20.119.58.187

🇩🇪 212.227.188.160

🇮🇩 202.72.196.75

🇳🇱 193.176.31.207

🇧🇴 181.115.171.84

🇺🇸 172.253.221.154

🇨🇳 115.53.181.53

🇮🇪 109.78.46.69

🇮🇷 91.92.214.2

🇳🇱 81.19.216.120

🇳🇱 45.148.10.157

🇳🇱 45.148.10.141

🇮🇩 43.245.248.2

🇮🇪 37.203.49.121

🇷🇴 2.57.121.112

🇺🇸 2001:19f0:ac01:1ad7:5400:6ff:fe72:b8f2

🇱🇹 213.176.26.123

🇺🇸 207.90.244.18

🇺🇸 206.81.11.215