JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.220.77.80

18.220.77.80 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 70%: ?

70%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-220-77-80.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.220.77.80

Whois 18.220.77.80

IP Abuse Reports for 18.220.77.80:

This IP address has been reported a total of 16 times from 12 distinct sources. 18.220.77.80 was first reported on July 24th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Aetherweb Ark	2026-07-28 10:21:33 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 18.220.77.80 (US/United States/ec2-18-220-77-80 ... show more (mod_security) mod_security (id:949110) triggered by 18.220.77.80 (US/United States/ec2-18-220-77-80.us-east-2.compute.amazonaws.com): N in the last X secs show less	Web App Attack
🇺🇸 bigscoots.com	2026-07-28 07:29:39 (1 day ago)	(PERMBLOCK) 18.220.77.80 (US/United States/ec2-18-220-77-80.us-east-2.compute.amazonaws.com) has had ... show more (PERMBLOCK) 18.220.77.80 (US/United States/ec2-18-220-77-80.us-east-2.compute.amazonaws.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force SSH
🇪🇸 alferez	2026-07-28 01:26:47 (1 day ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
Anonymous	2026-07-28 01:07:10 (1 day ago)	[ns19.kdns.gr] httpd-config-scan: sites=www.example.com; logs=/var/log/httpd/access_log; samples=/.g ... show more [ns19.kdns.gr] httpd-config-scan: sites=www.example.com; logs=/var/log/httpd/access_log; samples=/.git/config \| /.env \| /.env.local show less	Hacking Web App Attack
🇫🇷 dynamix	2026-07-27 14:10:06 (2 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 13:12:25 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 18.220.77.80 (ec2-18-220-77-80.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 18.220.77.80 (ec2-18-220-77-80.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 09:12:17.825051 2026] [security2:error] [pid 3645191:tid 3645191] [client 18.220.77.80:57590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mandel.vc"] [uri "/.git/config"] [unique_id "amdZMagI5Y3iRQGD-xZLaQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 10:48:23 (2 days ago)	(mod_security) mod_security (id:949110) triggered by 18.220.77.80 (ec2-18-220-77-80.us-east-2.comput ... show more (mod_security) mod_security (id:949110) triggered by 18.220.77.80 (ec2-18-220-77-80.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 06:48:15.560775 2026] [security2:error] [pid 301501:tid 301501] [client 18.220.77.80:48950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "manavamooreabookings.com"] [uri "/.git/config"] [unique_id "amc3b1tc5VaAcMEK6hh5GwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-25 22:05:41 (4 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-24. show less	Web App Attack SSH Hacking
🇩🇪 grassau.com	2026-07-25 02:49:53 (4 days ago)	(mod_security) mod_security triggered on hostname [redacted] 18.220.77.80 (US/United States/Ohio/Col ... show more (mod_security) mod_security triggered on hostname [redacted] 18.220.77.80 (US/United States/Ohio/Columbus/ec2-18-220-77-80.us-east-2.compute.amazonaws.com) show less	SQL Injection
🇳🇿 Antinson	2026-07-25 01:24:44 (4 days ago)	Scraping with a high error ratio and request rate	Bad Web Bot
Anonymous	2026-07-24 21:30:40 (5 days ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇬🇧 Celtic	2026-07-24 21:00:22 (5 days ago)	Blocked by Fail2Ban with Jail (plesk-modsecurity)	Brute-Force SSH
🇫🇷 dynamix	2026-07-24 14:04:14 (5 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 08:36:54 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 18.220.77.80 (ec2-18-220-77-80.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 18.220.77.80 (ec2-18-220-77-80.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 04:36:50.587644 2026] [security2:error] [pid 32701:tid 32701] [client 18.220.77.80:59052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendykim.com"] [uri "/.git/config"] [unique_id "amMkIguA7oILw9-I3wCQBwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WellSpring	2026-07-24 04:35:41 (5 days ago)	env leak on wellsign.org/bootstrap/.env — WellSpr.ing/NetSentinel civic-AI security layer	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.103

🇺🇸 162.216.150.34

🇺🇸 147.124.195.71

🇺🇸 136.66.137.120

🇨🇳 119.185.147.68

🇳🇱 31.14.32.7

🇭🇰 156.251.179.157

🇻🇳 116.110.6.73

🇲🇦 105.69.254.211

🇿🇦 102.129.55.215

🇺🇸 96.78.175.41

🇺🇸 54.235.52.37

🇳🇱 45.148.10.152

🇳🇱 45.148.10.151

🇳🇱 45.148.10.141

🇹🇷 94.154.43.230

🇫🇷 62.210.142.166

🇨🇦 45.194.92.53

🇧🇷 43.157.163.155

🇬🇧 35.203.211.63