AbuseIPDB » 18.224.214.140

18.224.214.140 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 45%: ?

45%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-224-214-140.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 18.224.214.140

Whois 18.224.214.140

IP Abuse Reports for 18.224.214.140:

This IP address has been reported a total of 35 times from 32 distinct sources. 18.224.214.140 was first reported on November 28th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Interceptor_HQ	2024-11-29 12:48:38 (1 month ago)	request_uri: / -- automatic report --	Hacking Brute-Force
GabrielJST	2024-11-29 12:44:55 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 18.224.214.140 (US/U ... show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 18.224.214.140 (US/United States/ec2-18-224-214-140.us-east-2.compute.amazonaws.com) show less	Bad Web Bot
selahattinalan	2024-11-29 12:18:21 (1 month ago)	18.224.214.140 - - [29/Nov/2024:15:18:20 +0300] "GET /owl.carousel.js HTTP/1.1" 404 4081 "-" "DoCoMo ... show more18.224.214.140 - - [29/Nov/2024:15:18:20 +0300] "GET /owl.carousel.js HTTP/1.1" 404 4081 "-" "DoCoMo/2.0 N905i(c100;TB;W24H16) (compatible; Googlebot-Mobile/2.1; http://www.google.com/bot.html)" show less	Brute-Force
thedreamer.nl	2024-11-29 12:13:23 (1 month ago)	18.224.214.140 - - [29/Nov/2024:13:13:21 +0100] "GET /dojo/tt-rss-layer.js HTTP/1.1" 404 181 "-" "Mo ... show more18.224.214.140 - - [29/Nov/2024:13:13:21 +0100] "GET /dojo/tt-rss-layer.js HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Linux; U; Android 11; zh-CN; M2012K11AC Build/RKQ1.200826.002) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.108 Quark/5.4.8.200 Mobile Safari/537.36" "US" "Columbus" "39.96250" "-83.00610" 18.224.214.140 - - [29/Nov/2024:13:13:21 +0100] "GET /dojo/dojo.js HTTP/1.1" 404 118 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:55.0) Gecko/20100101 Firefox/55.0" "US" "Columbus" "39.96250" "-83.00610" 18.224.214.140 - - [29/Nov/2024:13:13:21 +0100] "GET /common.js HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36" "US" "Columbus" "39.96250" "-83.00610" 18.224.214.140 - - [29/Nov/2024:13:13:22 +0100] "GET /utility.js HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/532.9 (KHTML, like Gecko) Chrome/5.0.310.0 Safari/532.9" "US" "Columbus" "39.96250" "-83 ... show less	Brute-Force Bad Web Bot
4server	2024-11-29 11:51:18 (1 month ago)	[FriNov2912:47:54.7890212024][security2:error][pid685041:tid685142][client18.224.214.140:0][client18 ... show more[FriNov2912:47:54.7890212024][security2:error][pid685041:tid685142][client18.224.214.140:0][client18.224.214.140]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(windows-live-social-object-extractor-engine\\|nutch-\)\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"220\"][id\"330056\"][rev\"10\"][msg\"Atomicorp.comWAFRules:EmailHarvesterSpambotUseragentdetected\"][severity\"CRITICAL\"][hostname\"vg13.ch\"][uri\"/vg13.ch/wp-content/plugins/contact-form-7/modules/recaptcha/index.js\"][unique_id\"Z0mp6kJSKOfl_0Yhw8LTRQAAAFU\"][FriNov2912:49:59.2208562024][security2:error][pid684865:tid684906][client18.224.214.140:0][client18.224.214.140]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(MSWebServicesClientProtocol\\|WormlyBot\\|webauth@cmcm\\\\\\\\.com\)\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"326\"][id\"397989\"][rev\"1\"][msg\"Atomicorp.comWAFRules: show less	Port Scan Brute-Force Web App Attack
rh24	2024-11-29 11:21:15 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 18.224.214.140 (US/U ... show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 18.224.214.140 (US/United States/ec2-18-224-214-140.us-east-2.compute.amazonaws.com) show less	Bad Web Bot
clapper	2024-11-29 10:53:19 (1 month ago)	(mod_security) mod_security (id:949110) triggered by 18.224.214.140 (US/United States/ec2-18-224-214 ... show more(mod_security) mod_security (id:949110) triggered by 18.224.214.140 (US/United States/ec2-18-224-214-140.us-east-2.compute.amazonaws.com): 5 in the last 3600 secs; ID: rub show less	Brute-Force Bad Web Bot
Progetto1	2024-11-29 10:38:02 (1 month ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
quicksand	2024-11-29 09:46:44 (1 month ago)	Google Bot User Agent Spoofing [GET /] [Mozilla/5.0 (iPhone; U; CPU iPhone OS) (compatible; Googlebo ... show moreGoogle Bot User Agent Spoofing [GET /] [Mozilla/5.0 (iPhone; U; CPU iPhone OS) (compatible; Googlebot-Mobile/2.1; http://www.google.com/bot.html)] show less	Bad Web Bot Web App Attack
sefinek.net	2024-11-29 09:41:56 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE ASN: ... show moreTriggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE ASN: 16509 (AMAZON-02) Protocol: HTTP/1.1 (GET method) Zone: ws-noel.sefinek.net Endpoint: / Timestamp: 2024-11-29T09:09:45Z Ray ID: 8ea175ed68c7115c UA: Mozilla/5.0 (iPhone; CPU iPhone OS 15_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Mobile/15E148 Safari/604.1 Report generated by Cloudflare-WAF-To-AbuseIPDB: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
FeG Deutschland	2024-11-29 08:41:17 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities - 13	Exploited Host Web App Attack
uhlhosting	2024-11-29 07:30:16 (1 month ago)	vadoutlet.com 18.224.214.140 - - [29/Nov/2024:08:29:36.073127 +0100] "GET /sis/NC/sandbox/redsysV3.j ... show morevadoutlet.com 18.224.214.140 - - [29/Nov/2024:08:29:36.073127 +0100] "GET /sis/NC/sandbox/redsysV3.js HTTP/1.1" 403 199 "-" "-" Z0ltYOE7u3z5Yi2YajGGPAAAAEw "-" /apache/20241129/20241129-0829/20241129-082936-Z0ltYOE7u3z5Yi2YajGGPAAAAEw 0 1735 md5:f45348198af7558f01a13228aaacf0db vadoutlet.com 18.224.214.140 - - [29/Nov/2024:08:30:14.960299 +0100] "GET //vadoutlet.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js HTTP/1.1" 403 199 "-" "-" Z0lthsyZUWI__7ryhi8xbQAAAIw "-" /apache/20241129/20241129-0830/20241129-083014-Z0lthsyZUWI__7ryhi8xbQAAAIw 0 1916 md5:f11909a34056feba336b6fa2a406d583 vadoutlet.com 18.224.214.140 - - [29/Nov/2024:08:30:15.385679 +0100] "GET /wp-content/plugins/woocommerce/assets/js/flexslider/jquery.flexslider.min.js HTTP/1.1" 403 199 "-" "-" Z0lth0bPPYrL8vxx2xBczgAAAA0 "-" /apache/20241129/20241129-0830/20241129-083015-Z0lth0bPPYrL8vxx2xBczgAAAA0 0 1901 md5:7cf7242a6b70fa503534867506a90cb9 vadoutlet.com 18.224.214.140 - - [29/Nov/2024:08:3 ... show less	DDoS Attack Brute-Force
Anonymous	2024-11-29 07:15:12 (1 month ago)	Bot / seems abusive / Apache connections: 146	DDoS Attack Web Spam Bad Web Bot Web App Attack
taivas.nl	2024-11-28 20:32:11 (1 month ago)	Site scraper	Web App Attack
Carsten	2024-11-28 20:21:54 (1 month ago)	bad web bot	Bad Web Bot