JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

18.130.18.198

Activity Trending Down

Abuse Confidence Score

1% Caution

5 reports

5 reporters · latest 3 weeks ago

ISP: Amazon Data Services UK
Usage Type: Data Center/Web Hosting/Transit
ASN: AS16509
Hostname(s): ec2-18-130-18-198.eu-west-2.compute.amazonaws.com
Domain Name: amazon.com
Country: 🇬🇧 United Kingdom of Great Britain and Northern Ireland
City: London, England

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

5 from 5 distinct reporters

First reported

November 30th 2025

Most recent report

3 weeks ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 1

Most common categories Hacking 1 Port Scan 1 Web App Attack 1

Old reports The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 markawes	2026-10-20 20:00:37 UTC · (3 weeks ago)	[markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. Evidence: 18.130.18.198 - - [20/Oct/2026:21:00:36 +0100] "GET /.git/config HTTP/1.1" 404 513 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 ... show more [markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. Evidence: 18.130.18.198 - - [20/Oct/2026:21:00:36 +0100] "GET /.git/config HTTP/1.1" 404 513 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.130.18.198 - - [20/Oct/2026:21:00:36 +0100] "GET /.env HTTP/1.1" 404 513 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.130.18.198 - - [20/Oct/2026:21:00:36 +0100] "GET /.env.local HTTP/1.1" 404 513 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Port Scan Hacking Web App Attack
🇺🇸 yzfdude1	2026-02-06 17:56:07 UTC · (9 months ago)	Feb 6 10:56:01 b146-30 sshd[3096955]: Failed password for root from 18.130.18.198 port 43440 ssh2 Feb 6 10:56:04 b146-30 sshd[3096957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.130.18.198 user=root ... show more Feb 6 10:56:01 b146-30 sshd[3096955]: Failed password for root from 18.130.18.198 port 43440 ssh2 Feb 6 10:56:04 b146-30 sshd[3096957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.130.18.198 user=root Feb 6 10:56:06 b146-30 sshd[3096957]: Failed password for root from 18.130.18.198 port 43452 ssh2 ... show less	Brute-Force SSH
🇩🇪 Thomas Barth	2026-02-06 17:40:05 UTC · (9 months ago)	2026-02-06T18:40:04.381674+01:00 server sshd-session[15236]: Connection closed by authenticating user root 18.130.18.198 port 55080 [preauth] ...	Brute-Force SSH
🇺🇸 chrisj	2026-02-06 16:56:55 UTC · (9 months ago)	2026-02-06T16:56:52.251414+00:00 aws sshd[595671]: Failed password for invalid user root from 18.130.18.198 port 37816 ssh2 2026-02-06T16:56:53.073171+00:00 aws sshd[595673]: User root from 18.130.18.198 not allowed because not listed in AllowUsers 2 ... show more 2026-02-06T16:56:52.251414+00:00 aws sshd[595671]: Failed password for invalid user root from 18.130.18.198 port 37816 ssh2 2026-02-06T16:56:53.073171+00:00 aws sshd[595673]: User root from 18.130.18.198 not allowed because not listed in AllowUsers 2026-02-06T16:56:53.186525+00:00 aws sshd[595673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.130.18.198 user=root 2026-02-06T16:56:54.979154+00:00 aws sshd[595673]: Failed password for invalid user root from 18.130.18.198 port 37818 ssh2 ... show less	Brute-Force SSH
🇩🇪 FeG Deutschland	2025-11-30 16:20:15 UTC · (11 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127	Exploited Host Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇴 92.118.39.71

🇳🇱 77.67.26.58

🇬🇧 35.203.210.106

🇺🇸 216.25.89.119

🇦🇷 181.191.65.131

🇫🇷 164.68.118.223

🇯🇵 153.122.19.153

🇫🇷 141.101.68.88

🇳🇱 77.239.124.78

🇳🇱 45.153.34.4

🇰🇷 39.119.3.83

🇺🇦 31.129.235.207

🇭🇺 195.38.115.178

🇫🇷 172.120.139.186

🇵🇱 172.64.200.115

🇧🇩 103.159.2.113

🇰🇿 88.204.245.66

🇺🇸 205.210.31.13

🇵🇪 200.60.110.9

🇺🇸 165.227.200.152