JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

18.144.52.228

Neutral Activity

Abuse confidence score ?

0% Low Risk

71 reports

42 reporters · latest 3 years ago

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-144-52-228.us-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	San Jose, California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

18.144.52.228 has been reported 71 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 18.144.52.228

Export CSV

This IP address has been reported a total of 71 times from 42 distinct sources. 18.144.52.228 was first reported on February 1st 2021, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2023-07-20 00:18:13 (3 years ago)	ThreatBook Intelligence: Edu more details on http://threatbook.io/ip/18.144.52.228	Brute-Force
🇫🇷 security.rdmc.fr	2023-07-18 18:50:50 (3 years ago)	Port Scan Attack proto:TCP src:50064 dst:23	Port Scan
🇺🇸 MPL	2023-07-18 18:19:20 (3 years ago)	tcp/23	Port Scan
🇨🇳 ThreatBook.io	2023-07-17 23:50:40 (3 years ago)	ThreatBook Intelligence: Edu more details on http://threatbook.io/ip/18.144.52.228	SSH
🇫🇷 oonux.net	2023-07-16 20:40:48 (3 years ago)	RouterOS: Scanning detected TCP 18.144.52.228:41120 > x.x.x.x:23	Port Scan
🇩🇪 IllusionCloud	2023-01-21 00:01:23 (3 years ago)	Gameserver filtering detected invalid connection sequence, possible proxy	DDoS Attack Hacking Exploited Host
🇫🇷 Lat31320	2022-10-17 00:01:29 (3 years ago)	debx - SSH brute force	Brute-Force SSH
🇩🇪 ipcop.net	2022-10-16 09:22:57 (3 years ago)	Malicious activity detected from 18.144.52.228.	Brute-Force
🇺🇸 Dominik Wozniak	2022-10-06 06:38:18 (3 years ago)	Oct 6 10:38:17 ssh sshd[2605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t ... show more Oct 6 10:38:17 ssh sshd[2605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.144.52.228 show less	Brute-Force SSH
Anonymous	2022-10-06 02:04:09 (3 years ago)	Scanning	Port Scan
🇩🇪 www.blocklist.de	2022-10-06 02:02:46 (3 years ago)	Lines containing failures of 18.144.52.228 (max 1000) Oct 4 02:01:52 ntop sshd[736472]: Connection ... show more Lines containing failures of 18.144.52.228 (max 1000) Oct 4 02:01:52 ntop sshd[736472]: Connection closed by 18.144.52.228 port 40510 Oct 4 02:01:53 ntop sshd[736483]: AD user ly from 18.144.52.228 port 40550 Oct 4 02:01:53 ntop sshd[736483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.144.52.228 Oct 4 02:01:55 ntop sshd[736483]: Failed password for AD user ly from 18.144.52.228 port 40550 ssh2 Oct 4 02:01:56 ntop sshd[736501]: AD user AJuleya from 18.144.52.228 port 40544 Oct 4 02:01:56 ntop sshd[736502]: AD user newpxe from 18.144.52.228 port 40596 Oct 4 02:01:56 ntop sshd[736483]: Connection closed by AD user ly 18.144.52.228 port 40550 [preauth] Oct 4 02:01:56 ntop sshd[736501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.144.52.228 Oct 4 02:01:56 ntop sshd[736502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.144.52.2........ ------------------------------ show less	FTP Brute-Force Hacking
🇩🇪 www.blocklist.de	2022-10-06 01:03:02 (3 years ago)	Lines containing failures of 18.144.52.228 (max 1000) Oct 4 02:01:52 ntop sshd[736472]: Connection ... show more Lines containing failures of 18.144.52.228 (max 1000) Oct 4 02:01:52 ntop sshd[736472]: Connection closed by 18.144.52.228 port 40510 Oct 4 02:01:53 ntop sshd[736483]: AD user ly from 18.144.52.228 port 40550 Oct 4 02:01:53 ntop sshd[736483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.144.52.228 Oct 4 02:01:55 ntop sshd[736483]: Failed password for AD user ly from 18.144.52.228 port 40550 ssh2 Oct 4 02:01:56 ntop sshd[736501]: AD user AJuleya from 18.144.52.228 port 40544 Oct 4 02:01:56 ntop sshd[736502]: AD user newpxe from 18.144.52.228 port 40596 Oct 4 02:01:56 ntop sshd[736483]: Connection closed by AD user ly 18.144.52.228 port 40550 [preauth] Oct 4 02:01:56 ntop sshd[736501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.144.52.228 Oct 4 02:01:56 ntop sshd[736502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.144.52.2........ ------------------------------ show less	FTP Brute-Force Hacking
🇩🇪 flixie	2022-10-06 00:34:34 (3 years ago)	2022-10-06T06:34:32.706436***** sshd[1385585]: Invalid user posiflex from 18.144.52.228 port 48044 ... show more 2022-10-06T06:34:32.706436*** sshd[1385585]: Invalid user posiflex from 18.144.52.228 port 48044 2022-10-06T06:34:32.706442*** sshd[1385581]: Invalid user www from 18.144.52.228 port 47994 2022-10-06T06:34:32.707308***** sshd[1385583]: Invalid user es from 18.144.52.228 port 48106 show less	Brute-Force SSH
🇺🇸 Cobalt IT Inc	2022-10-06 00:25:37 (3 years ago)	Oct 5 21:25:35 server01 sshd[5284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Oct 5 21:25:35 server01 sshd[5284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.144.52.228 Oct 5 21:25:37 server01 sshd[5284]: Failed password for invalid user git from 18.144.52.228 port 58018 ssh2 ... show less	Brute-Force SSH
🇩🇪 die-partei-reutlingen.de	2022-10-05 23:22:55 (3 years ago)		Brute-Force SSH

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.131.2.2

🇨🇳 220.202.112.244

🇺🇸 191.96.196.91

🇦🇱 185.38.193.152

🇧🇷 179.252.16.164

🇳🇱 159.223.229.138

🇫🇮 147.185.133.98

🇮🇩 103.142.240.142

🇻🇳 103.28.37.125

🇲🇦 102.53.15.180

🇺🇸 91.230.168.124

🇺🇸 66.132.186.129

🇯🇵 47.91.25.53

🇸🇬 45.78.206.111

🇺🇸 35.87.156.227

🇮🇳 210.89.45.20

🇺🇸 172.110.223.179

🇺🇸 172.90.1.117

🇸🇬 157.245.146.62

🇨🇳 117.25.124.93