18.157.80.3

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
34 reports
30 reporters · latest 1 year ago
ISP
A100 ROW GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-18-157-80-3.eu-central-1.compute.amazonaws.com
Domain Name
amazon.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

18.157.80.3 has been reported 34 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
34 from 30 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Port Scan Brute-Force SSH
Anonymous
Reported from Nginx log analysis 11. Log: 18.157.80.3 - - [02/Sep/2025:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "-" "-" "DE Germany Frankfurt am Main" "AS16509" "AMAZON-02"
Port Scan Brute-Force SSH
🇺🇸 Hulk Smash
Automated report, webserver-auth troll for exploits and/or SSH Attempts
Hacking Brute-Force
🇳🇱 b4shnhawx
1756838747 - 09/02/2025 18:45:47 Host: 18.157.80.3/18.157.80.3 Port: 443 TCP Blocked ...
Bad Web Bot Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: \x16\x03\x01, GET / HTTP/1.1, GET /.git/config HTTP/1.1
Hacking Web App Attack
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=29030 dstport=80
Port Scan
🇬🇧 Swiptly
Bot scanning for environment files .env .env/\* ...
Web App Attack
🇫🇷 pm33
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇬🇧 Deveroonie
18.157.80.3 - - [02/Sep/2025:18:38:00 +0000] "GET /.git/config HTTP/1.1" 404 134 "-" "l9explore/1.2.2" ...
Brute-Force Bad Web Bot Web App Attack
🇫🇮 kumiko
[2025-09-02 21:33:31] Known bad bot [l9tcpid/v1.1.0]
Bad Web Bot Web App Attack
🇫🇮 YF
Suspicious Endpoint Access
Brute-Force Web App Attack
🇩🇪 keep_out
152-nginx-4xx ...
Bad Web Bot Web App Attack
🇦🇹 Starburst SysOp Team
Host header is a numeric IP address. Pattern match "(?:^( (920350-ams6-1)
Hacking Bad Web Bot
🇺🇸 MPL
tcp ports: 443,80 (5 or more attempts)
Port Scan
🇺🇸 jfz-abuse
fail2ban: apache-proxy ...
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇴 193.46.255.86
🇧🇴 190.181.44.194
🇱🇧 185.124.213.18
🇫🇮 157.22.47.47
🇻🇪 154.3.77.4
🇧🇩 103.112.54.86
🇲🇺 102.115.22.65
🇨🇦 85.217.149.33
feedback