18.199.149.167
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- A100 ROW GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS16509
- Hostname(s)
- ec2-18-199-149-167.eu-central-1.compute.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
No reports in the last 60 days
18.199.149.167 has been reported 49 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
49 from
45 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇪🇸 Gem |
Unauthorized web scan.
|
Web App Attack | |
| 🇧🇪 sid3windr |
GET /.git/config (Tarpitted for 1d15h8m26s, wasted 8.06MB)
|
Web App Attack | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Edu more details on http://threatbook.io/ip/18.199.149.167
2025-09-03 01:59:02 /
2025-09-03 01:59:03 /.git/config
2025-09-03 01:59:03 /
|
Web App Attack | |
| 🇺🇸 octageeks.com |
Wordpress malicious attack:[octa404]
|
Web App Attack | |
| 🇫🇷 Pythagus |
Aggressive web scan
|
SQL Injection Bad Web Bot Web App Attack | |
| Anonymous |
Reported from Nginx log analysis 6. Log: 18.199.149.167 - - [02/Sep/2025:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "-" "-" "DE Germany Frankfurt am Main" "AS16509" "AMAZON-02"
|
Port Scan Brute-Force SSH | |
| 🇸🇰 Eurofluid |
You shall not pass ! Abusive behavior blocked by EF firewall.
|
Port Scan Hacking Brute-Force | |
| 🇨🇿 sajmon0011 |
18.199.149.167 - - [02/Sep/2025:22:01:59 +0200] "\x16\x03\x01" 400 226 "-" "-"
...
|
Web App Attack | |
| 🇪🇸 masterguru |
Host header is a numeric IP address. Pattern match "^ (920350-123)
|
Hacking Bad Web Bot | |
| 🇺🇸 jcbriar |
Searching for vulnerable scripts
|
Hacking Web App Attack | |
| 🇺🇸 jfz-abuse |
fail2ban: apache-proxy
...
|
Web App Attack | |
| 🇪🇸 netfactotum |
|
Hacking Web App Attack | |
| 🇺🇸 MogBox |
|
Hacking | |
| Anonymous |
Bot / scanning and/or hacking attempts: [0/0] Software caused connection abort, GET / HTTP/1.1, GET /.git/config HTTP/1.1
|
Hacking Web App Attack | |
| 🇫🇷 security.yc3a.com |
|
Brute-Force Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown