18.204.18.84
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Amazon Technologies Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14618
- Hostname(s)
- ec2-18-204-18-84.compute-1.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇺🇸 United States of America
- City
- Ashburn, Virginia
Abuse Reports
Total reports
34 from
28 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 MPL |
tcp/8443 (141 or more attempts)
|
Port Scan | |
| 🇩🇪 iNetWorker |
firewall-block, port(s): 10443/tcp
|
Port Scan | |
| 🇩🇪 cloudmax |
Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing
|
Port Scan | |
| 🇩🇪 reznekcs |
Blocked by UFW firewall
|
Brute-Force | |
| 🇨🇿 kronos |
IDS: FlowIntel scan-like source | SID:9900001 | session_sigs:421 | alerts5m:421
|
Port Scan | |
| 🇨🇿 lp |
anomaly: tcp_port_scan, 501 > threshold 500, repeats 209991 times
|
Port Scan | |
| 🇳🇱 Ilop |
[v6-22] Firewall dropped 3 unsolicited packet(s) proto=tcp to port(s) 443 from 18.204.18.84 — WAN scan (automated sensor)
|
Port Scan | |
| 🇳🇱 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 3389/RDP | Proto: TCP(1) | Flags: all SYN | TTL: 109 | Len: 60B | Win: 62727(1) | rDNS: ec2-18-204-18-84.compute-1.amazonaws.com | F2B/ufw-honeypot@2026-11-07T02:51:31Z
|
Port Scan Hacking | |
| 🇮🇩 helouism |
Fail2Ban: Blocked by UFW for port scanning.
|
Port Scan DDoS Attack | |
| 🇸🇪 SkyDancer |
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
|
Hacking Brute-Force SSH | |
| 🇩🇪 Robbie |
Nov 6 12:24:58 Ubuntu-2204-jammy-amd64-base sshd[1829495]: Connection closed by 18.204.18.84 port 22472 [preauth]
...
|
Brute-Force SSH | |
| 🇯🇵 jsys |
Automated report (nfacl NetFlow analysis, 300s window): host sweep (1024 distinct dst hosts); SYN-flood-like small-packet flows (1024 small-packet flows)
|
DDoS Attack Port Scan | |
| Anonymous |
|
Port Scan Brute-Force SSH | |
| 🇺🇸 MPL |
tcp/13443 (141 or more attempts)
|
Port Scan | |
| 🇩🇪 ghostwarriors |
Unauthorized connection attempt detected, SSH Brute-Force
|
Brute-Force Port Scan SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown