JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.206.38.153

18.206.38.153 was found in our database!

This IP was reported 123 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-18-206-38-153.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.206.38.153

Whois 18.206.38.153

IP Abuse Reports for 18.206.38.153:

This IP address has been reported a total of 123 times from 85 distinct sources. 18.206.38.153 was first reported on July 1st 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 VentryShield	2026-07-15 15:27:30 (3 hours ago)	p0t honeypot: unknown connection on port 7443/tcp, 243 bytes received from client	Port Scan
🇸🇬 celestialcity	2026-07-15 13:23:06 (5 hours ago)	Blocked by UFW on celestialcityas [8443/tcp] \| SPT: 57838 \| TTL: 107 \| LEN: 60 \| TOS: 0x00 • Reporte ... show more Blocked by UFW on celestialcityas [8443/tcp] \| SPT: 57838 \| TTL: 107 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 ITSNF	2026-07-15 10:05:05 (9 hours ago)	Blocked by OPNsense firewall; 3 hits, proto=tcp, ports=8443	Port Scan Hacking
🇬🇧 Andrew	2026-07-15 08:04:38 (11 hours ago)	Blocked by UFW (TCP on port 10443). Source port: 47980 TTL: 117 Packet length: 60 TOS: 0x00 This re ... show more Blocked by UFW (TCP on port 10443). Source port: 47980 TTL: 117 Packet length: 60 TOS: 0x00 This report (for 18.206.38.153) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 raspi4	2026-07-15 07:29:47 (11 hours ago)	Fail2Ban Ban Triggered	Brute-Force Web App Attack
🇺🇸 donarev419	2026-07-15 05:01:13 (14 hours ago)	Connection to port 8443 with data transfer. Data preview:	Port Scan Hacking
🇺🇸 ISPLtd	2026-07-15 02:42:21 (16 hours ago)	Jul 14 20:42:18 18.206.38.153 TCP SPT=51264 DPT=3000 SYN Jul 14 20:42:19 18.206.38.153 TCP SPT=51264 ... show more Jul 14 20:42:18 18.206.38.153 TCP SPT=51264 DPT=3000 SYN Jul 14 20:42:19 18.206.38.153 TCP SPT=51264 DPT=3000 SYN Jul 14 20:42:21 18.206.38.153 TCP SPT=51264 DPT=3000 ... show less	Port Scan
🇩🇪 ValtonTahiri	2026-07-14 21:07:20 (22 hours ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=18.206.38.153; proto=TCP; source_port=36606; target_port=50050; flags=SYN show less	Port Scan
🇱🇹 im	2026-07-14 11:02:52 (1 day ago)	tcp/10443	Port Scan
🇺🇸 ISPLtd	2026-07-14 09:39:54 (1 day ago)	Jul 14 03:39:50 18.206.38.153 TCP SPT=40852 DPT=7547 SYN Jul 14 03:39:51 18.206.38.153 TCP SPT=40852 ... show more Jul 14 03:39:50 18.206.38.153 TCP SPT=40852 DPT=7547 SYN Jul 14 03:39:51 18.206.38.153 TCP SPT=40852 DPT=7547 SYN Jul 14 03:39:53 18.206.38.153 TCP SPT=40852 DPT=7547 ... show less	Port Scan
🇺🇸 rellim.com	2026-07-14 09:02:51 (1 day ago)	Jul 14 02:02:47 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08 ... show more Jul 14 02:02:47 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=18.206.38.153 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=109 ID=45737 DF PROTO=TCP SPT=56184 DPT=56001 WINDOW=62727 RES=0x00 SYN URGP=0 Jul 14 02:02:48 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=18.206.38.153 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=109 ID=45738 DF PROTO=TCP SPT=56184 DPT=56001 WINDOW=62727 RES=0x00 SYN URGP=0 Jul 14 02:02:50 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=18.206.38.153 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=109 ID=45739 DF PROTO=TCP SPT=56184 DPT=56001 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 acadeova	2026-07-14 01:31:06 (1 day ago)	🚨 Recon detected (nft drop) SRC=18.206.38.153 Observed=TCP dpt=31337 in=enp0s6 ttl=118 Time=recent(j ... show more 🚨 Recon detected (nft drop) SRC=18.206.38.153 Observed=TCP dpt=31337 in=enp0s6 ttl=118 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇩🇪 femboy.cat	2026-07-14 01:23:26 (1 day ago)	Port scan to tcp/443 from 18.206.38.153	Brute-Force
Anonymous	2026-07-13 21:54:08 (1 day ago)	Reported from Nginx log analysis 19. Log: 18.206.38.153 - - [13/Jul/2026:xx:xx:xx 0200] "GET /favic ... show more Reported from Nginx log analysis 19. Log: 18.206.38.153 - - [13/Jul/2026:xx:xx:xx 0200] "GET /favicon.ico HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" "-" "US United States Ashburn" "AS14618" "Amazon.com, Inc." show less	Port Scan Brute-Force SSH
Anonymous	2026-07-13 21:17:15 (1 day ago)	Drop from IP address 18.206.38.153 to tcp-port 31337	Port Scan

Showing 1 to 15 of 123 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 182.118.64.225

🇮🇳 182.73.176.186

🇨🇭 176.65.144.44

🇺🇸 165.154.206.204

🇮🇳 117.205.42.195

🇨🇳 113.57.34.46

🇺🇸 103.203.57.2

🇷🇺 91.211.182.202

🇺🇸 81.30.98.204

🇧🇾 37.215.4.231

🇻🇳 27.79.42.201

🇺🇸 18.206.250.127

🇨🇳 220.177.9.81

🇩🇪 213.209.159.235

🇵🇰 203.130.19.195

🇹🇷 195.85.207.202

🇺🇸 174.166.153.20

🇺🇸 173.24.185.52

🇯🇵 172.105.199.92

🇻🇳 171.244.37.103