18.212.171.222

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
64 reports
54 reporters · latest 3 hours ago
ISP
Amazon Technologies Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14618
Hostname(s)
ec2-18-212-171-222.compute-1.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸 United States of America
City
Ashburn, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
64 from 54 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 10 🇩🇪 Germany 9 🇫🇷 France 5
Most common categories Port Scan 51 Hacking 15 Brute-Force 15 SSH 11 Web App Attack 6
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇸🇬 nandadytm
[2026-11-11 09:50:41] Banned 18.212.171.222 after 3 attempts: Portscan probe on TCP port 9200
Port Scan
🇹🇷 mixnet
Port scan: SYN-only probes to 1,022 hosts / 1 port (8000) in 10 minutes. Detected by Mixnet network flow monitoring.
Port Scan
🇩🇪 Ilop
[hp-100] 3 unsolicited packets to honeypot ports 9200 (OCI DShield sensor)
Port Scan
🇧🇷 radardatelecom
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot Web App Attack
🇮🇩 securejdprop
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET CINS Active Threat Intelligence Poor Reputation IP group 22).
Hacking Web App Attack
🇺🇸 ISPLtd
Nov 10 08:28:57 18.212.171.222 TCP SPT=56694 DPT=50050 SYN Nov 10 08:28:58 18.212.171.222 TCP SPT=56694 DPT=50050 SYN Nov 10 08:29:00 18.212.171.222 TCP SPT=56694 DPT=50050 ...
Port Scan
🇬🇧 Vluxon, Inc.
Port Scan
🇩🇪 Kitki30.com
Entered SSH Tarpit (endlessh, server 3). Log: 2026-11-10T02:13:03.868Z ACCEPT host=::ffff:18.212.171.222 port=41928 fd=6 n=3/4096
Brute-Force SSH Port Scan
🇸🇪 SkyDancer
Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by SkyDancer Ai via interface.
Hacking Brute-Force SSH
🇩🇪 marcel-knorr.de
[MK-Root1] Blocked by UFW
Brute-Force Port Scan
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-hive]: Unauthorized connection attempt detected on 22/SSH • Client: SSH-2.0-Go
SSH Port Scan
🇺🇸 TheSun
Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=9200
Port Scan Hacking
🇺🇸 Axel
Atom Honypot: 2 connections to ftp (tcp/21) observed by 2 honeypot sensors between 2026-11-07 08:07 UTC and 2026-11-07 08:07 UTC.
FTP Brute-Force
🇳🇱 VMHeaven.io
Blocked by UFW [443/tcp] Source port: 31718 TTL: 112 Packet length: 60
Port Scan Web App Attack
🇯🇵 jsys
Automated report (nfacl NetFlow analysis, 300s window): host sweep (1024 distinct dst hosts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 62.141.40.187
🇲🇾 49.124.153.56
🇳🇱 45.148.10.151
🇺🇦 45.88.253.177
🇺🇿 213.230.92.31
🇧🇷 179.184.85.167
🇺🇸 136.87.154.41
🇨🇳 119.183.227.210
🇺🇸 16.147.184.25
🇳🇱 193.47.62.98
🇺🇸 165.227.55.4
🇺🇸 159.183.119.111
🇮🇱 87.70.145.239
🇨🇳 58.222.244.226
🇺🇸 40.74.212.60
🇬🇧 31.171.130.75
feedback