JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.216.141.193

18.216.141.193 was found in our database!

This IP was reported 63 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-216-141-193.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.216.141.193

Whois 18.216.141.193

IP Abuse Reports for 18.216.141.193:

This IP address has been reported a total of 63 times from 61 distinct sources. 18.216.141.193 was first reported on April 27th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 excill	2026-06-05 03:11:25 (1 week ago)	Honeypot mesh observed 637 attack events in 24h — cowrie/dionaea/heralding/suricata	Port Scan Hacking Brute-Force SSH
Anonymous	2026-06-04 21:52:21 (1 week ago)	Reported from Nginx log analysis 11. Log: 18.216.141.193 - - [04/Jun/2026:xx:xx:xx 0200] "GET / HTT ... show more Reported from Nginx log analysis 11. Log: 18.216.141.193 - - [04/Jun/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" "-" "US United States Columbus" "AS16509" "Amazon.com, Inc." show less	Port Scan Brute-Force SSH
🇩🇪 auridh	2026-06-04 16:56:53 (1 week ago)	Ip 18.216.141.193 performed 'crowdsecurity/postscreen-rbl' (1 events over 0s) at 2026-06-04 16:06:42 ... show more Ip 18.216.141.193 performed 'crowdsecurity/postscreen-rbl' (1 events over 0s) at 2026-06-04 16:06:42.746013854 +0000 UTC show less	Brute-Force
🇨🇭 Ribeye375	2026-06-04 16:26:30 (1 week ago)	HIPS rce-attempt - Block tcp/0:65535	Hacking Web App Attack
🇸🇪 hhmm	2026-06-04 16:25:42 (1 week ago)	2026-06-04 19:22:06 SMTP call from ec2-18-216-141-193.us-east-2.compute.amazonaws.com [18.216.141.19 ... show more 2026-06-04 19:22:06 SMTP call from ec2-18-216-141-193.us-east-2.compute.amazonaws.com [18.216.141.193] dropped: too many unrecognized commands (last was "Accept: /") 2026-06-04 19:24:19 SMTP call from ec2-18-216-141-193.us-east-2.compute.amazonaws.com [18.216.141.193] dropped: too many unrecognized commands (last was "Accept: /") 2026-06-04 19:25:42 SMTP call from ec2-18-216-141-193.us-east-2.compute.amazonaws.com [18.216.141.193] dropped: too many syntax or protocol errors (last command was "?", NULL) ... show less	Brute-Force
🇦🇺 GE	2026-06-04 16:25:07 (1 week ago)	2026-06-05T03:21:31.808709+11:00 smtp.geddy.au exim[1147325]: SMTP call from ec2-18-216-141-193.us-e ... show more 2026-06-05T03:21:31.808709+11:00 smtp.geddy.au exim[1147325]: SMTP call from ec2-18-216-141-193.us-east-2.compute.amazonaws.com [18.216.141.193] dropped: too many unrecognized commands (last was "Accept: /") 2026-06-05T03:23:44.513548+11:00 smtp.geddy.au exim[1147328]: SMTP call from ec2-18-216-141-193.us-east-2.compute.amazonaws.com [18.216.141.193] dropped: too many unrecognized commands (last was "Accept: /") 2026-06-05T03:25:06.742807+11:00 smtp.geddy.au exim[1147340]: SMTP call from ec2-18-216-141-193.us-east-2.compute.amazonaws.com [18.216.141.193] dropped: too many syntax or protocol errors (last command was "\023\003\023\001\023\002\001??\215?\005?\005\001?????", NULL) ... show less	Port Scan
🇩🇪 keep_out	2026-06-04 16:24:23 (1 week ago)	Probing\(5\) HTTP Ports ...	Bad Web Bot Web App Attack
🇳🇱 jbouwh	2026-06-04 16:23:34 (1 week ago)	2026-06-04T18:21:09.202884+02:00 [redacted] postfix/smtpd[3093762]: improper command pipelining afte ... show more 2026-06-04T18:21:09.202884+02:00 [redacted] postfix/smtpd[3093762]: improper command pipelining after CONNECT from ec2-18-216-141-193.us-east-2.compute.amazonaws.com[18.216.141.193]: n 2026-06-04T18:21:21.242096+02:00 [redacted] postfix/smtpd[3093762]: improper command pipelining after CONNECT from ec2-18-216-141-193.us-east-2.compute.amazonaws.com[18.216.141.193]: GET / HTTP/1.1rnHost: [redacted]:25rnUser-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; 2026-06-04T18:23:33.940731+02:00 [redacted] postfix/smtpd[3093762]: improper command pipelining after CONNECT from ec2-18-216-141-193.us-east-2.compute.amazonaws.com[18.216.141.193]: GET / HTTP/1.1rnHost: [redacted]:25rnUser-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; show less	Email Spam
🇩🇪 Viveronese	2026-06-04 16:23:04 (1 week ago)	HTTP vulnerability scanning	Web App Attack
🇮🇹 ciccio diddo	2026-06-04 16:22:56 (1 week ago)	Openrelay SMTP Scanner \| SMTP bruteforce port:Tcp/25	Brute-Force Email Spam
Anonymous	2026-06-04 16:22:12 (1 week ago)		Brute-Force Email Spam
🇩🇪 _ArminS_	2026-06-04 16:21:43 (1 week ago)	Spam detected 2026.06.04 18:21:43 blocked until 2026.06.05 18:21:43 by HoneyPot DE_BY_01	Email Spam Brute-Force
🇫🇷 Provost-info	2026-06-04 16:21:27 (1 week ago)	mail server - multiple authentication attempt with unknown username or bad password	Brute-Force Spoofing
🇺🇸 drewf.ink	2026-06-04 16:21:06 (1 week ago)	[16:21] Port scanning. Port(s) scanned: TCP/2086	Port Scan
🇺🇸 VanKoh	2026-06-04 16:21:06 (1 week ago)	18.216.141.193 - - [04/Jun/2026:10:21:02 -0600] "GET / HTTP/1.1" 302 138 "-" "visionheight.com/scan ... show more 18.216.141.193 - - [04/Jun/2026:10:21:02 -0600] "GET / HTTP/1.1" 302 138 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 18.216.141.193 - - [04/Jun/2026:10:21:04 -0600] "GET / HTTP/1.1" 301 5 "http://209.126.2.186:443/" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 18.216.141.193 - - [04/Jun/2026:10:21:05 -0600] "GET / HTTP/1.1" 301 162 "https://209.126.2.186/" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" ... show less	DDoS Attack Web App Attack

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.152.161.54

🇧🇷 177.128.224.122

🇷🇴 92.118.39.62

🇬🇪 212.58.102.107

🇺🇸 66.132.186.209

🇰🇷 61.32.68.66

🇨🇳 60.16.207.28

🇭🇰 8.217.192.50

🇨🇳 223.223.199.221

🇩🇪 213.209.159.56

🇰🇷 211.228.218.47

🇩🇪 194.36.25.45

🇺🇸 165.154.206.180

🇳🇱 160.119.69.16

🇨🇳 115.190.81.215

🇻🇳 103.130.213.223

🇻🇳 103.75.182.132

🇩🇪 86.103.34.61

🇷🇴 80.94.92.71

🇶🇦 37.186.40.36