18.216.53.28
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Amazon Technologies Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS16509
- Hostname(s)
- ec2-18-216-53-28.us-east-2.compute.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇺🇸 United States of America
- City
- Columbus, Ohio
No reports in the last 60 days
18.216.53.28 has been reported 27 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
27 from
18 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Edu,Zombie more details on https://threatbook.io/ip/18.216.53.28
2025-12-25 00:12:52 /cgi-bin/authLogin.cgi
|
Web App Attack | |
| 🇫🇮 payincog |
|
SQL Injection Brute-Force Bad Web Bot | |
| 🇺🇸 drewf.ink |
[09:33] Port scanning. Port(s) scanned: TCP/8080
|
Port Scan | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Edu,Zombie more details on https://threatbook.io/ip/18.216.53.28
2025-12-23 00:59:53 /cgi-bin/authLogin.cgi
|
Web App Attack | |
| 🇩🇪 Szymekk |
Honeypot [srv06]: Unauthorized traffic (21 bytes of payload); 8291 [2] TCP
|
Port Scan | |
| 🇺🇸 Mark-- |
Unauthorized connection attempt detected port 8080
|
Hacking | |
| 🇯🇵 mkaraki |
1766514209 # Service_probe # SIGNATURE_SEND # source_ip:18.216.53.28 # dst_port:8291
...
|
Port Scan | |
| 🇺🇸 drewf.ink |
[03:40] Port scanning. Port(s) scanned: TCP/8080
|
Port Scan | |
| 🇺🇸 drewf.ink |
[01:52] Port scanning. Port(s) scanned: TCP/8080
|
Port Scan | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Edu,Zombie more details on https://threatbook.io/ip/18.216.53.28
2025-12-22 01:21:32 /cgi-bin/authLogin.cgi
2025-12-22 01:28:06 /cgi-bin/authLogin.cgi
2025-12-22 01:24:14 /cgi-bin/authLogin.cgi
|
Web App Attack | |
| 🇺🇸 SuperCores Hosting |
[2025-12-22 20:38:38.854737] TELNET/8080 Unautorized connection, Suspicious Mirai Botnet.
|
DDoS Attack Port Scan Hacking Brute-Force IoT Targeted | |
| 🇺🇸 MPL |
tcp/443 (8 or more attempts)
|
Port Scan | |
| 🇺🇸 drewf.ink |
[10:11] Port scanning. Port(s) scanned: TCP/554
|
Port Scan | |
| 🇺🇸 drewf.ink |
[08:19] Port scanning. Port(s) scanned: TCP/554
|
Port Scan | |
| 🇩🇪 ValtonTahiri |
Honeypot hit: Unauthorized traffic (21 bytes of payload); 8291 [2] TCP
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown