JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.219.201.246

18.219.201.246 was found in our database!

This IP was reported 99 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-219-201-246.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.219.201.246

Whois 18.219.201.246

IP Abuse Reports for 18.219.201.246:

This IP address has been reported a total of 99 times from 92 distinct sources. 18.219.201.246 was first reported on August 21st 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 DumaNet	2026-08-22 11:01:00 (2 hours ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 Aug 22. 12:03:28 Source IP: 18.219 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Aug 22. 12:03:28 Source IP: 18.219.201.246 Portion of the log(s): 18.219.201.246 - [22/Aug/2026:12:03:28 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 500 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" show less	Web App Attack
Anonymous	2026-08-22 10:50:50 (2 hours ago)	Blocked by siteaihub.com: auto: matched prefix:/wp-json/	Web App Attack Hacking
🇩🇪 AetherFox	2026-08-22 10:42:58 (2 hours ago)	AetherFox VoidGuard detected: [Sat Aug 22 10:42:56.232925 2026] [authz_core:error] [pid 2784406:tid ... show more AetherFox VoidGuard detected: [Sat Aug 22 10:42:56.232925 2026] [authz_core:error] [pid 2784406:tid 2784442] [client 18.219.201.246:29130] AH01630: client denied by server configuration: proxy:https://hq.draconigen.net.dedivirt4209.your-server.de/ [Sat Aug 22 10:42:56.233135 2026] [authz_core:error] [pid 2784406:tid 2784442] [client 18.219.201.246:29130] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Sat Aug 22 10:42:56.858191 2026] [authz_core:error] [pid 2784406:tid 2784421] [client 18.219.201.246:29146] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Sat Aug 22 10:42:58.287216 2026] [authz_core:error] [pid 2784406:tid 2784411] [client 18.219.201.246:29160] AH01630: client denied by server configuration: proxy:https://hq.draconigen.net.dedivirt4209.your-server.de/wp-login.php [Sat Aug 22 10:42:58.287466 2026] [authz_core:error] [pid 2784406:tid 2784411] [client 18.219.201.246:29160] AH01630: cl ... show less	Bad Web Bot Web App Attack
🇬🇧 Artelis	2026-08-22 10:27:18 (2 hours ago)	18.219.201.246 - - [22/Aug/2026:10:27:17 +0000] "GET /wp-login.php HTTP/1.1" 404 548 "-" "Mozilla/5. ... show more 18.219.201.246 - - [22/Aug/2026:10:27:17 +0000] "GET /wp-login.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 fabrice	2026-08-22 10:21:41 (2 hours ago)	Repeated Trusted domain errors : 18.219.201.246 - - [22/Aug/2026:12:21:41 +0200] "GET /wp-login.php ... show more Repeated Trusted domain errors : 18.219.201.246 - - [22/Aug/2026:12:21:41 +0200] "GET /wp-login.php HTTP/1.1" 403 5363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-08-22 10:16:50 (2 hours ago)	18.219.201.246 - - [22/Aug/2026:12:16:49 +0200] "GET /wp-json/ HTTP/1.1" 404 4463 "-" "Mozilla/5.0 ( ... show more 18.219.201.246 - - [22/Aug/2026:12:16:49 +0200] "GET /wp-json/ HTTP/1.1" 404 4463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 etu brutus	2026-08-22 10:16:31 (2 hours ago)	18.219.201.246 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇩🇪 iNetWorker	2026-08-22 10:12:10 (3 hours ago)	trolling for resource vulnerabilities	Web App Attack
🇳🇱 BlueWire Hosting	2026-08-22 10:08:53 (3 hours ago)	Aggressive scanning resulting into 404	Bad Web Bot
🇫🇮 as211431.net	2026-08-22 10:02:05 (3 hours ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Marco711	2026-08-22 09:26:14 (3 hours ago)	port/URL scanning	Port Scan Web App Attack
Anonymous	2026-08-22 09:15:21 (3 hours ago)	Attack detected: 18.219.201.246 [2026-08-22] Categories: 21 --- wp2shell/batch exploit (3 hits) --- ... show more Attack detected: 18.219.201.246 [2026-08-22] Categories: 21 --- wp2shell/batch exploit (3 hits) --- 18.219.201.246 - - [22/Aug/2026:08:48:43 +0000] "GET /wp-json/batch/v1 HTTP/1.1" 404 5007 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 18.219.201.246 - - [22/Aug/2026:08:48:46 +0000] "GET /?rest_route=/batch/v1 HTTP/1.1" 404 5008 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 18.219.201.246 - - [22/Aug/2026:08:48:52 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 5309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" show less	Web App Attack
🇮🇹 zenmorro	2026-08-22 08:59:44 (4 hours ago)	Honeypot hit (proxmox:8006) — scanner-path: /wp-login.php. Automated report from honeypot infrastruc ... show more Honeypot hit (proxmox:8006) — scanner-path: /wp-login.php. Automated report from honeypot infrastructure show less	Port Scan Web App Attack
🇬🇧 Bytemark	2026-08-22 08:44:29 (4 hours ago)	18.219.201.246 - - [22/Aug/2026:09:44:22 +0100] "GET /wp-login.php HTTP/1.1" 301 6724 "-" "Mozilla/5 ... show more 18.219.201.246 - - [22/Aug/2026:09:44:22 +0100] "GET /wp-login.php HTTP/1.1" 301 6724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 18.219.201.246 - - [22/Aug/2026:09:44:23 +0100] "GET /wp-login.php HTTP/1.1" 301 6849 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 18.219.201.246 - - [22/Aug/2026:09:44:28 +0100] "GET /wp-login.php HTTP/1.1" 404 6606 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
🇪🇸 arturotrenard	2026-08-22 08:44:27 (4 hours ago)	WordPress attack blocked (wp-defender): exploit-probe: https://hubsmesaclick.com/wp-json/batch/v1	Web App Attack

Showing 1 to 15 of 99 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 45.79.114.248

🇺🇸 45.33.89.53

🇺🇸 216.25.89.156

🇺🇸 162.216.149.149

🇩🇪 159.195.51.36

🇭🇰 203.198.173.137

🇨🇳 183.167.234.154

🇨🇭 179.43.145.35

🇺🇸 143.42.1.201

🇨🇳 110.229.212.186

🇷🇺 94.229.17.106

🇫🇷 91.231.89.227

🇸🇬 84.75.155.16

🇺🇸 64.62.156.101

🇳🇱 51.158.248.122

🇻🇳 45.121.25.115

🇨🇳 175.0.62.82

🇺🇸 167.99.159.52

🇮🇩 141.11.88.108

🇨🇳 114.67.127.241