JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.219.201.246

18.219.201.246 was found in our database!

This IP was reported 110 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-219-201-246.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.219.201.246

Whois 18.219.201.246

IP Abuse Reports for 18.219.201.246:

This IP address has been reported a total of 110 times from 99 distinct sources. 18.219.201.246 was first reported on August 21st 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 BlueWire Hosting	2026-08-22 10:08:53 (1 week ago)	Aggressive scanning resulting into 404	Bad Web Bot
🇫🇮 as211431.net	2026-08-22 10:02:05 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Marco711	2026-08-22 09:26:14 (1 week ago)	port/URL scanning	Port Scan Web App Attack
Anonymous	2026-08-22 09:15:21 (1 week ago)	Attack detected: 18.219.201.246 [2026-08-22] Categories: 21 --- wp2shell/batch exploit (3 hits) --- ... show more Attack detected: 18.219.201.246 [2026-08-22] Categories: 21 --- wp2shell/batch exploit (3 hits) --- 18.219.201.246 - - [22/Aug/2026:08:48:43 +0000] "GET /wp-json/batch/v1 HTTP/1.1" 404 5007 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 18.219.201.246 - - [22/Aug/2026:08:48:46 +0000] "GET /?rest_route=/batch/v1 HTTP/1.1" 404 5008 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 18.219.201.246 - - [22/Aug/2026:08:48:52 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 5309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" show less	Web App Attack
🇮🇹 zenmorro	2026-08-22 08:59:44 (1 week ago)	Honeypot hit (proxmox:8006) — scanner-path: /wp-login.php. Automated report from honeypot infrastruc ... show more Honeypot hit (proxmox:8006) — scanner-path: /wp-login.php. Automated report from honeypot infrastructure show less	Port Scan Web App Attack
🇬🇧 Bytemark	2026-08-22 08:44:29 (1 week ago)	18.219.201.246 - - [22/Aug/2026:09:44:22 +0100] "GET /wp-login.php HTTP/1.1" 301 6724 "-" "Mozilla/5 ... show more 18.219.201.246 - - [22/Aug/2026:09:44:22 +0100] "GET /wp-login.php HTTP/1.1" 301 6724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 18.219.201.246 - - [22/Aug/2026:09:44:23 +0100] "GET /wp-login.php HTTP/1.1" 301 6849 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 18.219.201.246 - - [22/Aug/2026:09:44:28 +0100] "GET /wp-login.php HTTP/1.1" 404 6606 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
🇪🇸 arturotrenard	2026-08-22 08:44:27 (1 week ago)	WordPress attack blocked (wp-defender): exploit-probe: https://hubsmesaclick.com/wp-json/batch/v1	Web App Attack
Anonymous	2026-08-22 08:43:52 (1 week ago)	(caddyscan) Scanner path probe from 18.219.201.246 (US/United States/ec2-18-219-201-246.us-east-2.co ... show more (caddyscan) Scanner path probe from 18.219.201.246 (US/United States/ec2-18-219-201-246.us-east-2.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 18.219.201.246 - - [22/Aug/2026:08:18:17 +0000] "GET /wp-login.php HTTP/1.1" [REDACTED] 200 2627 18.219.201.246 - - [22/Aug/2026:08:18:30 +0000] "GET /wp-login.php HTTP/1.1" [REDACTED] 200 2627 18.219.201.246 - - [22/Aug/2026:08:27:38 +0000] "GET /wp-login.php HTTP/1.1" [REDACTED] 200 2627 18.219.201.246 - - [22/Aug/2026:08:33:55 +0000] "GET /wp-login.php HTTP/1.1" [REDACTED] 200 2627 18.219.201.246 - - [22/Aug/2026:08:43:51 +0000] "GET /wp-login.php HTTP/1.1" show less	Port Scan
🇫🇷 omartin	2026-08-22 08:42:21 (1 week ago)	Critical Vulnerability Scan detected	Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 Vianpyro	2026-08-22 08:36:12 (1 week ago)	Honeypot: 18 request(s) in 0 min. Paths: /, /wp-json/, /wp-login.php, /readme.html, /feed/. Method(s ... show more Honeypot: 18 request(s) in 0 min. Paths: /, /wp-json/, /wp-login.php, /readme.html, /feed/. Method(s): GET,POST. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). ASN: 16509 (Amazon Technologies Inc.). show less	Web App Attack Bad Web Bot Brute-Force Hacking
🇺🇸 zcampbell	2026-08-22 08:35:06 (1 week ago)	Web vulnerability scanning: probing for exposed sensitive files (wp-login). Detected and blocked aut ... show more Web vulnerability scanning: probing for exposed sensitive files (wp-login). Detected and blocked automatically. show less	Web App Attack Bad Web Bot
🇩🇪 electra	2026-08-22 08:33:39 (1 week ago)	Attempted to access path /wp-login.php (GET request)	Hacking Brute-Force Web App Attack
🇧🇪 cmbplf	2026-08-22 08:23:34 (1 week ago)	3.383 requests from abuseipdb.com blacklisted IP (1yr7mos1w)	Brute-Force Bad Web Bot
🇩🇪 ghostwarriors	2026-08-22 08:20:06 (1 week ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-08-22 07:58:13 (1 week ago)	18.219.201.246 - - [22/Aug/2026:09:58:03 +0200] "GET / HTTP/1.1" 200 5576 "-" "Mozilla/5.0 (Windows ... show more 18.219.201.246 - - [22/Aug/2026:09:58:03 +0200] "GET / HTTP/1.1" 200 5576 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 18.219.201.246 - - [22/Aug/2026:09:58:09 +0200] "GET /wp-json/ HTTP/1.1" 404 4467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 18.219.201.246 - - [22/Aug/2026:09:58:11 +0200] "GET /wp-login.php HTTP/1.1" 404 4612 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 18.219.201.246 - - [22/Aug/2026:06:40:08 +0200] "GET / HTTP/1.1" 200 6010 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 18.219.201.246 - - [22/Aug/2026:06:40:11 +0200] "GET /wp-json/ HTTP/1.1" 404 4549 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 18.219.201.2 show less	Web App Attack Hacking

Showing 16 to 30 of 110 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 201.177.0.77

🇲🇽 200.225.60.40

🇹🇳 197.17.26.13

🇧🇷 179.190.113.1

🇺🇸 147.185.132.97

🇻🇳 104.218.166.62

🇷🇺 94.228.205.131

🇫🇷 91.231.89.11

🇺🇸 91.230.168.253

🇺🇸 34.229.166.45

🇫🇷 172.71.134.75

🇵🇰 153.117.38.250

🇯🇵 152.32.201.119

🇫🇮 147.185.133.54

🇹🇼 111.70.20.106

🇵🇰 110.38.8.1

🇺🇸 74.7.175.136

🇱🇻 62.60.130.242

🇺🇸 47.251.40.248

🇬🇧 35.203.211.81