JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.220.214.14

18.220.214.14 was found in our database!

This IP was reported 248 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-220-214-14.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.220.214.14

Whois 18.220.214.14

IP Abuse Reports for 18.220.214.14:

This IP address has been reported a total of 248 times from 202 distinct sources. 18.220.214.14 was first reported on June 13th 2026, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 llighthunter	2026-06-17 10:38:23 (17 hours ago)	Jun 14 03:46:12 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=18 ... show more Jun 14 03:46:12 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=18.220.214.14, lip=192.168.1.80, TLS handshaking: SSL_accept() failed: error:1408F09C:SSL routines:ssl3_get_record:http request, session=<PZ1TCSxU1FIS3NYO> Jun 14 03:47:31 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=18.220.214.14, lip=192.168.1.80, TLS handshaking: SSL_accept() failed: error:1408F09C:SSL routines:ssl3_get_record:http request, session=<zgwUDixUdkUS3NYO> Jun 14 03:49:00 mail dovecot: pop3-login: Disconnected: Too many bad commands (no auth attempts in 4 secs): user=<>, rip=18.220.214.14, lip=192.168.1.80, TLS, session=<7B1eEyxU6n8S3NYO> show less	Port Scan Hacking Spoofing
🇦🇹 keechi	2026-06-16 22:06:54 (1 day ago)	2026-06-13T20:30:55.639475+02:00 nextcloudpi postfix/smtpd[319560]: improper command pipelining afte ... show more 2026-06-13T20:30:55.639475+02:00 nextcloudpi postfix/smtpd[319560]: improper command pipelining after CONNECT from ec2-18-220-214-14.us-east-2.compute.amazonaws.com[18.220.214.14]: GET / HTTP/1.1\r\nHost: 84.112.33.160:25\r\nUser-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; In ... show less	Brute-Force
🇬🇧 Ged	2026-06-15 12:04:01 (2 days ago)	Brute force.	Brute-Force
🇦🇹 keechi	2026-06-14 22:07:00 (3 days ago)	2026-06-13T20:30:55.639475+02:00 nextcloudpi postfix/smtpd[319560]: improper command pipelining afte ... show more 2026-06-13T20:30:55.639475+02:00 nextcloudpi postfix/smtpd[319560]: improper command pipelining after CONNECT from ec2-18-220-214-14.us-east-2.compute.amazonaws.com[18.220.214.14]: GET / HTTP/1.1\r\nHost: 84.112.33.160:25\r\nUser-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; In ... show less	Brute-Force
🇩🇪 EnthecSolutions	2026-06-14 14:01:02 (3 days ago)	Detected by Enthec Solutions. \| Attempts: 21 in 24h \| Target port: 1433	Exploited Host Hacking
🇩🇪 excill	2026-06-14 03:03:04 (4 days ago)	Honeypot mesh observed 5564 attack events in 24h — cowrie/dionaea/heralding/suricata	Port Scan Hacking Brute-Force SSH
🇺🇸 donarev419	2026-06-14 01:18:25 (4 days ago)	Connection to port 445 with data transfer. Data preview:	Port Scan Hacking
🇬🇧 andypiper	2026-06-14 01:00:12 (4 days ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇵🇱 sefinek.net	2026-06-14 00:57:38 (4 days ago)	Honeypot hit: HTTP/1.1 request on 10000 GET / User-Agent: visionheight.com/scan Mozilla/5.0 (Macint ... show more Honeypot hit: HTTP/1.1 request on 10000 GET / User-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip; 10000 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇩🇪 kexol	2026-06-14 00:57:25 (4 days ago)	445 port scanned	Port Scan
🇳🇱 Nerdscave Hosting	2026-06-14 00:56:31 (4 days ago)	[SMB Honeypot Report] Timestamp: 2026-06-14 00:56:31 UTC Port: 24296 Attempted credentials (Base64): ... show more [SMB Honeypot Report] Timestamp: 2026-06-14 00:56:31 UTC Port: 24296 Attempted credentials (Base64): R0VUIC8gSFRUUC8xLjENCkhvc3Q6IDc3LjkwLjUwLjI4OjQ0NQ0KVXNlci1BZ2VudDogdmlzaW9uaGVpZ2h0LmNvbS9zY2FuIE1vemlsbGEvNS4wIChNYWNpbnRvc2g7IEludGVsIE1hYyBPUyBYIDEwXzE1XzcpIENocm9tZS8xMjYuMC4wLjAgU2FmYXJpLzUzNy4zNg0KQWNjZXB0OiAqLyoNCkFjY2VwdC1FbmNvZGluZzogZ3ppcA== Attack Type: Unauthorized SMB connection attempt show less	Brute-Force Port Scan Hacking
🇺🇸 drewf.ink	2026-06-14 00:55:39 (4 days ago)	[00:55] Port scanning. Port(s) scanned: TCP/1337	Port Scan
🇳🇱 donarev419	2026-06-14 00:53:35 (4 days ago)	Connection to port 8093 with data transfer. Data preview:	Port Scan Hacking
🇦🇺 LiftUp Hosting	2026-06-14 00:51:53 (4 days ago)	Honeypot hit: HTTP/1.1 request on 8093 GET / User-Agent: visionheight.com/scan Mozilla/5.0 (Macinto ... show more Honeypot hit: HTTP/1.1 request on 8093 GET / User-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip; 8093 [4] TCP show less	Hacking Bad Web Bot
🇫🇷 arteagasoft	2026-06-14 00:50:54 (4 days ago)	2026-06-13T18:48:05.502823-06:00 99084af566a4 dovecot: pop3-login: Login aborted: Connection closed: ... show more 2026-06-13T18:48:05.502823-06:00 99084af566a4 dovecot: pop3-login: Login aborted: Connection closed: SSL_accept() failed: error:0A00009C:SSL routines::http request (disconnected during TLS handshake) (tls_handshake_not_finished): user=<>, rip=18.220.214.14, lip=192.168.30.250, TLS handshaking: SSL_accept() failed: error:0A00009C:SSL routines::http request, session=<2eQWECxUaowS3NYO> 2026-06-13T18:49:25.208542-06:00 99084af566a4 dovecot: pop3-login: Login aborted: Connection closed: SSL_accept() failed: error:0A00009C:SSL routines::http request (disconnected during TLS handshake) (tls_handshake_not_finished): user=<>, rip=18.220.214.14, lip=192.168.30.250, TLS handshaking: SSL_accept() failed: error:0A00009C:SSL routines::http request, session=<EijXFCxUEvQS3NYO> 2026-06-13T18:50:53.461445-06:00 99084af566a4 dovecot: pop3-login: Login aborted: Connection closed: SSL_accept() failed: error:0A0000EB:SSL routines::no application protocol (disconnected during TLS handshake) (tls_handshake_no ... show less	Brute-Force

Showing 1 to 15 of 248 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 202.29.223.30

🇬🇧 198.244.183.254

🇺🇸 192.210.28.178

🇵🇾 181.123.62.210

🇫🇮 178.20.210.151

🇵🇰 154.192.139.85

🇰🇪 154.159.252.30

🇨🇦 144.217.161.208

🇺🇸 143.42.1.34

🇨🇳 123.245.85.71

🇻🇳 113.161.145.195

🇳🇱 91.92.40.13

🇸🇪 90.227.228.191

🇨🇦 85.217.149.12

🇬🇧 51.89.129.184

🇫🇷 51.68.107.138

🇳🇱 45.142.193.122

🇺🇸 43.130.139.177

🇺🇸 34.228.104.231

🇺🇸 20.64.105.39