JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.221.180.252

18.221.180.252 was found in our database!

This IP was reported 116 times. Confidence of Abuse is 0%: ?

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-221-180-252.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.221.180.252

Whois 18.221.180.252

IP Abuse Reports for 18.221.180.252:

This IP address has been reported a total of 116 times from 90 distinct sources. 18.221.180.252 was first reported on March 16th 2025, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Wiser2k1	2025-04-16 15:23:00 (1 year ago)	tcp/21 unauthorized connection attempts (3x)	FTP Brute-Force
🇹🇷 rtbh.com.tr	2025-03-17 20:48:51 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 geot	2025-03-17 12:12:59 (1 year ago)	SSH-2.0-Go	Port Scan Hacking
🇺🇸 chronos	2025-03-17 07:06:03 (1 year ago)	[AUTORAVALT][[17/03/2025 - 04:06:02 -03:00 UTC] Attack from [Amazon Technologies Inc.] [18.221.180.2 ... show more [AUTORAVALT][[17/03/2025 - 04:06:02 -03:00 UTC] Attack from [Amazon Technologies Inc.] [18.221.180.252][ec2-18-221-180-252.us-east-2.compute.amazonaws.com] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam ->] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇮🇳 Parth Maniar	2025-03-17 06:46:16 (1 year ago)	This IP address carried out 17 port scanning attempts on 16-03-2025. For more information or to repo ... show more This IP address carried out 17 port scanning attempts on 16-03-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇺🇸 chronos	2025-03-17 06:17:19 (1 year ago)	[AUTORAVALT][[17/03/2025 - 03:17:19 -03:00 UTC] Attack from [Amazon Technologies Inc.] [18.221.180.2 ... show more [AUTORAVALT][[17/03/2025 - 03:17:19 -03:00 UTC] Attack from [Amazon Technologies Inc.] [18.221.180.252][ec2-18-221-180-252.us-east-2.compute.amazonaws.com] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam ->] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇺🇸 chronos	2025-03-17 04:23:59 (1 year ago)	[AUTORAVALT][[17/03/2025 - 01:23:58 -03:00 UTC] Attack from [Amazon Technologies Inc.] [18.221.180.2 ... show more [AUTORAVALT][[17/03/2025 - 01:23:58 -03:00 UTC] Attack from [Amazon Technologies Inc.] [18.221.180.252][ec2-18-221-180-252.us-east-2.compute.amazonaws.com] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam ->] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇺🇸 chronos	2025-03-17 03:38:15 (1 year ago)	[AUTORAVALT][[17/03/2025 - 00:38:14 -03:00 UTC] Attack from [Amazon Technologies Inc.] [18.221.180.2 ... show more [AUTORAVALT][[17/03/2025 - 00:38:14 -03:00 UTC] Attack from [Amazon Technologies Inc.] [18.221.180.252][ec2-18-221-180-252.us-east-2.compute.amazonaws.com] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam ->] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇨🇳 ThreatBook.io	2025-03-17 01:26:04 (1 year ago)	ThreatBook Intelligence: Edu,Zombie more details on https://threatbook.io/ip/18.221.180.252	SSH
🇹🇷 rtbh.com.tr	2025-03-16 20:48:53 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 COMPLEX	2025-03-16 15:36:57 (1 year ago)	Malicious activity detected by T-POT honeypot. Reported by COMPLEX.	Brute-Force SSH
🇩🇪 kkeyser	2025-03-16 12:13:54 (1 year ago)	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xC7\xD1\xA3\xF3\x10\x5C\x94p=\xF0C\x15\x98\xC6\x01\x9A[\x8F\x ... show more \x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xC7\xD1\xA3\xF3\x10\x5C\x94p=\xF0C\x15\x98\xC6\x01\x9A[\x8F\xDE\xB4\x8B\xB8.\xBB\x96W\xE9\xCC_ \xBE4\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0 show less	Web App Attack
🇳🇱 Study Bitcoin 🤗	2025-03-16 12:12:28 (1 year ago)	Port probe to tcp/80 (http) [srv124]	Port Scan Bad Web Bot Web App Attack
🇺🇸 ne1for23	2025-03-16 12:12:01 (1 year ago)	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 18.221.180.252 - - [16/Mar/2025:12:12:00 +0000] "GET / HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" "-" show less	Hacking
🇬🇧 powersec	2025-03-16 12:02:19 (1 year ago)	Malicious Network Traffic. Request: \x16\x03\x01\x00{\x01\x00\x00w\x03\x03y\x15&+'@6\xD6+'dD\xFBD\x0 ... show more Malicious Network Traffic. Request: \x16\x03\x01\x00{\x01\x00\x00w\x03\x03y\x15&+'@6\xD6+'dD\xFBD\x02g\xB0\xAC\xF9a]k\xE8J\xD5\x1BbG\xBEs\xBCS\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0 show less	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 116 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.78.126.54

🇧🇷 189.6.235.20

🇦🇷 179.41.190.154

🇻🇳 157.66.26.151

🇳🇬 152.32.143.6

🇳🇬 152.32.142.188

🇮🇳 103.60.211.106

🇿🇦 102.64.45.243

🇹🇼 101.13.3.207

🇳🇱 85.11.167.7

🇱🇹 62.60.130.227

🇺🇸 57.141.20.72

🇫🇷 2001:41d0:33a:a00::405

🇸🇬 185.200.116.86

🇪🇨 181.113.113.182

🇻🇳 171.244.14.96

🇫🇷 169.58.43.177

🇺🇸 165.154.218.226

🇺🇸 154.58.229.44

🇰🇷 125.138.166.217