JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.221.31.244

18.221.31.244 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-221-31-244.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.221.31.244

Whois 18.221.31.244

IP Abuse Reports for 18.221.31.244:

This IP address has been reported a total of 65 times from 63 distinct sources. 18.221.31.244 was first reported on June 13th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 EnthecSolutions	2026-06-13 14:01:18 (3 days ago)	Detected by Enthec Solutions. \| Attempts: 26 in 24h \| Target port: 25	Email Spam Brute-Force
🇩🇪 IP Analyzer	2026-06-13 13:30:09 (3 days ago)	Unauthorized connection attempt from IP address 18.221.31.244 on Port 587(SMTP-MSA)	Port Scan
🇺🇸 drewf.ink	2026-06-13 13:21:37 (3 days ago)	[13:21] Port scanning. Port(s) scanned: TCP/1080	Port Scan
🇧🇷 somosbr	2026-06-13 13:20:51 (3 days ago)	[2026-06-13T13:20:51Z] Unsolicited scan from 18.221.31.244 to port 1080/tcp	Port Scan
🇩🇪 HoneyPot-FrPri	2026-06-13 13:20:50 (3 days ago)	1781356849 - 06/13/2026 15:20:49 Host: 18.221.31.244/18.221.31.244 Port: 635 TCP Blocked ...	Port Scan
🇩🇪 Justin F. \| AS204464	2026-06-13 13:20:42 (3 days ago)	Honeypot [nx-infrastructure]: Unauthorized traffic on 27017/mongod Reported by: Justin F.	Port Scan
🇺🇸 Xarcotic	2026-06-13 13:20:25 (3 days ago)	SSH login on honeypot.	Brute-Force SSH
🇨🇦 Luhte	2026-06-13 13:20:17 (3 days ago)	Unsolicited TCP connection from 18.221.31.244 to port 0 at 2026-06-13T13:20:17Z. Source IP completed ... show more Unsolicited TCP connection from 18.221.31.244 to port 0 at 2026-06-13T13:20:17Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇦🇺 LiftUp Hosting	2026-06-13 13:16:02 (3 days ago)	Honeypot hit: HTTP/1.1 request on 8002 GET / User-Agent: visionheight.com/scan Mozilla/5.0 (Macinto ... show more Honeypot hit: HTTP/1.1 request on 8002 GET / User-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip; 8002 [4], 8999 [4] TCP show less	Hacking Bad Web Bot
🇫🇷 Thomas Basset	2026-06-13 13:15:55 (3 days ago)	Jun 13 15:12:27 ns0 postfix/smtpd[2165322]: improper command pipelining after CONNECT from ec2-18-22 ... show more Jun 13 15:12:27 ns0 postfix/smtpd[2165322]: improper command pipelining after CONNECT from ec2-18-221-31-244.us-east-2.compute.amazonaws.com[18.221.31.244]: \n Jun 13 15:12:27 ns0 postfix/smtpd[2164509]: improper command pipelining after CONNECT from ec2-18-221-31-244.us-east-2.compute.amazonaws.com[18.221.31.244]: GET / HTTP/1.1\r\nHost: 78.194.209.98:587\r\nUser-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; I Jun 13 15:15:55 ns0 postfix/smtpd[2165322]: improper command pipelining after CONNECT from ec2-18-221-31-244.us-east-2.compute.amazonaws.com[18.221.31.244]: \026\003\001\000\356\001\000\000\352\003\003\001W\024\313\2337\331\243\032\256\217\207S\257.\177\220\264\350}\325\251\t&\310\203w4k-4\367 aE A\317\004\276\|\367\251(\203\337\316,ZUTTJ4\2211\306/:\2561^\246\342\363\000&\314\250\314\251\300/\3000\300+\300,\300\023\300\t\300\024\300\n\000\234 ... show less	Brute-Force
🇺🇸 Runlevel0	2026-06-13 13:15:11 (3 days ago)	Too many failed attempts / attacks from 18.221.31.244	Brute-Force Port Scan Email Spam
🇧🇬 geddo.in	2026-06-13 13:15:07 (3 days ago)	2026-06-13 07:11:43 SMTP protocol synchronization error (input sent without waiting for greeting): r ... show more 2026-06-13 07:11:43 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=ec2-18-221-31-244.us-east-2.compute.amazonaws.com [18.221.31.244] input="\n" 2026-06-13 07:11:45 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=ec2-18-221-31-244.us-east-2.compute.amazonaws.com [18.221.31.244] input="GET / HTTP/1.1\r\nHost: 78.128.127" 2026-06-13 07:13:09 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=ec2-18-221-31-244.us-east-2.compute.amazonaws.com [18.221.31.244] input="GET / HTTP/1.1\r\nHost: 78.128.127" 2026-06-13 07:13:53 SMTP call from ec2-18-221-31-244.us-east-2.compute.amazonaws.com [18.221.31.244] dropped: too many syntax or protocol errors (last command was "?") 2026-06-13 07:15:06 SMTP call from ec2-18-221-31-244.us-east-2.compute.amazonaws.com [18.221.31.244] dropped: too many syntax or protocol errors (last command ... show less	Brute-Force
🇮🇸 www.fransveldman.world	2026-06-13 13:15:04 (3 days ago)	Jun 13 13:12:30 ice2 postfix/submission/smtpd[2141913]: lost connection after CONNECT from ec2-18-22 ... show more Jun 13 13:12:30 ice2 postfix/submission/smtpd[2141913]: lost connection after CONNECT from ec2-18-221-31-244.us-east-2.compute.amazonaws.com[18.221.31.244] Jun 13 13:15:03 ice2 postfix/submission/smtpd[2141913]: lost connection after UNKNOWN from ec2-18-221-31-244.us-east-2.compute.amazonaws.com[18.221.31.244] ... show less	Brute-Force Email Spam
🇨🇭 4server	2026-06-13 13:14:48 (3 days ago)	2026-06-1315:13:21SMTPcallfromec2-18-221-31-244.us-east-2.compute.amazonaws.com[18.221.31.244]:61990 ... show more 2026-06-1315:13:21SMTPcallfromec2-18-221-31-244.us-east-2.compute.amazonaws.com[18.221.31.244]:61990dropped:toomanysyntaxorprotocolerrors\(lastcommandwas\"\?\"\,NULL\)2026-06-1315:13:28SMTPcallfromec2-18-221-31-244.us-east-2.compute.amazonaws.com[18.221.31.244]:26130dropped:toomanysyntaxorprotocolerrors\(lastcommandwas\"\\023\\003\\023\\001\\023\\002\\001\?\?\\215\?\\005\?\\005\\001\?\?\?\?\?\"\,NULL\)2026-06-1315:14:19SMTPcallfromec2-18-221-31-244.us-east-2.compute.amazonaws.com[18.221.31.244]:48568dropped:toomanysyntaxorprotocolerrors\(lastcommandwas\"\?\"\,NULL\)2026-06-1315:14:33SMTPcallfromec2-18-221-31-244.us-east-2.compute.amazonaws.com[18.221.31.244]:39194dropped:toomanysyntaxorprotocolerrors\(lastcommandwas\"\?\"\,NULL\)2026-06-1315:14:43SMTPcallfromec2-18-221-31-244.us-east-2.compute.amazonaws.com[18.221.31.244]:28406dropped:toomanysyntaxorprotocolerrors\(lastcommandwas\"\?\"\,NULL\) show less	Hacking Web App Attack
🇨🇿 sweet_acid	2026-06-13 13:14:27 (3 days ago)	Local mail evidence: family=mail_proto_abuse; ref=mail_goblin.	Port Scan

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 45.82.76.123

🇯🇵 212.32.76.54

🇸🇪 171.25.158.68

🇺🇸 161.153.21.88

🇰🇷 61.84.211.107

🇳🇱 45.148.10.141

🇯🇵 20.27.90.112

🇭🇰 2.27.133.179

🇹🇼 202.39.153.245

🇳🇱 185.93.89.132

🇯🇵 152.69.204.160

🇺🇸 95.164.235.48

🇭🇰 47.239.91.184

🇨🇳 36.250.104.91

🇺🇸 23.95.62.90

🇳🇱 193.176.31.223

🇮🇹 151.5.191.130

🇮🇶 65.20.205.120

🇹🇷 31.145.131.202

🇨🇳 223.167.75.86