JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.222.149.65

18.222.149.65 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 60%: ?

60%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-222-149-65.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.222.149.65

Whois 18.222.149.65

IP Abuse Reports for 18.222.149.65:

This IP address has been reported a total of 14 times from 12 distinct sources. 18.222.149.65 was first reported on June 28th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 chronos	2026-06-29 06:54:30 (1 week ago)	[AUTORAVALT][[29/06/2026 - 03:54:29 -03:00 UTC] Attack from [Amazon Technologies Inc.] [18.222.149.6 ... show more [AUTORAVALT][[29/06/2026 - 03:54:29 -03:00 UTC] Attack from [Amazon Technologies Inc.] [18.222.149.65][ec2-18-222-149-65.us-east-2.compute.amazonaws.com] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> C] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-06-28 17:06:02 (1 week ago)	Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [ice01]	Hacking Bad Web Bot
🇬🇧 thetomtaylor.co.uk	2026-06-28 16:07:02 (1 week ago)	Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [wa01,wa02]	Hacking Bad Web Bot
Anonymous	2026-06-28 15:33:59 (1 week ago)	18.222.149.65 - - [28/Jun/2026:15:28:21 +0000] "GET / HTTP/1.1" 400 666 "-" "visionheight.com/scan M ... show more 18.222.149.65 - - [28/Jun/2026:15:28:21 +0000] "GET / HTTP/1.1" 400 666 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 18.222.149.65 - - [28/Jun/2026:15:28:31 +0000] "GET / HTTP/1.1" 400 666 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 18.222.149.65 - - [28/Jun/2026:15:33:58 +0000] "" 400 0 "-" "-" ... show less	Brute-Force
🇺🇸 kuj	2026-06-28 15:30:17 (1 week ago)	2026-06-28T09:26:27.778231-06:00 derp derper[226735]: 2026/06/28 09:26:27 http: TLS handshake error ... show more 2026-06-28T09:26:27.778231-06:00 derp derper[226735]: 2026/06/28 09:26:27 http: TLS handshake error from 18.222.149.65:42332: client sent an HTTP request to an HTTPS server 2026-06-28T09:27:36.956318-06:00 derp derper[226735]: 2026/06/28 09:27:36 http: TLS handshake error from 18.222.149.65:54590: client sent an HTTP request to an HTTPS server 2026-06-28T09:30:16.809671-06:00 derp derper[226735]: 2026/06/28 09:30:16 http: TLS handshake error from 18.222.149.65:16404: unexpected EOF ... show less	Port Scan Brute-Force
🇵🇱 tkhaldi	2026-06-28 15:29:50 (1 week ago)	::ffff:18.222.149.65 - - [28/Jun/2026:15:26:18 +0000] "GET / HTTP/1.1" 400 650 "-" "visionheight.com ... show more ::ffff:18.222.149.65 - - [28/Jun/2026:15:26:18 +0000] "GET / HTTP/1.1" 400 650 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" ::ffff:18.222.149.65 - - [28/Jun/2026:15:27:31 +0000] "GET / HTTP/1.1" 400 650 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" ::ffff:18.222.149.65 - - [28/Jun/2026:15:29:49 +0000] "" 400 0 "-" "-" ... show less	Web App Attack
🇺🇸 Starburst SysOp Team	2026-06-28 15:28:19 (1 week ago)	Request Missing a Host Header. Operator EQ matched 0 at REQUEST_HEADERS. (920280-mnz6-1)	Hacking
Anonymous	2026-06-28 15:27:51 (1 week ago)	Honeypot hit: HTTP/1.1 request on 2086 GET / User-Agent: visionheight.com/scan Mozilla/5.0 (Macinto ... show more Honeypot hit: HTTP/1.1 request on 2086 GET / User-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip; 2086 [5] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇩🇪 bescared	2026-06-28 15:27:28 (1 week ago)	F2B - Malicious activity detected. URL Probing. -151302cd-	Hacking Bad Web Bot Web App Attack
🇨🇳 Peter Yu	2026-06-28 15:27:09 (1 week ago)		Bad Web Bot Web App Attack
🇺🇸 chronos	2026-06-28 15:26:43 (1 week ago)	[AUTORAVALT][[28/06/2026 - 12:26:43 -03:00 UTC] Attack from [Amazon Technologies Inc.] [18.222.149.6 ... show more [AUTORAVALT][[28/06/2026 - 12:26:43 -03:00 UTC] Attack from [Amazon Technologies Inc.] [18.222.149.65][ec2-18-222-149-65.us-east-2.compute.amazonaws.com] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> C] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
Anonymous	2026-06-28 15:26:39 (1 week ago)		DNS Compromise DDoS Attack
🇺🇸 drewf.ink	2026-06-28 15:26:35 (1 week ago)	[15:26] Port scanning. Port(s) scanned: TCP/2086	Port Scan
🇺🇸 www.winos.me	2026-06-28 15:25:09 (1 week ago)	Shield: Layer4 Port 9 Trap	Port Scan Hacking

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.215.239.210

🇩🇪 161.35.74.94

🇷🇴 80.94.95.242

🇧🇷 187.35.53.118

🇷🇺 178.46.128.225

🇺🇸 66.132.172.140

🇳🇱 45.148.10.151

🇸🇪 2a05:d016:268:8b01:d7b2:7ee4:377f:a062

🇰🇷 218.149.228.144

🇺🇸 216.24.210.116

🇲🇾 208.84.103.212

🇧🇷 177.135.223.123

🇨🇦 142.179.117.177

🇧🇷 45.174.162.68

🇨🇦 20.104.88.1

🇯🇵 20.48.32.28

🇧🇬 185.253.159.248

🇳🇱 176.65.148.185

🇨🇳 123.233.236.113

🇧🇪 104.155.7.115