18.226.200.98
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Amazon Technologies Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS16509
- Hostname(s)
- ec2-18-226-200-98.us-east-2.compute.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇺🇸 United States of America
- City
- Columbus, Ohio
No reports in the last 60 days
18.226.200.98 has been reported 19 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
19 from
16 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇪🇸 masterguru |
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:User-Agent. (1100000-122)
|
Bad Web Bot | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-03-05.
|
Web App Attack SSH Hacking | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: >3000 req/min op 2026-03-05
|
Web App Attack SSH Hacking | |
| 🇳🇿 Antinson |
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
|
Bad Web Bot | |
| 🇩🇪 Viveronese |
HTTP vulnerability scanning
|
Web App Attack | |
| 🇫🇷 masterguru |
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
|
Hacking Web App Attack | |
| 🇺🇸 conrad10781 |
nginx-dot-env
|
Web App Attack | |
| 🇨🇦 polycoda |
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based)
|
Hacking Web App Attack | |
| 🇬🇧 Aetherweb Ark |
(mod_security) mod_security (id:949110) triggered by 18.226.200.98 (US/United States/ec2-18-226-200-98.us-east-2.compute.amazonaws.com): N in the last X secs
|
Web App Attack | |
| 🇫🇷 masterguru |
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
|
Hacking Web App Attack | |
| 🇩🇪 paissangroup |
Multiple WAF Violations
|
Web App Attack | |
| 🇩🇪 Bedios GmbH |
Login credentials theft attempt
|
Hacking | |
| Anonymous |
Multiple web server 400 error codes from same source ip
|
Web App Attack | |
| 🇫🇷 Quarks Solutions |
crowdsecurity/appsec-vpatch
|
Web App Attack | |
| 🇺🇸 myagent.site |
Blocking for trying to access an exploit file: /.env
|
Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown