18.227.216.48
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Amazon Technologies Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS16509
- Hostname(s)
- ec2-18-227-216-48.us-east-2.compute.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇺🇸 United States of America
- City
- Columbus, Ohio
Abuse Reports
Total reports
22 from
18 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 micropedro |
3 incidents: web scanning/attack. First: 2026-11-06 02:02, Last: 2026-11-12 19:44 UTC. Triggers: nginx-botsearch,unknown.
|
Port Scan Bad Web Bot Web App Attack | |
| Anonymous |
IP banned by Fail2Ban in jail nginx-abusive-ips
|
Web App Attack Brute-Force Bad Web Bot | |
| 🇺🇸 jkhorvath |
Request for URL /webmail
|
Phishing Brute-Force Web App Attack | |
| 🇩🇪 Vegascosmetics |
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 75>=65, Abuse 80, NonEU, first-seen)
|
Hacking Exploited Host Web App Attack | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 80)
Source port: 57801
TTL: 116
Packet length: 52
TOS: 0x0A
This report (for 18.227.216.48) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Web App Attack | |
| 🇫🇷 uthul |
T-Pot honeypot: 55 hits on ports [80, 443] (automated)
|
Port Scan Web App Attack | |
| 🇩🇪 iNetWorker |
trolling for resource vulnerabilities
|
Web App Attack | |
| 🇬🇧 seniorlinuxadmin |
18.227.216.48 - - [06/Nov/2026:14:48:22 +0000] "GET /webmail HTTP/1.1" 404 158 "-" "Authorized-Webmail-Page-Check/1.0"
|
Port Scan Web App Attack | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 443)
Source port: 53244
TTL: 122
Packet length: 52
TOS: 0x02
This report (for 18.227.216.48) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Web App Attack | |
| 🇨🇿 Prcek |
PortScan:HOST=18.227.216.48,DPORTS=80,443
|
Port Scan | |
| 🇺🇸 NXTwoThou |
Http scans of mail domains
|
Port Scan | |
| Anonymous |
Inbound persistent TCP probe dropped on port 443. Evidence: [589399.040275] Log_WAN_Probes: IN=pppoe-wan OUT= MAC= SRC=18.227.216.48 LEN=52 TOS=0x00 PREC=0x00 TTL=120 ID=11302 DF PROTO=TCP SPT=56048 DPT=443 WIN
|
Port Scan | |
| 🇫🇷 solution.it |
[Fri Nov 06 06:11:43.371187 2026] [authz_core:error] [pid 2412706:tid 2412706] [client 18.227.216.48:53373] AH01630: client denied by server configuration: /var/lib/roundcube/
|
Brute-Force | |
| 🇦🇺 FireGuard Server |
Blocked by os-abuseipdb; 9 hits, proto=tcp, ports=80
|
Port Scan Hacking | |
| 🇩🇪 LRob |
Not following 301 redirects — wasted requests | method: GET | path: /webmail | ua: Authorized-Webmail-Page-Check/1.0
|
Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown