AbuseIPDB » 18.230.85.242

18.230.85.242 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 0%: ?

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	ec2-18-230-85-242.sa-east-1.compute.amazonaws.com
Domain Name	amazon.com
Country	Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 18.230.85.242

Whois 18.230.85.242

IP Abuse Reports for 18.230.85.242:

This IP address has been reported a total of 49 times from 32 distinct sources. 18.230.85.242 was first reported on July 15th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ThreatBook.io	2024-07-26 22:05:29 (2 months ago)	ThreatBook Intelligence: Edu,Zombie more details on https://threatbook.io/ip/18.230.85.242	Brute-Force
Anonymous	2024-07-25 03:47:49 (2 months ago)	Drop from IP address 18.230.85.242 to tcp-port 23	Port Scan
RAP	2024-07-25 02:15:44 (2 months ago)	2024-07-25 02:15:44 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
MPL	2024-07-25 02:03:14 (2 months ago)	tcp/23	Port Scan
urnilxfgbez	2024-07-24 22:45:00 (2 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
geddo.in	2024-07-24 22:14:49 (2 months ago)	Jul 24 16:13:33 mortgagebase xinetd[742]: START: telnet pid=2574 from=::ffff:18.230.85.242 Jul ... show moreJul 24 16:13:33 mortgagebase xinetd[742]: START: telnet pid=2574 from=::ffff:18.230.85.242 Jul 24 16:14:09 mortgagebase login[2582]: FAILED LOGIN (1) on '/dev/pts/1' from 'ec2-18-230-85-242.sa-east-1.compute.amazonaws.com' FOR 'root', Authentication failure Jul 24 16:14:11 mortgagebase xinetd[742]: START: telnet pid=2583 from=::ffff:18.230.85.242 Jul 24 16:14:47 mortgagebase login[2585]: FAILED LOGIN (1) on '/dev/pts/1' from 'ec2-18-230-85-242.sa-east-1.compute.amazonaws.com' FOR 'root', Authentication failure ... show less	Brute-Force
RAP	2024-07-24 09:58:54 (2 months ago)	2024-07-24 09:58:54 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
MPL	2024-07-24 04:52:18 (2 months ago)	tcp/23	Port Scan
RAP	2024-07-23 22:48:03 (2 months ago)	2024-07-23 22:48:03 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
FEWA	2024-07-22 19:18:06 (2 months ago)	Fail2Ban Ban Triggered	Hacking Brute-Force
suble.org	2024-07-22 13:49:21 (2 months ago)	Jul 22 15:48:35 swsrv sshd[159759]: Invalid user installer from 18.230.85.242 port 60262 Jul 2 ... show moreJul 22 15:48:35 swsrv sshd[159759]: Invalid user installer from 18.230.85.242 port 60262 Jul 22 15:48:49 swsrv sshd[159761]: User root from 18.230.85.242 not allowed because not listed in AllowUsers Jul 22 15:49:04 swsrv sshd[159763]: Invalid user sFTPUser from 18.230.85.242 port 37538 Jul 22 15:49:19 swsrv sshd[159765]: User root from 18.230.85.242 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
paradoxnetworks	2024-07-22 08:24:31 (2 months ago)	2024-07-22T08:23:38.773183+00:00 edge-noc-mci01.int.pdx.net.uk sshd[234774]: Invalid user sysroot fr ... show more2024-07-22T08:23:38.773183+00:00 edge-noc-mci01.int.pdx.net.uk sshd[234774]: Invalid user sysroot from 18.230.85.242 port 41086 2024-07-22T08:24:12.420009+00:00 edge-noc-mci01.int.pdx.net.uk sshd[234806]: Invalid user centos from 18.230.85.242 port 44914 2024-07-22T08:24:30.647968+00:00 edge-noc-mci01.int.pdx.net.uk sshd[234895]: Invalid user rustserver from 18.230.85.242 port 55838 ... show less	Brute-Force SSH
Hirte	2024-07-22 08:02:55 (2 months ago)	HHV-W: TCP-Scanner. Port: 23	Port Scan
ThreatBook.io	2024-07-21 22:03:49 (2 months ago)	ThreatBook Intelligence: Edu,Zombie more details on https://threatbook.io/ip/18.230.85.242	SSH
MPL	2024-07-21 18:01:10 (2 months ago)	tcp/23	Port Scan