JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.246.159.3

18.246.159.3 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-246-159-3.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.246.159.3

Whois 18.246.159.3

IP Abuse Reports for 18.246.159.3:

This IP address has been reported a total of 37 times from 29 distinct sources. 18.246.159.3 was first reported on June 10th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TNZ	2026-06-17 01:24:28 (5 days ago)	Automated honeypot: ua_inconsistency \| Path: / \| ISP: AS16509 Amazon.com, Inc. \| ASN: AS16509 Amazon ... show more Automated honeypot: ua_inconsistency \| Path: / \| ISP: AS16509 Amazon.com, Inc. \| ASN: AS16509 Amazon.com, Inc. [HOSTING] \| Abuse score: 100 \| Open ports: [] \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like show less	Web App Attack
🇺🇸 dpinse	2026-06-16 22:56:34 (5 days ago)	Malicious activity detected from 16509 Amazon.com, Inc. (GET HTTP/1.1 /) @ 2026-06-16T22:56:34Z	Brute-Force
🇫🇷 mrcrassi	2026-06-16 21:16:24 (5 days ago)	Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET ... show more Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇮 wpwoodo	2026-06-16 12:09:08 (5 days ago)	Webpage crawler	Bad Web Bot
Anonymous	2026-06-16 11:50:46 (5 days ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
Anonymous	2026-06-16 09:17:41 (6 days ago)	FortiWeb WAF: 3536 attacks detected. Threat Score: 1409600. Types: Client Management(1768), Block IP ... show more FortiWeb WAF: 3536 attacks detected. Threat Score: 1409600. Types: Client Management(1768), Block IP List(1768). Origin: United States. show less	Web App Attack
🇩🇪 bescared	2026-06-16 04:50:29 (6 days ago)	F2B - Malicious activity detected. Too many 403. -8ff06ede-	Bad Web Bot Web App Attack
🇩🇪 AetherFox	2026-06-16 01:41:36 (6 days ago)	AetherFox VoidGuard detected: [Tue Jun 16 01:41:33.595090 2026] [authz_core:error] [pid 798886:tid 7 ... show more AetherFox VoidGuard detected: [Tue Jun 16 01:41:33.595090 2026] [authz_core:error] [pid 798886:tid 798892] [client 18.246.159.3:49115] AH01630: client denied by server configuration: proxy:http://[MASKED]/ [Tue Jun 16 01:41:33.595348 2026] [authz_core:error] [pid 798886:tid 798892] [client 18.246.159.3:49115] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Tue Jun 16 01:41:34.112494 2026] [authz_core:error] [pid 798887:tid 798921] [client 18.246.159.3:30439] AH01630: client denied by server configuration: proxy:https://[MASKED]/ [Tue Jun 16 01:41:35.976348 2026] [authz_core:error] [pid 798887:tid 798922] [client 18.246.159.3:65512] AH01630: client denied by server configuration: proxy:https://[MASKED]/ [Tue Jun 16 01:41:35.450991 2026] [authz_core:error] [pid 798886:tid 798932] [client 18.246.159.3:49115] AH01630: client denied by server configuration: proxy:http://[MASKED]/ ... show less	Bad Web Bot Web App Attack
🇺🇸 Vianpyro	2026-06-15 20:04:07 (6 days ago)	Honeypot: 12 request(s) in 0 min. Paths: /. Method(s): GET. UA: Mozilla/5.0 (Macintosh; Intel Mac OS ... show more Honeypot: 12 request(s) in 0 min. Paths: /. Method(s): GET. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like . ASN: 16509 (Amazon.com, Inc.). show less	Web App Attack Bad Web Bot
🇺🇸 NXTwoThou	2026-06-15 17:43:00 (6 days ago)		Port Scan
🇩🇪 David Ferneding	2026-06-15 13:56:03 (6 days ago)	Blocked by UFW (TCP on 80) Source port: 14306 TTL: 56 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 14306 TTL: 56 Packet length: 60 TOS: 0x00 This report (for 18.246.159.3) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Anonymous	2026-06-15 10:57:02 (6 days ago)	Unauthorized SSH login attempts	Brute-Force SSH
Anonymous	2026-06-15 09:17:37 (1 week ago)	FortiWeb WAF: 4904 attacks detected. Threat Score: 1438400. Types: Client Management(2452), Block IP ... show more FortiWeb WAF: 4904 attacks detected. Threat Score: 1438400. Types: Client Management(2452), Block IP List(2452). Origin: United States. show less	Web App Attack
🇧🇪 cmbplf	2026-06-14 20:04:56 (1 week ago)	2.136 requests from abuseipdb.com blacklisted IP (10mos2w1d)	Brute-Force Bad Web Bot
Anonymous	2026-06-14 13:35:12 (1 week ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.228.128.204

🇳🇱 195.178.110.30

🇪🇬 62.193.91.121

🇳🇴 185.12.59.118

🇨🇳 117.187.127.135

🇨🇳 117.156.118.210

🇺🇸 107.167.34.125

🇧🇷 177.87.28.127

🇺🇸 170.187.165.139

🇮🇹 83.229.8.197

🇺🇸 52.168.141.47

🇺🇦 45.11.57.172

🇸🇬 8.219.94.183

🇻🇳 2402:800:620f:2646:296f:f73b:e63b:ff52

🇰🇷 175.198.62.180

🇭🇰 152.32.214.226

🇺🇸 152.32.207.21

🇸🇦 37.125.171.46

🇧🇪 198.235.24.232

🇺🇸 195.184.76.176