JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.97.19.207

18.97.19.207 was found in our database!

This IP was reported 228 times. Confidence of Abuse is 66%: ?

66%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	scanner-18-97-19-207.reposify.net
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.97.19.207

Whois 18.97.19.207

IP Abuse Reports for 18.97.19.207:

This IP address has been reported a total of 228 times from 84 distinct sources. 18.97.19.207 was first reported on July 11th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-06-14 02:56:30 (2 days ago)	[02:56] Port scanning. Port(s) scanned: TCP/8080	Port Scan
🇦🇺 dyln	2026-06-12 06:03:52 (4 days ago)	Dyls honeypot brute-force: SMB (1 total hits)	Brute-Force
Anonymous	2026-06-09 15:00:12 (6 days ago)	2026-06-09T15:00:11.785923+00:00 UnitedStates1 sshd-session[3886147]: Unable to negotiate with 18.97 ... show more 2026-06-09T15:00:11.785923+00:00 UnitedStates1 sshd-session[3886147]: Unable to negotiate with 18.97.19.207 port 41376: no matching cipher found. Their offer: aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,3des-cbc [preauth] 2026-06-09T15:00:11.909472+00:00 UnitedStates1 sshd-session[3886149]: Connection closed by 18.97.19.207 port 41382 [preauth] ... show less	Brute-Force SSH
Anonymous	2026-06-08 15:55:35 (1 week ago)	Tried our host z.	Port Scan Hacking Exploited Host
Anonymous	2026-06-06 09:52:13 (1 week ago)	Reported from Nginx log analysis 16. Log: 18.97.19.207 - - [06/Jun/2026:xx:xx:xx 0200] "GET / HTTP/ ... show more Reported from Nginx log analysis 16. Log: 18.97.19.207 - - [06/Jun/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/52.0.3049.80 Safari/537.32" "-" "US United States Ashburn" "AS14618" "Amazon.com, Inc." show less	Port Scan Brute-Force SSH
🇩🇪 Justin F. \| AS204464	2026-06-06 03:52:37 (1 week ago)	Honeypot [nx-infrastructure]: HTTP request on 5601	Hacking Bad Web Bot
🇫🇷 Kraften	2026-06-05 17:13:18 (1 week ago)	Dovecot imap-login ...	DDoS Attack Brute-Force
🇧🇬 MazenHost	2026-06-04 14:15:14 (1 week ago)	1780582513 - 06/04/2026 17:15:13 Host: 18.97.19.207/18.97.19.207 Port: 143 TCP Blocked ...	Port Scan
🇩🇪 dispaisyenterprises	2026-06-04 06:17:00 (1 week ago)	Honeypot [fra-de-honeypot]: HTTP request on 50035	Hacking Bad Web Bot
🇺🇸 donarev419	2026-06-03 00:00:45 (1 week ago)	Connection to port 8880 with data transfer. Data preview: GET / HTTP/1.1 Host: 198.23.188.201:8880 ... show more Connection to port 8880 with data transfer. Data preview: GET / HTTP/1.1 Host: 198.23.188.201:8880 User-Agent: Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKi show less	Port Scan Hacking
🇳🇱 stom	2026-06-02 19:45:25 (1 week ago)	2026-06-02T19:45:22.886324 socky.stom66.co.uk proftpd[1954522]: session[1954522] 5.79.80.26 (18.97.1 ... show more 2026-06-02T19:45:22.886324 socky.stom66.co.uk proftpd[1954522]: session[1954522] 5.79.80.26 (18.97.19.207[18.97.19.207]): USER anonymous: no such user found from 18.97.19.207 [18.97.19.207] to ::ffff:5.79.80.26:21 ... show less	Brute-Force FTP Brute-Force
🇸🇬 drewf.ink	2026-05-14 00:18:29 (1 month ago)	[00:18] Port scanning. Port(s) scanned: TCP/25	Port Scan
🇩🇪 ghostwarriors	2026-05-13 02:20:14 (1 month ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 dispaisyenterprises	2026-05-10 08:57:45 (1 month ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 50060 GET / User-Agent: Mozilla/5.0 (Windows NT 6.2 ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 50060 GET / User-Agent: Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/60.0.3086.53 Safari/537.32 Accept: application/json, text/plain, /; q=0.01 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br; 50060 [8] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇩🇪 dispaisyenterprises	2026-05-09 22:05:50 (1 month ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 9090 GET / User-Agent: Mozilla/5.0 (Windows NT 6.2; ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 9090 GET / User-Agent: Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/55.0.3051.83 Safari/537.32 Accept: / Accept-Encoding: gzip, deflate; 9090 [7] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot

Showing 1 to 15 of 228 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇬 154.180.139.20

🇮🇹 88.147.30.59

🇳🇱 31.14.32.8

🇲🇽 187.191.48.5

🇷🇺 176.106.133.179

🇩🇪 172.71.172.144

🇺🇸 145.132.102.56

🇯🇵 111.238.174.6

🇨🇳 111.26.106.117

🇵🇹 89.153.125.230

🇨🇿 86.49.35.27

🇨🇿 78.44.192.210

🇳🇱 45.148.10.157

🇰🇷 34.64.137.136

🇨🇦 24.225.149.53

🇦🇺 20.211.166.200

🇫🇷 13.140.175.178

🇮🇷 2.180.74.209

🇷🇴 2.57.122.177

🇵🇰 202.66.180.242