50.18.72.184

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
59% Elevated
13 reports
13 reporters · latest 1 week ago
ISP
Amazon.com, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-50-18-72-184.us-west-1.compute.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸 United States of America
City
San Jose, California
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
13 from 13 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 3 🇧🇷 Brazil 2 🇩🇪 Germany 2
Most common categories Web App Attack 8 Hacking 4 Brute-Force 3 Bad Web Bot 2 SQL Injection 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 service Informatique
HEAD /epa/scripts
Web App Attack
Anonymous
Web application attack detected.
Web App Attack
Anonymous
Fail2ban Nginx log integration.
Brute-Force SSH Port Scan
Anonymous
Automated vulnerability scanning.
Hacking
🇫🇮 payincog
Date: Nov 02 21:17:59 2026 EAT | Reported IP: 50.18.72.184 mod_security | id: 920350 | US/pay.zagaavipato.com/- | Connections: 1 | Blocked: Permanent Block: [LF_MODSEC] | Logs: ; Host header is a numeric IP address
SQL Injection Brute-Force Bad Web Bot
🇺🇸 scharsey
Honeypot: 1 HTTP events, 1 HTTP paths probed
Web App Attack
🇺🇸 www.winos.me
Shield: Layer4 Port 9 Trap
Port Scan Hacking
🇧🇷 diego
[rede-188] 2026-11-02 17:27:48, Client: 50.18.72.184, Protocol: 6, Unauthorized activity to HTTP: HEAD /epa/scripts/win/nsepa_setup.exe
Web App Attack
🇦🇺 2000cn.com.au
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack Hacking
🇸🇪 Juha Jurvanen
Blocked by Scantide Guard on custom:ce9a4bb4dda8493eb1dcc4b93e3487ab. Rule: 5 event(s) in correlation window.
Brute-Force
🇺🇸 aks4226
Attacking common web applications. (n01)
Web App Attack
🇩🇪 lumbermatt_de
Vulnerability exploit attack detected
Web App Attack
🇩🇪 Mr-Money
50.18.72.184 - - [02/Nov/2026:17:08:19 +0100] "HEAD /epa/scripts/win/nsepa_setup.exe HTTP/1.1" 404 4589 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36" ...
Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 185.247.137.178
🇮🇳 182.77.79.194
🇳🇱 176.65.148.51
🇨🇳 171.220.244.134
🇻🇳 116.99.169.249
🇮🇳 116.73.252.17
🇵🇱 104.28.165.102
🇵🇱 104.28.165.65
🇵🇱 104.28.156.42
🇵🇱 104.28.156.40
🇧🇩 103.41.245.130
🇲🇦 102.96.226.11
🇺🇦 91.102.177.79
🇧🇬 79.124.59.78
🇩🇪 3.79.134.69
🇬🇧 193.163.125.240
🇵🇾 190.104.190.54
🇳🇱 172.233.62.80
🇺🇸 162.216.150.12
🇵🇱 162.158.172.167
feedback