JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.206.124.95

18.206.124.95 was found in our database!

This IP was reported 588 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-18-206-124-95.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.206.124.95

Whois 18.206.124.95

IP Abuse Reports for 18.206.124.95:

This IP address has been reported a total of 588 times from 231 distinct sources. 18.206.124.95 was first reported on July 1st 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Ilop	2026-09-16 04:00:55 (5 hours ago)	[hp-100] 3 unsolicited packets to honeypot ports 11443 (OCI DShield sensor)	Port Scan
🇫🇷 Hiigara	2026-09-15 22:00:59 (11 hours ago)	connection attempt : 18.206.124.95 on port : tcp/22 (SSH)	Port Scan
🇫🇮 mnazibo	2026-09-15 21:15:03 (11 hours ago)	Date: Sep 16 00:09:17 2026 EAT \| Reported IP: 18.206.124.95 mod_security \| id: 920350 \| US/usernamea ... show more Date: Sep 16 00:09:17 2026 EAT \| Reported IP: 18.206.124.95 mod_security \| id: 920350 \| US/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address show less	SQL Injection Brute-Force Bad Web Bot
🇧🇷 diego	2026-09-15 05:55:32 (1 day ago)	[rede-44-49] 09/15/2026-02:55:32.047964, 18.206.124.95, Protocol: 6, ET CINS Active Threat Intellige ... show more [rede-44-49] 09/15/2026-02:55:32.047964, 18.206.124.95, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 18 show less	Hacking
🇦🇹 Pingger Shikkoken	2026-09-15 03:25:50 (1 day ago)	2026-09-15T03:25:50+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-09-15T03:25:50+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=18.206.124.95 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=118 ID=39611 DF PROTO=TCP SPT=45630 DPT=12443 WINDOW=62727 RES=0x00 SYN URGP=0 2026-09-15T03:25:51+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=18.206.124.95 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=118 ID=39612 DF PROTO=TCP SPT=45630 DPT=12443 WINDOW=62727 RES=0x00 SYN URGP=0 2026-09-15T03:25:53+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=18.206.124.95 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=118 ID=39613 DF PROTO=TCP SPT=45630 DPT=12443 WINDOW=62727 RES=0x00 SYN URGP=0 show less	Hacking
🇫🇮 6kilowatti	2026-09-14 20:22:51 (1 day ago)	2026-09-14T23:22:50.796898+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-09-14T23:22:50.796898+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=18.206.124.95 DST=83.148.240.21 LEN=60 TOS=0x00 PREC=0x00 TTL=115 ID=6331 DF PROTO=TCP SPT=61002 DPT=11443 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-09-14 20:16:47 (1 day ago)	Drop from IP address 18.206.124.95 to tcp-port 1245	Port Scan
🇺🇸 MPL	2026-09-14 18:54:02 (1 day ago)	tcp/9200 (3 or more attempts)	Port Scan
🇧🇷 NOCVIU	2026-09-14 17:00:30 (1 day ago)	Honeypot/Firewall detectou varredura não solicitada ou brute-force Inbound nas portas: 9443. Total d ... show more Honeypot/Firewall detectou varredura não solicitada ou brute-force Inbound nas portas: 9443. Total de conexões droppadas: 3. show less	Port Scan Hacking
🇺🇸 donarev419	2026-09-14 05:11:46 (2 days ago)	Connection to port 1244 with data transfer. Data preview: GET / HTTP/1.1 Host: 167.253.66.144:1244 ... show more Connection to port 1244 with data transfer. Data preview: GET / HTTP/1.1 Host: 167.253.66.144:1244 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) App show less	Port Scan Hacking
Anonymous	2026-09-14 04:23:07 (2 days ago)	Blocked by firewall on hugin [8443/tcp] \| Rule: AbuseIPDB \| SPT: 28766 \| TTL: 122 \| LEN: 60 \| TOS: 0 ... show more Blocked by firewall on hugin [8443/tcp] \| Rule: AbuseIPDB \| SPT: 28766 \| TTL: 122 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 Tsumugi Kotobuki	2026-09-14 02:50:15 (2 days ago)	Port Scan on Honeypot \| Ports: 8443/HTTPS-alt \| Proto: TCP(1) \| Flags: all SYN \| TTL: 115 \| Len: 60B ... show more Port Scan on Honeypot \| Ports: 8443/HTTPS-alt \| Proto: TCP(1) \| Flags: all SYN \| TTL: 115 \| Len: 60B \| Win: 62727(1) \| rDNS: ec2-18-206-124-95.compute-1.amazonaws.com \| F2B/ufw-honeypot@2026-09-14T02:50:15Z show less	Port Scan Hacking
🇮🇱 Ilop	2026-09-14 00:03:04 (2 days ago)	[v5-99] Firewall dropped 3 unsolicited packet(s) proto=tcp to port(s) 3000 from 18.206.124.95 — WAN ... show more [v5-99] Firewall dropped 3 unsolicited packet(s) proto=tcp to port(s) 3000 from 18.206.124.95 — WAN scan (automated sensor) show less	Port Scan
🇵🇱 Roper123	2026-09-13 23:25:51 (2 days ago)	Web app exploits	Web App Attack
🇧🇾 sashan	2026-09-13 20:51:40 (2 days ago)	2026-09-13T23:51:38.855084+03:00 gate kernel: nftables: JAIL-FTP IN=wan OUT= MAC= SRC=18.206.124.95 ... show more 2026-09-13T23:51:38.855084+03:00 gate kernel: nftables: JAIL-FTP IN=wan OUT= MAC= SRC=18.206.124.95 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=118 ID=23455 DF PROTO=TCP SPT=48190 DPT=21 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 588 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 196.251.121.125

🇩🇪 196.251.121.123

🇺🇸 195.184.76.188

🇫🇮 178.20.210.151

🇷🇴 92.118.39.14

🇺🇦 91.208.194.40

🇹🇷 91.93.57.195

🇬🇷 79.107.113.233

🇵🇰 72.255.19.143

🇫🇷 62.210.142.159

🇵🇰 59.103.100.211

🇻🇳 42.96.33.3

🇮🇳 20.235.157.149

🇬🇧 206.189.30.214

🇧🇷 200.150.115.230

🇹🇷 178.210.170.115

🇺🇸 162.216.150.241

🇺🇸 162.216.149.14

🇸🇬 138.2.69.249

🇩🇪 130.12.182.193