isIPsafe

AS14618 Amazon.com, Inc.

Abuse reported against IP addresses announced by autonomous system 14618. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 2,082 IP addresses in AS14618 Amazon.com, Inc. were reported for abuse, in 5,686 reports altogether. 2 of them (0%) have a confidence score of 75 or more and are on the default blocklist. The most common reasons were Bad Web Bot, Web Spam and Port Scan. Most of them are in United States.

2,082addresses reported, 30 days
2on the default blocklist (75+)
5,686reports against them
56 minsince the latest report

Most reported addresses

AddressScoreReportsCategoriesLast seen
πŸ‡ΊπŸ‡Έ100.54.143.192 76 13 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 6 h
πŸ‡ΊπŸ‡Έ100.58.116.226 75 12 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 6 h
πŸ‡ΊπŸ‡Έ54.172.133.72 74 10 FTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingBrute-ForceBad Web BotWeb App AttackSSHVulnerability ScanCommand & ControlHTTP Flood 56 min
πŸ‡ΊπŸ‡Έ54.146.134.248 74 10 FTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingBrute-ForceBad Web BotWeb App AttackSSHVulnerability ScanCommand & ControlHTTP Flood 6 h
πŸ‡ΊπŸ‡Έ3.95.169.233 74 9 FTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingBrute-ForceBad Web BotWeb App AttackSSHVulnerability ScanCommand & ControlHTTP Flood 6 h
πŸ‡ΊπŸ‡Έ34.201.71.24 74 9 FTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingBrute-ForceBad Web BotWeb App AttackSSHVulnerability ScanCommand & ControlHTTP Flood 9 h
πŸ‡ΊπŸ‡Έ32.199.191.214 73 10 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 6 h
πŸ‡ΊπŸ‡Έ107.23.137.152 71 8 FTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingBrute-ForceBad Web BotWeb App AttackSSHVulnerability ScanCommand & ControlHTTP Flood 6 h
πŸ‡ΊπŸ‡Έ54.234.67.238 71 9 FTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingBrute-ForceBad Web BotWeb App AttackSSHVulnerability ScanCommand & ControlHTTP Flood 9 h
πŸ‡ΊπŸ‡Έ54.174.230.107 71 10 FTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingBrute-ForceBad Web BotWeb App AttackSSHVulnerability ScanCommand & ControlHTTP Flood 9 h
πŸ‡ΊπŸ‡Έ54.91.134.82 71 9 FTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingBrute-ForceBad Web BotWeb App AttackSSHVulnerability ScanCommand & ControlHTTP Flood 9 h
πŸ‡ΊπŸ‡Έ52.23.168.237 71 9 FTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingBrute-ForceBad Web BotWeb App AttackSSHVulnerability ScanCommand & ControlHTTP Flood 9 h
πŸ‡ΊπŸ‡Έ100.58.171.235 70 10 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 56 min
πŸ‡ΊπŸ‡Έ32.192.67.220 70 11 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 6 h
πŸ‡ΊπŸ‡Έ52.73.169.169 70 8 FTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingBrute-ForceBad Web BotWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlHTTP Flood 6 h
πŸ‡ΊπŸ‡Έ34.228.104.231 70 10 FTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingBrute-ForceBad Web BotWeb App AttackSSHVulnerability ScanCommand & ControlHTTP Flood 6 h
πŸ‡ΊπŸ‡Έ54.234.183.96 69 10 FTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingBrute-ForceBad Web BotWeb App AttackSSHVulnerability ScanCommand & ControlHTTP Flood 6 h
πŸ‡ΊπŸ‡Έ52.73.212.207 69 9 FTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingBrute-ForceBad Web BotWeb App AttackSSHVulnerability ScanCommand & ControlHTTP Flood 6 h
πŸ‡ΊπŸ‡Έ44.203.139.246 69 9 FTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingBrute-ForceBad Web BotWeb App AttackSSHVulnerability ScanCommand & ControlHTTP Flood 6 h
πŸ‡ΊπŸ‡Έ34.234.82.70 69 10 FTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingBrute-ForceBad Web BotWeb App AttackSSHVulnerability ScanCommand & ControlHTTP Flood 6 h

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 2 minutes ago.