Identicon of IP address 18.117.250.148

18.117.250.148

IP Risk Score: 100 / 100

This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.

What is this IP address?
IP Address: 18.117.250.148
Country: United States flag United States (US)
Region Name: Ohio (OH)
City: Dublin
ISP: Amazon.com, Inc.
Organization: AWS EC2 (us-east-2)
Threat level: 100 / 100
Conf. level: 100 / 100
Properties
ASN: AS16509
AS Name: Amazon.com, Inc.
Timezone: America/New_York
Reverse DNS: ec2-18-117-250-148.us-east-2.compute.amazonaws.com
Status: Critical
Hosting

Observed Client Profile
  • OS: Linux (100%)
  • Device Type: Desktop (100%)
  • Browser Family: Chrome (100%)
  • Rendering Engine: Gecko (100%)
Behavioral Indicators

The IP address has exhibited highly suspicious behavior, characterized by a significant number of requests to a single site, all resulting in 403/404 errors. The traffic appears automated, with a user-agent that is commonly associated with web scraping. Additionally, the presence of honeypot hits indicates malicious intent. The IP is hosted on AWS, further raising concerns about potential abuse.

The supernet (18.117.0.0/16), which this IP belongs to, exhibits a mix of benign and suspicious behaviors, with a significant number of IPs showing signs of automated scraping and scanning activities. While some IPs appear to be legitimate bots, the presence of repeated low-value requests and honeypot hits suggests potential misuse of the infrastructure.

๐Ÿฏ
Honeypot Hit
๐Ÿ“ก
Scanner
JavaScript Support
โš ๏ธ No
User-Agent Samples
  • Mozilla/5.0 (Linux x86_64; X11) AppleWebKit/536.19 (KHTML, like Gecko) Chrome/30.0.517.18 Safari/535.30

IP Location

Region: Ohio, United States

City: Dublin

Local time: 2026-06-22 02:33:57