18.212.122.225 Threat Intelligence - United States | IP Address Lookup

Share on:

General

IP Address
18.212.122.225
IPv4 Address
Location
🇺🇸 Ashburn, United States
US
Network
AS14618
Amazon.com, Inc.
Threat Score
33/100
Medium Risk
aws-credentialsenv-credential-grabgit-exposurerevproxyweb-exploit
Attack Intelligence
Noticed
4 times
Protocols Attacked
aws env git php
Geographic Location
Country
United States
City
Ashburn
Region
Virginia
Coordinates
39.0469, -77.4903
Network Information
ASN
AS14618
Organization
Amazon.com, Inc.
Network
AS14618 Amazon.com, Inc.
Associated CVEs
WHOIS Information
NetRange
18.32.0.0 - 18.255.255.255
CIDR
18.32.0.0/11, 18.64.0.0/10, 18.128.0.0/9
NetName
AT-88-Z
NetHandle
NET-18-32-0-0-1
Parent
NET18 (NET-18-0-0-0-0)
NetType
Direct Allocation
Organization
Amazon Technologies Inc. (AT-88-Z)
RegDate
2019-10-07
Updated
2021-02-10
Ref
https://rdap.arin.net/registry/ip/18.32.0.0
OrgName
Amazon Technologies Inc.
OrgId
AT-88-Z
Address
410 Terry Ave N.
City
Seattle
StateProv
WA
PostalCode
98109
Country
US
Comment
All abuse reports MUST include:
OrgRoutingHandle
IPROU3-ARIN
OrgRoutingName
IP Routing
OrgRoutingPhone
+1-206-555-0000
OrgRoutingEmail
aws-routing-poc@amazon.com
OrgRoutingRef
https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgDNSHandle
DNS1131-ARIN
Attack Logs
DateTarget LocationProtocolLink
2026-10-22 Webexploit Env Credential Grab Ip List 2026 10 22 Multiple View Log
2026-10-22 Cve 2002 1149 Attacker Ip List 2026 10 22 Multiple View Log
2026-10-22 Webexploit Aws Credentials Ip List 2026 10 22 Multiple View Log
2026-10-22 Webexploit Php Version Recon Ip List 2026 10 22 Multiple View Log
2026-10-22 Webexploit Git Exposure Ip List 2026 10 22 Multiple View Log
2026-10-21 Cve 2002 1149 Attacker Ip List 2026 10 21 Multiple View Log
2026-10-21 Webexploit Aws Credentials Ip List 2026 10 21 Multiple View Log
2025-06-20 Webexploit Php Version Recon Ip List 2025 06 20 Multiple View Log
Disclaimer
This page contains threat intelligence information for the IPv4 address 18.212.122.225 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only, and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.