DigitalOcean Referral Badge
cloud1
cloud2
cloud3
cloud4
cloud5
cloud6
← Back

Subnet Overview

Model: v1 Updated: Feb. 20, 2026, 12:34 p.m.
Report for 18.216.89.0/24 • United States • Amazon.com, Inc. City report ASN report

High-level context about this subnet: size, density, traffic, risk, and geographic footprint.

Access Mode

Visitor mode shows a reduced view for performance (recent activity window and lighter deep analysis surfaces). Log in or create an account to unlock full-history subnet analysis and richer tooling.

Traffic ready Risk ready Snapshot ready Window Jan. 26, 2026, midnightFeb. 2, 2026, midnight Model v1
Prefix
/24
IP Version
IPv4
Subnet Size
256
Network Address
18.216.89.0
Broadcast / Last
18.216.89.255
Observed IPs
1
Footprint
0.391%
Total Hits
559
Total Errors
552
Risk Score
70
Risk Level
high
First Seen
Jan. 31, 2026, 2 a.m.
Last Seen
Feb. 1, 2026, 2 a.m.
Top Location
Dublin , Ohio • United States
Top ASN
AS16509 • Amazon.com, Inc.
Top ISP
Amazon.com, Inc.

Risk

Model: v1 Computed: Feb. 20, 2026, 1:36 p.m.
Subnet risk score
70
High
Risk gradient
Contributor codes are normalized (e.g. sqli, cmdi, trav, sfp). Totals and breakdowns are derived from subnet rollups and explainability tables only.
Annotator influence radar
Rendering annotator influence profile…
Normalized contribution (0..1) per annotator versus robust per-code envelope.
All contributing signals
Sensitive file probing sfp Requests target commonly sensitive files, configs, backups, or administrative resources. 289 hits 2409.00 pts
Severity Hits Labels Weighted Top labels
40 253 1 2226.40
{'count': 253, 'label': 'sensitive_file'}
24 20 1 105.60
{'count': 20, 'label': 'sensitive_file'}
16 11 1 38.72
{'count': 11, 'label': 'sensitive_file'}
36 4 1 31.68
{'count': 4, 'label': 'sensitive_file'}
30 1 1 6.60
{'count': 1, 'label': 'sensitive_file'}
Scan velocity scan_velocity High request rate and broad endpoint coverage suggest scanning or automated enumeration. 127 hits 480.60 pts
Severity Hits Labels Weighted Top labels
32 20 1 115.20
{'count': 20, 'label': 'scan_velocity'}
30 20 1 108.00
{'count': 20, 'label': 'scan_velocity'}
28 16 1 80.64
{'count': 16, 'label': 'scan_velocity'}
26 12 1 56.16
{'count': 12, 'label': 'scan_velocity'}
22 12 1 47.52
{'count': 12, 'label': 'scan_velocity'}
24 8 1 34.56
{'count': 8, 'label': 'scan_velocity'}
18 6 1 19.44
{'count': 6, 'label': 'scan_velocity'}
16 4 1 11.52
{'count': 4, 'label': 'scan_velocity'}
14 3 1 7.56
{'count': 3, 'label': 'scan_velocity'}
0 26 1 0.00
{'count': 26, 'label': 'scan_velocity'}
Path traversal attempts trav Request paths/parameters resemble attempts to access files outside intended directories. 9 hits 79.56 pts
Severity Hits Labels Weighted Top labels
34 9 1 79.56
{'count': 9, 'label': 'trav'}
Credential brute forcing cred Repeated authentication attempts consistent with password guessing or credential stuffing. 2 hits 5.50 pts
Severity Hits Labels Weighted Top labels
10 1 1 5.50
{'count': 1, 'label': 'cred'}
0 1 1 0.00
{'count': 1, 'label': 'cred'}
Technical summary
Computed at
Feb. 20, 2026, 1:36 p.m.
Raw total
2974.66
Total hits
559
Errors
552

Traffic

Rollup

Daily activity (hits per day) plus HTTP response mix and basic counters from the subnet traffic rollup.

Activity Access

Visitor

Visitor mode is limited to the most recent 30 days for performance. Log in or create an account to unlock full-history subnet activity and deeper analysis.

Loading activity…
Rendering hits per day for this subnet.
Daily activity (stacked response classes + total hits). Showing recent 30 days in visitor mode.

HTTP Status Breakdown

Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads one aggregation and renders a donut.

Loading status mix…
Fetching one histogram and rendering the chart.

Geolocation

Live geolocation and map tiles auto-load for this subnet (all IPs with coordinates).

Loading map…

Sibling Subnets By ASN / Org Identity

Compare other subnet snapshots that share this report's ASN or organization identity. “Same window” keeps comparisons aligned to the current publish window.

216.73.216.0/24 /24 Risk 99
99 max · 96.480 avg
Last seen 2026-02-02 02:00
Hits
119682
IPs
5
Footprint
1.953%
ASN
AS16509
AS Org
Amazon.com, Inc.
Geo
Columbus, Ohio, United States
18.117.121.0/24 /24 Risk 70
70 max · 70.000 avg
Last seen 2026-02-01 02:00
Hits
559
IPs
1
Footprint
0.391%
ASN
AS16509
AS Org
Amazon.com, Inc.
Geo
Dublin, Ohio, United States
18.142.43.0/24 /24 Risk 66
66 max · 66.000 avg
Last seen 2026-02-01 02:00
Hits
559
IPs
1
Footprint
0.391%
ASN
AS16509
AS Org
Amazon.com, Inc.
Geo
Singapore, Central Singapore, Singapore
47.128.121.0/24 /24 Risk 0
0 max · 0.000 avg
Last seen 2026-02-02 02:00
Hits
282
IPs
135
Footprint
52.734%
ASN
AS16509
AS Org
Amazon.com, Inc.
Geo
Singapore, Central Singapore, Singapore
47.128.96.0/24 /24 Risk 0
0 max · 0.000 avg
Last seen 2026-02-02 02:00
Hits
225
IPs
113
Footprint
44.141%
ASN
AS16509
AS Org
Amazon.com, Inc.
Geo
Singapore, Central Singapore, Singapore
47.128.22.0/24 /24 Risk 1
1 max · 0.498 avg
Last seen 2026-02-02 02:00
Hits
223
IPs
108
Footprint
42.188%
ASN
AS16509
AS Org
Amazon.com, Inc.
Geo
Singapore, Central Singapore, Singapore
47.128.16.0/24 /24 Risk 0
0 max · 0.000 avg
Last seen 2026-02-02 02:00
Hits
212
IPs
110
Footprint
42.969%
ASN
AS16509
AS Org
Amazon.com, Inc.
Geo
Singapore, Central Singapore, Singapore
47.128.111.0/24 /24 Risk 0
0 max · 0.000 avg
Last seen 2026-02-02 02:00
Hits
211
IPs
98
Footprint
38.281%
ASN
AS16509
AS Org
Amazon.com, Inc.
Geo
Singapore, Central Singapore, Singapore
47.128.113.0/24 /24 Risk 1
1 max · 0.512 avg
Last seen 2026-02-02 02:00
Hits
205
IPs
96
Footprint
37.500%
ASN
AS16509
AS Org
Amazon.com, Inc.
Geo
Singapore, Central Singapore, Singapore
47.128.45.0/24 /24 Risk 1
1 max · 0.345 avg
Last seen 2026-02-02 02:00
Hits
200
IPs
90
Footprint
35.156%
ASN
AS16509
AS Org
Amazon.com, Inc.
Geo
Singapore, Central Singapore, Singapore
47.128.58.0/24 /24 Risk 1
1 max · 0.192 avg
Last seen 2026-02-02 02:00
Hits
198
IPs
96
Footprint
37.500%
ASN
AS16509
AS Org
Amazon.com, Inc.
Geo
Singapore, Central Singapore, Singapore
47.128.55.0/24 /24 Risk 1
1 max · 0.167 avg
Last seen 2026-02-02 02:00
Hits
198
IPs
94
Footprint
36.719%
ASN
AS16509
AS Org
Amazon.com, Inc.
Geo
Singapore, Central Singapore, Singapore
47.128.123.0/24 /24 Risk 1
1 max · 0.520 avg
Last seen 2026-02-02 02:00
Hits
198
IPs
93
Footprint
36.328%
ASN
AS16509
AS Org
Amazon.com, Inc.
Geo
Singapore, Central Singapore, Singapore
47.128.47.0/24 /24 Risk 1
1 max · 0.194 avg
Last seen 2026-02-02 02:00
Hits
196
IPs
97
Footprint
37.891%
ASN
AS16509
AS Org
Amazon.com, Inc.
Geo
Singapore, Central Singapore, Singapore
47.128.63.0/24 /24 Risk 1
1 max · 0.216 avg
Last seen 2026-02-02 02:00
Hits
194
IPs
98
Footprint
38.281%
ASN
AS16509
AS Org
Amazon.com, Inc.
Geo
Singapore, Central Singapore, Singapore
47.128.23.0/24 /24 Risk 1
1 max · 0.359 avg
Last seen 2026-02-02 02:00
Hits
192
IPs
90
Footprint
35.156%
ASN
AS16509
AS Org
Amazon.com, Inc.
Geo
Singapore, Central Singapore, Singapore
47.128.60.0/24 /24 Risk 1
1 max · 0.408 avg
Last seen 2026-02-02 02:00
Hits
191
IPs
95
Footprint
37.109%
ASN
AS16509
AS Org
Amazon.com, Inc.
Geo
Singapore, Central Singapore, Singapore
47.128.118.0/24 /24 Risk 1
1 max · 0.429 avg
Last seen 2026-02-02 02:00
Hits
189
IPs
96
Footprint
37.500%
ASN
AS16509
AS Org
Amazon.com, Inc.
Geo
Singapore, Central Singapore, Singapore
47.128.20.0/24 /24 Risk 1
1 max · 0.187 avg
Last seen 2026-02-02 02:00
Hits
187
IPs
95
Footprint
37.109%
ASN
AS16509
AS Org
Amazon.com, Inc.
Geo
Singapore, Central Singapore, Singapore
47.128.18.0/24 /24 Risk 1
1 max · 0.199 avg
Last seen 2026-02-02 02:00
Hits
186
IPs
94
Footprint
36.719%
ASN
AS16509
AS Org
Amazon.com, Inc.
Geo
Singapore, Central Singapore, Singapore

Interesting IPs In This Subnet

Top risky peer IPs for this subnet snapshot, sorted by risk score then hits. Use this panel to drill down from subnet to IP-level reports.

18.216.89.211 high
70 /100
Last seen 2026-02-01 02:00
Hits
559
Errors
552
Country
United States
ASN
AS16509
AS Org
Amazon.com, Inc.