18.145.72.193
recordedScannerTourist
Case file
First seen on 2026-10-04T21:11:33Z, most recently active on 2026-10-04T21:11:33Z.
Recorded 1 attack-shaped request across 1 separate day.
Its traffic triggered Cloudflare's managed rule for a Next.js server-action request-smuggling/RCE attempt.
Seen on our edge sensor.
Scored into the "Scanner" level, carrying the badge Tourist.
Routed via AS16509 (Amazon.com, Inc.), an ASN we classify as cloud.
Recorded internally; has not yet crossed the bar for a public listing.
Enrichment
| rDNS | ec2-18-145-72-193.us-west-1.compute.amazonaws.com |
|---|---|
| ASN | AS16509 — Amazon.com, Inc. |
| ASN type | cloud |
| Country | United States (US) |
| Flags | Cloud range |
Timeline
- 2026-10-041
Evidence (newest first, up to 50)
| Time (UTC) | Vantage | Site | Class | Status | Evidence |
|---|---|---|---|---|---|
| 2026-10-04T21:11:33Z | edge | haived.com | triggered Cloudflare's managed rule for a Next.js server-action request-smuggling/RCE attempt | POST / |
Not currently correlated with any campaign.
Dispute or removal: [email protected] — reference 18.145.72.193. See /threats/about for the method and the 7-day review window.
card.svg (used as this page's og:image)
