JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.138.238.149

18.138.238.149 was found in our database!

This IP was reported 88 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-138-238-149.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.138.238.149

Whois 18.138.238.149

IP Abuse Reports for 18.138.238.149:

This IP address has been reported a total of 88 times from 62 distinct sources. 18.138.238.149 was first reported on May 8th 2024, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 vaia.cloud	2026-09-01 00:45:02 (2 hours ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇬🇧 consul.to	2026-08-31 22:34:19 (5 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇲🇾 Rizzy	2026-08-31 21:46:24 (5 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2026-08-31 18:49:25 (8 hours ago)	18.138.238.149 - - [01/Sep/2026:02:49:23 +0800] "GET /static/manifest.json HTTP/1.1" 404 196 "-" "Mo ... show more 18.138.238.149 - - [01/Sep/2026:02:49:23 +0800] "GET /static/manifest.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36" 18.138.238.149 - - [01/Sep/2026:02:49:24 +0800] "GET /assets/manifest.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36" 18.138.238.149 - - [01/Sep/2026:02:49:24 +0800] "GET /serverless.yml HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36" 18.138.238.149 - - [01/Sep/2026:02:49:24 +0800] "GET /webpack-stats.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36" 18.138.238.149 - - [01/Sep/2026:02:49:24 +0800] "GET /manifest.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) ... show less	Bad Web Bot Web App Attack
🇺🇸 hostmach	2026-08-31 17:31:02 (10 hours ago)	(cpanel) Failed cPanel login from 18.138.238.149 (SG/Singapore/ec2-18-138-238-149.ap-southeast-1.com ... show more (cpanel) Failed cPanel login from 18.138.238.149 (SG/Singapore/ec2-18-138-238-149.ap-southeast-1.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-08-31 13:30:56 -0400] info [webmaild] 18.138.238.149 - - "GET /id_dsa HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-08-31 13:30:59 -0400] info [webmaild] 18.138.238.149 - - "POST /graphql HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-08-31 13:30:59 -0400] info [webmaild] 18.138.238.149 - - "GET /localhost.key HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-08-31 13:30:59 -0400] info [webmaild] 18.138.238.149 - - "GET /privatekey.key HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-08-31 13:30:59 -0400] info [webmaild] 18.138.238.149 - - "GET /private-key HTTP/1.1" FAILED LOGIN webmaild: login attempt without username show less	Brute-Force SSH
Anonymous	2026-08-31 15:59:21 (11 hours ago)	Aggressive web scan	Web App Attack
🇦🇺 clapper	2026-08-31 14:59:55 (12 hours ago)	(cpanel) Failed cPanel login from 18.138.238.149 (SG/Singapore/ec2-18-138-238-149.ap-southeast-1.com ... show more (cpanel) Failed cPanel login from 18.138.238.149 (SG/Singapore/ec2-18-138-238-149.ap-southeast-1.compute.amazonaws.com): 5 in the last 600 secs; ID: rub show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-08-31 12:32:50 (15 hours ago)		Brute-Force Web App Attack
🇩🇪 raph	2026-08-31 09:51:40 (17 hours ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇬🇧 Steve	2026-08-31 05:57:50 (21 hours ago)	SQL Injection Attempts	Brute-Force SQL Injection
🇩🇪 macrob	2026-08-31 05:11:25 (22 hours ago)	2026/08/31 05:11:13 [error] 1221355#1221355: 539010588 access forbidden by rule, client: 18.138.238 ... show more 2026/08/31 05:11:13 [error] 1221355#1221355: 539010588 access forbidden by rule, client: 18.138.238.149, server: binixo.pl, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "binixo.pl" 2026/08/31 05:11:13 [error] 1221353#1221353: 539025046 access forbidden by rule, client: 18.138.238.149, server: binixo.pl, request: "GET /.vite/manifest.json HTTP/2.0", host: "binixo.pl" 2026/08/31 05:11:23 [error] 1221355#1221355: 539024949 access forbidden by rule, client: 18.138.238.149, server: binixo.pl, request: "GET /admin HTTP/2.0", host: "binixo.pl" ... show less	Web App Attack
Anonymous	2026-08-31 04:19:55 (23 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 18.138.238.149 (SG/Singapore/ec2-18-138 ... show more (mod_security) mod_security triggered on hostname [redacted] 18.138.238.149 (SG/Singapore/ec2-18-138-238-149.ap-southeast-1.compute.amazonaws.com) show less	SQL Injection
🇲🇽 octageeks.com	2026-08-31 04:14:29 (23 hours ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇱🇻 garmtech.com	2026-08-31 03:49:37 (23 hours ago)	Attempted access to sensitive endpoint (/login) detected. Automated scan or unauthorized probing.	Web App Attack
🇪🇸 librebit	2026-08-31 02:49:19 (1 day ago)	Brute force	Brute-Force

Showing 1 to 15 of 88 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇹 213.225.37.142

🇺🇦 194.28.65.94

🇩🇪 167.94.146.76

🇺🇸 164.92.110.190

🇬🇧 86.25.22.195

🇺🇸 54.211.184.129

🇮🇸 213.190.100.140

🇳🇱 203.55.131.4

🇨🇳 183.230.155.13

🇯🇵 152.32.146.235

🇮🇳 103.241.45.120

🇨🇳 101.42.46.71

100.89.136.72

🇳🇱 91.92.47.78

🇺🇸 34.106.88.218

🇦🇺 34.40.145.110

🇵🇭 2001:4455:e18:a00:a4ca:2878:50c7:a490

🇰🇷 222.116.34.23

🇨🇳 124.236.47.138

100.87.185.79