JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

18.139.207.120

Recent Activity

Abuse Confidence Score

58% Elevated

22 reports

10 reporters · latest 1 day ago

ISP: Amazon Data Services Singapore
Usage Type: Data Center/Web Hosting/Transit
ASN: AS16509
Hostname(s): ec2-18-139-207-120.ap-southeast-1.compute.amazonaws.com
Domain Name: amazon.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

22 from 10 distinct reporters

First reported

November 2nd 2026

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇵🇱 Poland 12 🇺🇸 United States of America 5 🇫🇷 France 3

Most common categories Web App Attack 15 Hacking 15 Bad Web Bot 11 Port Scan 4

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-11-07 18:57:20 UTC · (1 day ago)	[Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: astropot.website \| Path: /config.json \| User-Agent: curl/8.5.0 \| Request: [Empty / GET Reques ... show more [Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: astropot.website \| Path: /config.json \| User-Agent: curl/8.5.0 \| Request: [Empty / GET Request] show less	Hacking Web App Attack
🇫🇷 uthul	2026-11-07 17:53:58 UTC · (1 day ago)	T-Pot honeypot: 19 hits on ports [9200] (automated)	Port Scan
🇵🇱 Budyn	2026-11-07 16:16:57 UTC · (1 day ago)	[Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: elastic.dont-eat-the-pudding.top \| Path: /config.json \| User-Agent: Mozilla/5.0 \| Request: [E ... show more [Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: elastic.dont-eat-the-pudding.top \| Path: /config.json \| User-Agent: Mozilla/5.0 \| Request: [Empty / GET Request] show less	Hacking Web App Attack
🇺🇸 decode5921	2026-11-07 15:17:07 UTC · (1 day ago)	Honeypot hit: GET /actuator/env (tool: curl)	Bad Web Bot Web App Attack
🇺🇸 decode5921	2026-11-07 14:55:36 UTC · (1 day ago)	Honeypot hit: GET /actuator/configprops (tool: curl)	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-11-07 11:21:29 UTC · (1 day ago)	[Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: api.dont-eat-the-pudding.top \| Path: /actuator/heapdump \| User-Agent: curl/8.5.0 \| Request: ... show more [Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: api.dont-eat-the-pudding.top \| Path: /actuator/heapdump \| User-Agent: curl/8.5.0 \| Request: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 seanwall	2026-11-07 11:01:45 UTC · (1 day ago)	Automated scanner/attacker probing war-room. Paths: ['/.git/config', '/.env']. UA: ['curl/8.5.0']	Port Scan Bad Web Bot Web App Attack
🇨🇦 john doe	2026-11-07 11:00:38 UTC · (1 day ago)	SentinelBot: Secret-path hunting (5 distinct paths): Env File Hunting (score: 64)	Bad Web Bot
🇵🇱 Budyn	2026-11-07 10:32:03 UTC · (1 day ago)	[Budyn SOC Canary] \| Event: AWS Key Compromised! \| Evidence: \| Memo: AWS_Token_8 \| Action: AWS API Call \| Token ID: 95b23kxelv1qyzc6evkizbyhn \| Client tool: aws-cli/1.46.2 md/Botocore#1.43.62 ua/2.1 os/linux#6.8.0-48-generic md/arch#x86_64 lang/pytho ... show more [Budyn SOC Canary] \| Event: AWS Key Compromised! \| Evidence: \| Memo: AWS_Token_8 \| Action: AWS API Call \| Token ID: 95b23kxelv1qyzc6evkizbyhn \| Client tool: aws-cli/1.46.2 md/Botocore#1.43.62 ua/2.1 os/linux#6.8.0-48-generic md/arch#x86_64 lang/python#3.12.3 md/pyimpl#CPython m/b,Z,g,D cfg/retry-mode#legacy botoc... show less	Hacking Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-11-07 07:06:44 UTC · (2 days ago)	[Budyn SOC Canary] \| Event: AWS Key Compromised! \| Evidence: \| Memo: AWS_Token_12 \| Action: AWS API Call \| Token ID: akf9s74n5eldbzbpzbzf5lt45 \| Client tool: aws-cli/1.46.2 md/Botocore#1.43.62 ua/2.1 os/linux#6.8.0-48-generic md/arch#x86_64 lang/pyth ... show more [Budyn SOC Canary] \| Event: AWS Key Compromised! \| Evidence: \| Memo: AWS_Token_12 \| Action: AWS API Call \| Token ID: akf9s74n5eldbzbpzbzf5lt45 \| Client tool: aws-cli/1.46.2 md/Botocore#1.43.62 ua/2.1 os/linux#6.8.0-48-generic md/arch#x86_64 lang/python#3.12.3 md/pyimpl#CPython m/b,D,g,Z cfg/retry-mode#legacy botoc... show less	Hacking Bad Web Bot Web App Attack
🇫🇷 Kejult	2026-11-07 05:32:27 UTC · (2 days ago)	Honeypot Finding: active TCP application payload captured by Honeytrap; 5 payload-bearing connection/event(s), 115 payload byte(s) total, maximum payload 23 byte(s). Target port(s): 4028.	Port Scan Hacking
🇪🇸 raiolanetworks.com	2026-11-06 23:32:00 UTC · (2 days ago)	Honeypot detection: Redis attack. 2 events observed. Reported automatically from a honeypot sensor.	Hacking
🇵🇱 Budyn	2026-11-06 16:00:32 UTC · (2 days ago)	[Budyn SOC Canary] \| Event: AWS Key Compromised! \| Evidence: \| Memo: AWS_Token_4 \| Action: AWS API Call \| Token ID: 3a228y9iwzbmqpgsnaaic99y3 \| Client tool: aws-cli/1.46.2 md/Botocore#1.43.62 ua/2.1 os/linux#6.8.0-48-generic md/arch#x86_64 lang/pytho ... show more [Budyn SOC Canary] \| Event: AWS Key Compromised! \| Evidence: \| Memo: AWS_Token_4 \| Action: AWS API Call \| Token ID: 3a228y9iwzbmqpgsnaaic99y3 \| Client tool: aws-cli/1.46.2 md/Botocore#1.43.62 ua/2.1 os/linux#6.8.0-48-generic md/arch#x86_64 lang/python#3.12.3 md/pyimpl#CPython m/g,b,D,Z cfg/retry-mode#legacy botoc... show less	Hacking Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-11-06 08:50:29 UTC · (3 days ago)	[Budyn SOC Canary] \| Event: AWS Key Compromised! \| Evidence: \| Memo: AWS_Token_11 \| Action: AWS API Call \| Token ID: 7lggvodiip8vznhits5cv0986 \| Client tool: [aws-cli/1.46.2 md/Botocore#1.43.62 ua/2.1 os/linux#6.8.0-48-generic md/arch#x86_64 lang/pyt ... show more [Budyn SOC Canary] \| Event: AWS Key Compromised! \| Evidence: \| Memo: AWS_Token_11 \| Action: AWS API Call \| Token ID: 7lggvodiip8vznhits5cv0986 \| Client tool: [aws-cli/1.46.2 md/Botocore#1.43.62 ua/2.1 os/linux#6.8.0-48-generic md/arch#x86_64 lang/python#3.12.3 md/pyimpl#CPython m/D,g,b,C,Z cfg/retry-mode#legacy bo... show less	Hacking Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-11-06 06:08:25 UTC · (3 days ago)	[Budyn SOC Canary] \| Event: AWS Key Compromised! \| Evidence: \| Memo: AWS_Token_11 \| Action: AWS API Call \| Token ID: 7lggvodiip8vznhits5cv0986 \| Client tool: aws-cli/1.46.2 md/Botocore#1.43.62 ua/2.1 os/linux#6.8.0-48-generic md/arch#x86_64 lang/pyth ... show more [Budyn SOC Canary] \| Event: AWS Key Compromised! \| Evidence: \| Memo: AWS_Token_11 \| Action: AWS API Call \| Token ID: 7lggvodiip8vznhits5cv0986 \| Client tool: aws-cli/1.46.2 md/Botocore#1.43.62 ua/2.1 os/linux#6.8.0-48-generic md/arch#x86_64 lang/python#3.12.3 md/pyimpl#CPython m/C,D,b,Z,g cfg/retry-mode#legacy bot... show less	Hacking Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇷 194.180.11.186

🇨🇦 45.198.224.237

🇵🇱 2a00:1450:4025:800::71

🇺🇸 174.129.155.62

🇺🇸 157.254.67.64

🇺🇸 146.88.241.40

🇧🇩 103.23.205.40

🇨🇳 101.126.55.95

🇷🇺 92.248.180.76

🇷🇴 92.118.39.71

🇸🇬 84.75.155.95

🇫🇷 78.231.163.129

🇺🇸 73.183.115.109

🇺🇸 73.183.20.114

🇺🇸 54.226.92.205

🇳🇱 45.74.28.169

🇭🇰 43.100.90.143

🇧🇪 35.206.186.197

🇧🇪 35.206.169.253

🇦🇺 34.40.145.110