AbuseIPDB » 18.140.2.129

18.140.2.129 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 41%: ?

41%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-140-2-129.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 18.140.2.129

Whois 18.140.2.129

IP Abuse Reports for 18.140.2.129:

This IP address has been reported a total of 41 times from 33 distinct sources. 18.140.2.129 was first reported on December 3rd 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ATV	2024-12-05 03:12:05 (1 month ago)	Unsolicited connection attempts to ports 443, 80	Hacking
Anonymous	2024-12-04 23:55:10 (1 month ago)	SuspiciousC2 Activity detected by FMBAD System 2024-12-05 02:55:10	Hacking Bad Web Bot Web App Attack
4server	2024-12-04 23:18:45 (1 month ago)	[ThuDec0500:17:11.2041482024][security2:error][pid996699:tid996741][client18.140.2.129:0][client18.1 ... show more[ThuDec0500:17:11.2041482024][security2:error][pid996699:tid996741][client18.140.2.129:0][client18.140.2.129]ModSecurity:Accessdeniedwithcode403$phase2$.Matchof\"rx$MSWebServicesClientProtocol\\|WormlyBot\\|webauth@cmcm\\\\\\\\.com$\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"326\"][id\"397989\"][rev\"1\"][msg\"Atomicorp.comWAFRules:MSIE6.0detected$DisableifyouwanttoallowMSIE6$\"][severity\"WARNING\"][hostname\"gagspettacolo.ch\"][uri\"/gagspettacolo.ch/wp-content/themes/salient/js/build/third-party/anime.min.js\"][unique_id\"Z1Di9xSn_0a8mbRnmq793gAAAUE\"][ThuDec0500:18:41.6603672024][security2:error][pid996771:tid996811][client18.140.2.129:0][client18.140.2.129]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\$mozilla\^\\|mozilla/[45]\\\\\\\\.[1-9]\\|\^mozilla/4\\\\\\\\.0\$$\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"345\"][id\"330131\"][rev\"3\"][msg\"Atom show less	Port Scan Brute-Force Web App Attack
Anonymous	2024-12-04 22:57:29 (1 month ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
taivas.nl	2024-12-04 22:32:12 (1 month ago)	Site scraper	Web App Attack
quicksand	2024-12-04 22:06:46 (1 month ago)	Bad Bot ignoring robots.txt rules [GET /] [Gulper Web Bot 0.2.4 (www.ecsl.cs.sunysb.edu/~maxim/cgi-b ... show moreBad Bot ignoring robots.txt rules [GET /] [Gulper Web Bot 0.2.4 (www.ecsl.cs.sunysb.edu/~maxim/cgi-bin/Link/GulperBot)] show less	Bad Web Bot Web App Attack
HoneyPotEu	2024-12-04 22:05:35 (1 month ago)	18.140.2.129 [redacted] (16509-AMAZON-02 Singapore Singapore) - - [04/Dec/2024:23:05:34 +0100] "GET ... show more18.140.2.129 [redacted] (16509-AMAZON-02 Singapore Singapore) - - [04/Dec/2024:23:05:34 +0100] "GET / HTTP/1.1" 444 0 "-" "Mozilla/2.0 (compatible; Ask Jeeves/Teoma)" ... show less	Bad Web Bot Web App Attack
MPL	2024-12-04 21:20:40 (1 month ago)	tcp ports: 80,443 (16 or more attempts)	Port Scan
advena	2024-12-04 21:00:57 (1 month ago)	18.140.2.129 (AS16509 AMAZON-02) was intercepted at 2024-12-04T20:47:09Z after violating WAF directi ... show more18.140.2.129 (AS16509 AMAZON-02) was intercepted at 2024-12-04T20:47:09Z after violating WAF directive: bot_fight_mode. Pre-cautionary/corrective action applied: managed_challenge. show less	Web Spam Hacking Brute-Force Web App Attack
sefinek.net	2024-12-04 19:50:01 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: MANAGED_CHALLENGE ASN: ... show moreTriggered Cloudflare WAF (firewallCustom) from SG. Action taken: MANAGED_CHALLENGE ASN: 16509 (AMAZON-02) Protocol: HTTP/1.1 (GET method) Zone: genshin.sefinek.net Endpoint: / Timestamp: 2024-12-04T17:53:24Z Ray ID: 8ecda7dfdad981c8 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36 Edg/101.0.1210.39 Report generated by Cloudflare-WAF-To-AbuseIPDB: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
advena	2024-12-04 18:30:58 (1 month ago)	18.140.2.129 (AS16509 AMAZON-02) was intercepted at 2024-12-04T18:18:38Z after violating WAF directi ... show more18.140.2.129 (AS16509 AMAZON-02) was intercepted at 2024-12-04T18:18:38Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
Progetto1	2024-12-04 17:40:03 (1 month ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
BlueWire Hosting	2024-12-04 05:10:07 (1 month ago)	Detected as a bad bot	Bad Web Bot
Anonymous	2024-12-04 04:06:45 (1 month ago)	18.140.2.129 - - [04/Dec/2024:05:06:12 +0100] "GET //cdn.js HTTP/1.1" 401 61 "-" "Twitterbot/1.0"<br ... show more18.140.2.129 - - [04/Dec/2024:05:06:12 +0100] "GET //cdn.js HTTP/1.1" 401 61 "-" "Twitterbot/1.0" 18.140.2.129 - - [04/Dec/2024:05:06:28 +0100] "GET //cdn.js HTTP/1.1" 401 61 "-" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.207.0 Safari/532.0" 18.140.2.129 - - [04/Dec/2024:05:06:44 +0100] "GET //cdn.js HTTP/1.1" 401 61 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36 OPR/86.0.4363.59" show less	Bad Web Bot Web App Attack
Roderic	2024-12-04 03:19:43 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 18.140.2.129 (SG/Sin ... show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 18.140.2.129 (SG/Singapore/ec2-18-140-2-129.ap-southeast-1.compute.amazonaws.com) show less	Bad Web Bot