JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.140.200.19

18.140.200.19 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 25%: ?

25%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-140-200-19.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.140.200.19

Whois 18.140.200.19

IP Abuse Reports for 18.140.200.19:

This IP address has been reported a total of 4 times from 4 distinct sources. 18.140.200.19 was first reported on June 3rd 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-04 06:30:03 (1 week ago)	\| [Dangerous/Singapore] Aggressive IP 18.140.200.19 (~30 hits). Type: DoS Defender- Web server 400 e ... show more \| [Dangerous/Singapore] Aggressive IP 18.140.200.19 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
Anonymous	2026-06-03 09:57:04 (1 week ago)	Bot / scanning and/or hacking attempts: GET /.env.old HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.l ... show more Bot / scanning and/or hacking attempts: GET /.env.old HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.live HTTP/1.1, GET /.env.stage HTTP/1.1, GET /.env.ci HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.test HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.docker HTTP/1.1 show less	Hacking Web App Attack
🇪🇸 pipeline.es	2026-06-03 08:01:53 (1 week ago)	Web scanning / probing for vulnerable paths \| URL: /.env.save \| Evidence: dacaholdingsbooking.com 18 ... show more Web scanning / probing for vulnerable paths \| URL: /.env.save \| Evidence: dacaholdingsbooking.com 18.140.200.19 - - [03/Jun/2026:10:01:31 +0200] \"GET /.env.save HTTP/1.1\" 404 7247 \"-\" \"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=SG \| ASN: AMAZON-02 \| Country: SG show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 07:31:25 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 18.140.200.19 (ec2-18-140-200-19.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 18.140.200.19 (ec2-18-140-200-19.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 03:31:20.188143 2026] [security2:error] [pid 5802:tid 5802] [client 18.140.200.19:44358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dabovalbb.com"] [uri "/.env"] [unique_id "ah_YSEa08UwkZQbHs_449QAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:963b:1001

🇪🇹 196.190.43.162

🇺🇸 193.56.116.225

🇧🇷 187.16.96.250

🇭🇰 152.32.174.171

🇯🇵 138.2.36.134

🇨🇳 111.30.42.43

🇫🇮 83.143.112.140

🇮🇷 78.38.182.29

🇺🇸 64.62.156.138

🇨🇳 14.116.172.24

🇩🇪 213.209.159.158

🇺🇸 209.87.149.26

🇧🇷 189.51.43.54

🇧🇷 177.68.117.145

🇰🇷 175.126.37.156

🇺🇸 165.1.75.106

🇹🇷 159.146.20.237

🇧🇷 144.22.238.238

🇺🇸 107.140.212.87