18.140.68.249
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Amazon Technologies Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS16509
- Hostname(s)
- ec2-18-140-68-249.ap-southeast-1.compute.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇸🇬 Singapore
- City
- Singapore
No reports in the last 60 days
18.140.68.249 has been reported 15 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
15 from
13 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force SSH | |
| Anonymous |
Ports: 80,443; Direction: 0; Trigger: LF_MODSEC
|
Brute-Force SSH | |
| 🇦🇺 advena |
18.140.68.249 (AS16509 AMAZON-02) was intercepted at 2025-09-07T09:41:05Z after violating WAF directive: 23548ee2b36547a1be09bb2c0550c529. Pre-cautionary/corrective action applied: block.
|
Web Spam Hacking Brute-Force Web App Attack | |
| 🇷🇺 andrey volobuev |
|
Brute-Force Web App Attack | |
| 🇪🇸 masterguru |
. Matched phrase "/.env" at REQUEST_URI. (210492-123)
|
Web App Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇺🇸 Epimetheus |
Unauthorized access attempts:
From:
18.140.68.249
Method:
HTTP GET
URI Path:
//saas/.env
UA:
"Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20052001 Firefox/22.0"
|
Web App Attack | |
| 🇪🇪 Unwasted |
Did not found that php file ?
|
Hacking Web App Attack | |
| 🇳🇱 Savvii |
20 attempts against mh-misbehave-ban on boron
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇮🇹 VHosting |
Detected attack by Imunify360
|
Brute-Force Web App Attack | |
| 🇧🇪 cmbplf |
149 requests with url.path *.env
|
Brute-Force Bad Web Bot | |
| 🇩🇪 Luuk |
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
|
Exploited Host | |
| 🇨🇦 polycoda |
📄 Probes for tons of inexistent files and/or PHP scripts
|
Hacking Web App Attack | |
| Anonymous |
Multiple web server 400 error codes from same source ip
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown