JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.141.138.47

18.141.138.47 was found in our database!

This IP was reported 59 times. Confidence of Abuse is 0%: ?

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-141-138-47.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.141.138.47

Whois 18.141.138.47

IP Abuse Reports for 18.141.138.47:

This IP address has been reported a total of 59 times from 42 distinct sources. 18.141.138.47 was first reported on May 22nd 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-07-14 10:21:11 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-06-02 22:30:20 (3 months ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-06-01 22:29:52 (3 months ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-05-31 22:29:26 (3 months ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-05-27 22:27:02 (3 months ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-05-26 22:26:53 (3 months ago)		Brute-Force Web App Attack
🇩🇪 macrob	2026-05-26 02:15:02 (3 months ago)	2026/05/26 02:15:00 [error] 3660894#3660894: 256705520 access forbidden by rule, client: 18.141.138 ... show more 2026/05/26 02:15:00 [error] 3660894#3660894: 256705520 access forbidden by rule, client: 18.141.138.47, server: binixo.mx, request: "GET //wp-includes/wlwmanifest.xml HTTP/1.1", host: "binixo.mx" 2026/05/26 02:15:00 [error] 3660894#3660894: 256705520 access forbidden by rule, client: 18.141.138.47, server: binixo.mx, request: "GET //xmlrpc.php?rsd HTTP/1.1", host: "binixo.mx" 2026/05/26 02:15:00 [error] 3660894#3660894: 256705520 access forbidden by rule, client: 18.141.138.47, server: binixo.mx, request: "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1", host: "binixo.mx" ... show less	Web App Attack
🇺🇸 jormaster3k	2026-05-26 02:01:43 (3 months ago)	Attack against WordPress	Web App Attack
Anonymous	2026-05-26 01:58:04 (3 months ago)	Bot / scanning and/or hacking attempts: POST //xmlrpc.php HTTP/1.1, GET //wp-json/wp/v2/users/ HTTP/ ... show more Bot / scanning and/or hacking attempts: POST //xmlrpc.php HTTP/1.1, GET //wp-json/wp/v2/users/ HTTP/1.1, GET / HTTP/1.1 show less	Hacking Web App Attack
🇬🇧 BRHosting	2026-05-26 01:08:02 (3 months ago)	Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)	Brute-Force Web App Attack
Anonymous	2026-05-26 00:49:43 (3 months ago)	XSS Attempt	Hacking
🇫🇮 Rexikon	2026-05-26 00:49:31 (3 months ago)	18.141.138.47 - - [26/May/2026:02:49:28 +0200] "POST //wp-login.php HTTP/1.1" 200 14579 "https://wel ... show more 18.141.138.47 - - [26/May/2026:02:49:28 +0200] "POST //wp-login.php HTTP/1.1" 200 14579 "https://weld-gas.pl//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 18.141.138.47 - - [26/May/2026:02:49:28 +0200] "POST //wp-login.php HTTP/1.1" 200 14579 "https://weld-gas.pl//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 18.141.138.47 - - [26/May/2026:02:49:29 +0200] "POST //wp-login.php HTTP/1.1" 200 14579 "https://weld-gas.pl//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 18.141.138.47 - - [26/May/2026:02:49:30 +0200] "POST //wp-login.php HTTP/1.1" 200 14579 "https://weld-gas.pl//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 18.141.138.47 - - [26/May/2026:02:49:30 +0200] "POST //wp-login.php ... show less	Brute-Force
🇬🇧 blik2108	2026-05-26 00:41:05 (3 months ago)	blog.blacknellsatsea.co.uk:443 18.141.138.47 - - [26/May/2026:01:25:15 +0100] "GET //wp-login.php HT ... show more blog.blacknellsatsea.co.uk:443 18.141.138.47 - - [26/May/2026:01:25:15 +0100] "GET //wp-login.php HTTP/1.1" 200 11070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" blog.blacknellsatsea.co.uk:443 18.141.138.47 - - [26/May/2026:01:41:04 +0100] "POST //wp-login.php HTTP/1.1" 200 14499 "https://blog.blacknellsatsea.co.uk//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" blog.blacknellsatsea.co.uk:443 18.141.138.47 - - [26/May/2026:01:41:04 +0100] "POST //wp-login.php HTTP/1.1" 200 11397 "https://blog.blacknellsatsea.co.uk//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" blog.blacknellsatsea.co.uk:443 18.141.138.47 - - [26/May/2026:01:41:05 +0100] "POST //wp-login.php HTTP/1.1" 200 11397 "https://blog.blacknellsatsea.co.uk//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 ... show less	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-05-25 16:52:55 (3 months ago)	18.141.138.47 - - [25/May/2026:19:52:53 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/5 ... show more 18.141.138.47 - - [25/May/2026:19:52:53 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 18.141.138.47 - - [25/May/2026:19:52:54 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 masterguru	2026-05-25 16:15:17 (3 months ago)	(wordpress) Apache: Failed WordPress login from 18.141.138.47 (SG/Singapore/ec2-18-141-138-47.ap-sou ... show more (wordpress) Apache: Failed WordPress login from 18.141.138.47 (SG/Singapore/ec2-18-141-138-47.ap-southeast-1.compute.amazonaws.com): 10 in the last 3600 secs (0-196) show less	Hacking

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.232

🇳🇱 195.178.110.60

🇵🇱 194.180.48.130

🇳🇱 193.118.52.222

🇲🇽 187.154.128.189

🇺🇸 161.123.76.211

🇨🇳 123.191.131.159

🇨🇳 106.113.6.209

🇪🇪 95.85.245.227

🇬🇧 82.18.179.96

🇷🇴 80.94.92.234

🇸🇪 46.59.88.25

🇩🇪 34.185.150.77

🇺🇸 2a03:2880:f806:34::

🇪🇹 213.55.79.195

🇨🇴 190.253.153.119

🇺🇸 185.252.169.210

🇺🇸 185.61.219.201

🇲🇽 177.244.29.30

🇸🇬 148.66.142.9