JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

18.141.233.249

Neutral Activity

Abuse Confidence Score

0% Low Risk

52 reports

30 reporters · latest 5 months ago

ISP: Amazon Technologies Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS16509
Hostname(s): ec2-18-141-233-249.ap-southeast-1.compute.amazonaws.com
Domain Name: amazon.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

18.141.233.249 has been reported 52 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

52 from 30 distinct reporters

First reported

April 22nd 2026

Most recent report

5 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 debestelapp	2026-05-27 07:00:05 UTC · (5 months ago)		Web App Attack
🇩🇪 4server	2026-05-26 18:20:43 UTC · (5 months ago)	[TueMay2620:20:40.6458292026][security2:error][pid1889445:tid1889481][client18.141.233.249:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htac ... show more [TueMay2620:20:40.6458292026][security2:error][pid1889445:tid1889481][client18.141.233.249:0]ModSecurity:Accessdeniedwithcode403\(phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.restaurantgandria.ch\"][uri\"/backup.sql\"][unique_id\"ahXkeBOG8tCsa177AUtxaQAAAEA\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 findlab	2026-05-26 03:20:01 UTC · (5 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇩🇪 todix	2026-05-26 02:40:29 UTC · (5 months ago)	Web App Attack Exploid from 18.141.233.249	Web App Attack
🇧🇷 dominioz	2026-05-26 01:35:27 UTC · (5 months ago)	2026-05-26 01:35:03 GET /1.sql - - 18.141.233.249 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64;+rv:128.0)+Gecko/20100101+Firefox/128.0 - 301 573 2026-05-26 01:35:06 GET /err/ 404;https://www.sdbp.com.br:443/1.sql - 18.141.233.249 HTTP/1.1 Mozilla/5.0+(X11 ... show more 2026-05-26 01:35:03 GET /1.sql - - 18.141.233.249 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64;+rv:128.0)+Gecko/20100101+Firefox/128.0 - 301 573 2026-05-26 01:35:06 GET /err/ 404;https://www.sdbp.com.br:443/1.sql - 18.141.233.249 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64;+rv:128.0)+Gecko/20100101+Firefox/128.0 - 200 2796 2026-05-26 01:35:10 GET /backup.sql - - 18.141.233.249 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64;+rv:128.0)+Gecko/20100101+Firefox/128.0 - 301 583 2026-05-26 01:35:11 GET /err/ 404;https://www.sdbp.com.br:443/backup.sql - 18.141.233.249 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64;+rv:128.0)+Gecko/20100101+Firefox/128.0 - 302 707 ... show less	Web App Attack
Anonymous	2026-05-26 00:39:31 UTC · (5 months ago)	18.141.233.249 - - [25/May/2026:21:39:31 -0300] "GET /mysql.sql HTTP/1.1" 404 153 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" ...	Port Scan
🇩🇪 Lino Project	2026-05-26 00:04:59 UTC · (5 months ago)	18.141.233.249 - - [26/May/2026:02:04:55 +0200] "GET /backup.sql HTTP/1.1" 403 3708 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" ...	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-05-26 00:00:30 UTC · (5 months ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇨🇦 Dunham Support	2026-05-25 20:41:54 UTC · (5 months ago)	(mod_security) mod_security triggered on hostname [redacted] 18.141.233.249 (SG/Singapore/ec2-18-141-233-249.ap-southeast-1.compute.amazonaws.com)	SQL Injection
🇬🇧 consul.to	2026-05-25 19:59:46 UTC · (5 months ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 masterguru	2026-05-25 06:06:12 UTC · (5 months ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .d ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .scr/ .sct/ .shs/ .sql/ .swp/ .sys/ .tlb/ .tmp/ .url/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-196) show less	Hacking
🇳🇱 e.fierstra	2026-05-24 20:37:05 UTC · (5 months ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-24 20:09:03 UTC · (5 months ago)	(mod_security) mod_security (id:210730) triggered by 18.141.233.249 (ec2-18-141-233-249.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 16:08:56.869805 2026] [security2:erro ... show more (mod_security) mod_security (id:210730) triggered by 18.141.233.249 (ec2-18-141-233-249.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 16:08:56.869805 2026] [security2:error] [pid 25792:tid 25792] [client 18.141.233.249:55797] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|chasingtequila.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "chasingtequila.com"] [uri "/1.sql"] [unique_id "ahNa2CSVzhg5XX2lmhurOQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-05-24 19:05:05 UTC · (5 months ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .d ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .scr/ .sct/ .shs/ .sql/ .swp/ .sys/ .tlb/ .tmp/ .url/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-197) show less	Hacking
Anonymous	2026-05-24 16:12:55 UTC · (5 months ago)	Multiple web server 400 error codes from same source ip	Web App Attack

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇪🇸 212.30.33.109

🇻🇳 210.245.30.140

🇸🇬 185.150.0.25

🇩🇪 64.89.163.163

🇺🇸 216.25.90.22

🇩🇪 205.185.222.141

🇺🇸 201.25.164.186

🇸🇬 194.5.82.167

🇵🇭 49.149.198.35

🇳🇱 45.148.10.152

🇺🇸 45.55.137.212

🇺🇸 216.25.89.80

🇺🇸 192.254.112.55

🇳🇱 192.253.248.122

🇺🇸 165.154.162.74

🇨🇳 121.40.46.218

🇷🇴 92.118.39.56

🇺🇸 70.183.226.26

🇳🇱 45.156.87.127

🇺🇸 40.121.200.75