JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

18.142.55.201

Neutral Activity

Abuse confidence score ?

0% Low Risk

36 reports

32 reporters · latest 4 years ago

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-142-55-201.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

18.142.55.201 has been reported 36 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 18.142.55.201

This IP address has been reported a total of 36 times from 32 distinct sources. 18.142.55.201 was first reported on July 28th 2022, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2022-07-29 03:45:04 (4 years ago)	Scanning for xmlrpc/wlwmanifest files	Web App Attack
🇬🇧 openstrike.co.uk	2022-07-29 01:06:06 (4 years ago)	85 attacks on Wordpress URLs like: 18.142.55.201 - - [28/Jul/2022:08:12:33 +0100] "GET //sito/wp-inc ... show more 85 attacks on Wordpress URLs like: 18.142.55.201 - - [28/Jul/2022:08:12:33 +0100] "GET //sito/wp-includes/wlwmanifest.xml HTTP/1.1" 404 992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" show less	Web App Attack
🇪🇸 10dencehispahard SL	2022-07-28 22:22:15 (4 years ago)	Suspicious activity detected by Modsecurity [Application attack SQLI]	Hacking SQL Injection Web App Attack
🇭🇺 DumaNet	2022-07-28 21:24:57 (4 years ago)	WordPress (CMS) attack attempts. Date: 2022 Jul 28. 12:52:02 Source IP: 18.142.55.201 Portion o ... show more WordPress (CMS) attack attempts. Date: 2022 Jul 28. 12:52:02 Source IP: 18.142.55.201 Portion of the log(s): 18.142.55.201 - [28/Jul/2022:12:50:05 +0200] "GET /media/wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 18.142.55.201 - [28/Jul/2022:12:50:04 +0200] "GET /test/wp-includes/wlwmanifest.xml 18.142.55.201 - [28/Jul/2022:12:50:04 +0200] "GET /wp1/wp-includes/wlwmanifest.xml 18.142.55.201 - [28/Jul/2022:12:50:04 +0200] "GET /shop/wp-includes/wlwmanifest.xml 18.142.55.201 - [28/Jul/2022:12:50:04 +0200] "GET /2019/wp-includes/wlwmanifest.xml 18.142.55.201 - [28/Jul/2022:12:50:03 +0200] "GET /2018/wp-includes/wlwmanifest.xml 18.142.55.201 - [28/Jul/2022:12:50:03 +0200] "GET /news/wp-includes/wlwmanifest.xml 18.142.55.201 - [28/Jul/2022:12:50:03 +0200] "GET /wp/wp-includes/wlwmanifest.xml 18.142.55.201 - [28/Jul/2022:12:50:03 +0200] "GET /website/wp-includes/wlwmanifest.xml show less	Web App Attack
🇬🇧 noise.agency	2022-07-28 10:00:19 (4 years ago)	(wordpress) Failed wordpress login from 18.142.55.201 (SG/Singapore/ec2-18-142-55-201.ap-southeast-1 ... show more (wordpress) Failed wordpress login from 18.142.55.201 (SG/Singapore/ec2-18-142-55-201.ap-southeast-1.compute.amazonaws.com) show less	Brute-Force
🇩🇪 Kreapptivo	2022-07-28 09:37:02 (4 years ago)	[28/Jul/2022:15:37:01 +0200] Web-Request: "GET /administrator/index.php", User-Agent: "Mozilla/5.0 ( ... show more [28/Jul/2022:15:37:01 +0200] Web-Request: "GET /administrator/index.php", User-Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0" show less	Bad Web Bot Web App Attack
Anonymous	2022-07-28 09:16:13 (4 years ago)	WordPress install sniffing: 18.142.55.201 - - [28/Jul/2022:14:16:13 +0100] "GET //wp-includes/wlwma ... show more WordPress install sniffing: 18.142.55.201 - - [28/Jul/2022:14:16:13 +0100] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 lait911.com	2022-07-28 09:10:00 (4 years ago)	//xmlrpc.php?rsd	Web App Attack
🇺🇸 SiliSoftware	2022-07-28 09:08:56 (4 years ago)	/wp-includes/wlwmanifest.xml	Web App Attack
🇸🇬 pusathosting.com	2022-07-28 08:55:18 (4 years ago)	polres 18.142.55.201 [28/Jul/2022:19:54:50 "-" "POST //xmlrpc.php 200 4543 18.142.55.201 [28/Jul/202 ... show more polres 18.142.55.201 [28/Jul/2022:19:54:50 "-" "POST //xmlrpc.php 200 4543 18.142.55.201 [28/Jul/2022:19:54:50 "-" "POST //xmlrpc.php 200 4543 18.142.55.201 [28/Jul/2022:19:54:51 "-" "POST //xmlrpc.php 200 4543 show less	Brute-Force Web App Attack
🇬🇧 BRHosting	2022-07-28 08:55:06 (4 years ago)	Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)	Brute-Force Web App Attack
🇮🇸 ISPLtd	2022-07-28 08:35:45 (4 years ago)	18.142.55.201 - - [28/Jul/2022:09:35:44 -0300] "GET //wp-includes/wlwmanifest.xml ...	Hacking Web App Attack
🇧🇷 AC - Team	2022-07-28 08:06:20 (4 years ago)	18.142.55.201 - - [28/Jul/2022:09:06:19 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 403 535 ... show more 18.142.55.201 - - [28/Jul/2022:09:06:19 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 403 535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Exploited Host Web App Attack
🇨🇦 mitsurugi	2022-07-28 07:54:00 (4 years ago)	WordPress xmlrpc attack.	Brute-Force Web App Attack
🇺🇸 ne1for23	2022-07-28 07:29:11 (4 years ago)	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 18.142.55.201 - - [28/Jul/2022:11:29:10 +0000] "GET /profiler/phpinfo HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" "-" show less	Hacking

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.126.225.6

🇺🇦 193.176.251.229

🇰🇿 77.240.39.64

🇰🇷 59.12.212.38

🇳🇱 45.148.10.183

🇹🇼 35.229.158.15

🇨🇳 211.137.24.98

🇦🇷 181.23.149.206

🇸🇰 178.143.41.37

🇪🇬 156.209.2.1

🇺🇸 136.67.148.161

🇷🇴 92.118.39.71

🇫🇷 81.23.46.35

🇺🇸 71.6.232.29

🇺🇸 64.202.186.161

🇨🇳 58.209.82.184

🇵🇱 54.38.52.18

🇨🇦 51.222.156.111

🇳🇱 45.148.10.157

🇸🇳 41.82.211.9