JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.143.141.131

18.143.141.131 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 58%: ?

58%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-143-141-131.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.143.141.131

Whois 18.143.141.131

IP Abuse Reports for 18.143.141.131:

This IP address has been reported a total of 10 times from 9 distinct sources. 18.143.141.131 was first reported on August 21st 2026, and the most recent report was 36 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Lee Daniel	2026-08-23 04:49:27 (36 minutes ago)	18.143.141.131 - - [23/Aug/2026:00:49:27 -0400] "GET /.env HTTP/1.1" 403 6284 "-" "Mozilla/5.0 (Wind ... show more 18.143.141.131 - - [23/Aug/2026:00:49:27 -0400] "GET /.env HTTP/1.1" 403 6284 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-08-23 00:19:52 (5 hours ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 21:41:02 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.143.141.131 (ec2-18-143-141-131.ap-southeast ... show more (mod_security) mod_security (id:210492) triggered by 18.143.141.131 (ec2-18-143-141-131.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 17:40:55.004278 2026] [security2:error] [pid 11184:tid 11184] [client 18.143.141.131:52288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sublimationconsultants.com"] [uri "/.git/config"] [unique_id "aooXZxE_5XDUCRtR-kH6MQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Stylottica	2026-08-22 13:35:14 (15 hours ago)	PrestaShop Security Module: suspicious probe path detected (/.env)	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 06:28:37 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 18.143.141.131 (ec2-18-143-141-131.ap-southeast ... show more (mod_security) mod_security (id:210492) triggered by 18.143.141.131 (ec2-18-143-141-131.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 02:28:32.046381 2026] [security2:error] [pid 6760:tid 6760] [client 18.143.141.131:57304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sarahgrammer.com"] [uri "/.git/config"] [unique_id "aolBkMcFVMCLOGiRIkkISAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-22 05:35:41 (23 hours ago)	(caddyscan) Scanner path probe from 18.143.141.131 (SG/Singapore/ec2-18-143-141-131.ap-southeast-1.c ... show more (caddyscan) Scanner path probe from 18.143.141.131 (SG/Singapore/ec2-18-143-141-131.ap-southeast-1.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 18.143.141.131 - - [22/Aug/2026:05:35:37 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 18.143.141.131 - - [22/Aug/2026:05:35:37 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 18.143.141.131 - - [22/Aug/2026:05:35:38 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 18.143.141.131 - - [22/Aug/2026:05:35:38 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 18.143.141.131 - - [22/Aug/2026:05:35:38 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
🇮🇹 VHosting	2026-08-22 03:45:05 (1 day ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇧🇪 cmbplf	2026-08-21 17:39:41 (1 day ago)	168 requests with url.path *phpinfo.php	Brute-Force Bad Web Bot
🇳🇱 Site.eu	2026-08-21 10:27:22 (1 day ago)	Excessive 404/403 errors	Brute-Force
🇩🇪 hchristo	2026-08-21 08:43:45 (1 day ago)	[Fri Aug 21 10:43:36.021655 2026] [authz_core:error] [pid 54335:tid 54389] [client 18.143.141.131:46 ... show more [Fri Aug 21 10:43:36.021655 2026] [authz_core:error] [pid 54335:tid 54389] [client 18.143.141.131:46454] AH01630: client denied by server configuration: /var/www/kd1130/htdocs/Sandras-Abnehmblog.de/.env.bak [Fri Aug 21 10:43:36.949118 2026] [authz_core:error] [pid 54335:tid 54393] [client 18.143.141.131:46454] AH01630: client denied by server configuration: /var/www/kd1130/htdocs/Sandras-Abnehmblog.de/.env.save [Fri Aug 21 10:43:37.217492 2026] [authz_core:error] [pid 54335:tid 54394] [client 18.143.141.131:46454] AH01630: client denied by server configuration: /var/www/kd1130/htdocs/Sandras-Abnehmblog.de/.env.old [Fri Aug 21 10:43:44.687160 2026] [authz_core:error] [pid 54335:tid 54419] [client 18.143.141.131:46454] AH01630: client denied by server configuration: /var/www/kd1130/htdocs/Sandras-Abnehmblog.de/.env.swp [Fri Aug 21 10:43:44.948150 2026] [authz_core:error] [pid 54335:tid 54430] [client 18.143.141.131:46454] AH01630: client denied by server configuration: /var/www/kd1130/ht ... show less	Brute-Force

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 193.46.232.228

🇮🇳 117.247.51.66

🇸🇬 114.119.150.215

🇨🇳 114.98.160.40

🇧🇪 104.155.11.28

🇷🇴 92.118.39.49

🇺🇸 65.49.1.64

🇺🇸 64.62.197.183

🇨🇳 36.132.228.177

🇩🇪 194.88.98.83

🇦🇺 170.64.166.157

🇭🇰 152.32.212.149

🇺🇸 136.117.107.183

🇨🇳 112.46.213.222

🇬🇧 87.236.176.86

🇩🇪 69.5.169.82

🇭🇰 58.152.211.48

🇬🇧 35.203.210.231

🇨🇦 20.220.10.235

🇳🇱 193.47.62.69