AbuseIPDB » 18.183.219.242

18.183.219.242 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 32%: ?

32%

ISP	Amazon Data Services Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-183-219-242.ap-northeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 18.183.219.242

Whois 18.183.219.242

IP Abuse Reports for 18.183.219.242:

This IP address has been reported a total of 20 times from 16 distinct sources. 18.183.219.242 was first reported on November 15th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-12-04 21:15:55 (1 month ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
TPI-Abuse	2024-12-04 17:40:07 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 18.183.219.242 (ec2-18-183-219-242.ap-northeast ... show more(mod_security) mod_security (id:210492) triggered by 18.183.219.242 (ec2-18-183-219-242.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 04 12:40:00.377008 2024] [security2:error] [pid 19473:tid 19473] [client 18.183.219.242:55656] [client 18.183.219.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.48"] [uri "/.env"] [unique_id "Z1CT8E1e56m8xjgQT8pCaQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
keep_out	2024-12-04 17:28:40 (1 month ago)	PortScan ...	Port Scan
TPI-Abuse	2024-12-04 16:53:28 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 18.183.219.242 (ec2-18-183-219-242.ap-northeast ... show more(mod_security) mod_security (id:210492) triggered by 18.183.219.242 (ec2-18-183-219-242.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 04 11:53:21.355905 2024] [security2:error] [pid 22110:tid 22110] [client 18.183.219.242:62910] [client 18.183.219.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.167"] [uri "/.env"] [unique_id "Z1CJARSyF3GkaMdz5UFVxgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
loadsoporte	2024-12-04 16:47:40 (1 month ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
TPI-Abuse	2024-12-04 06:33:55 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 18.183.219.242 (ec2-18-183-219-242.ap-northeast ... show more(mod_security) mod_security (id:210492) triggered by 18.183.219.242 (ec2-18-183-219-242.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 04 01:33:51.261501 2024] [security2:error] [pid 9112:tid 9191] [client 18.183.219.242:59225] [client 18.183.219.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.21"] [uri "/.env"] [unique_id "Z0_3z5i0W0ArMGbOsPecIQAAARQ"] show less	Brute-Force Bad Web Bot Web App Attack
Aetherweb Ark	2024-12-04 06:30:28 (1 month ago)	(mod_security) mod_security (id:920350) triggered by 18.183.219.242 (JP/Japan/ec2-18-183-219-242.ap- ... show more(mod_security) mod_security (id:920350) triggered by 18.183.219.242 (JP/Japan/ec2-18-183-219-242.ap-northeast-1.compute.amazonaws.com): N in the last X secs show less	Web App Attack
SilverZippo	2024-12-04 06:25:06 (1 month ago)	Web App Attack	Web App Attack
gurnip	2024-12-04 06:24:43 (1 month ago)	Vulnerability probe of page /.env, not found on server.	Brute-Force Web App Attack
Anonymous	2024-12-03 21:56:58 (1 month ago)	Restricted File Access Requests	Hacking Brute-Force
TPI-Abuse	2024-12-03 21:34:56 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 18.183.219.242 (ec2-18-183-219-242.ap-northeast ... show more(mod_security) mod_security (id:210492) triggered by 18.183.219.242 (ec2-18-183-219-242.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 03 16:34:52.964992 2024] [security2:error] [pid 21624:tid 21639] [client 18.183.219.242:64423] [client 18.183.219.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "acornway.com"] [uri "/sendgrid/.env"] [unique_id "Z095fCU_1o_iQVA18rk2IQAAAIs"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-12-03 20:58:08 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 18.183.219.242 (ec2-18-183-219-242.ap-northeast ... show more(mod_security) mod_security (id:210492) triggered by 18.183.219.242 (ec2-18-183-219-242.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 03 15:58:04.070102 2024] [security2:error] [pid 3470477:tid 3470477] [client 18.183.219.242:56207] [client 18.183.219.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kln.ne.jp"] [uri "/sendgrid/.env"] [unique_id "Z09w3Ke6ogrHtZJPfFiqRAAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
MAGIC	2024-12-03 13:04:17 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Rob Wink	2024-11-26 15:38:43 (1 month ago)	Nov 26 09:38:43 mail postfix/smtpd[3189896]: warning: ec2-18-183-219-242.ap-northeast-1.compute.amaz ... show moreNov 26 09:38:43 mail postfix/smtpd[3189896]: warning: ec2-18-183-219-242.ap-northeast-1.compute.amazonaws.com[18.183.219.242]: SASL LOGIN authentication failed: authentication failure ... show less	Hacking Brute-Force
Anonymous	2024-11-20 23:33:27 (1 month ago)	postfix-sasl	Brute-Force Web App Attack