JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 18.218.142.163

18.218.142.163 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 0%: ?

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-18-218-142-163.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 18.218.142.163

Whois 18.218.142.163

IP Abuse Reports for 18.218.142.163:

This IP address has been reported a total of 23 times from 13 distinct sources. 18.218.142.163 was first reported on December 28th 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 mkrufczyk	2024-01-07 16:50:46 (2 years ago)	GET /wp-json/oembed/1.0/embed?url	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-01-05 19:06:15 (2 years ago)	(mod_security) mod_security (id:225080) triggered by 18.218.142.163 (ec2-18-218-142-163.us-east-2.co ... show more (mod_security) mod_security (id:225080) triggered by 18.218.142.163 (ec2-18-218-142-163.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 05 14:06:10.611744 2024] [security2:error] [pid 8118:tid 47497545803520] [client 18.218.142.163:39066] [client 18.218.142.163] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:C" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)\|\|visionforandfromchildren.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "visionforandfromchildren.org"] [uri "/wp-includes/js/"] [unique_id "ZZhTIrG9xLcnaT8chBIY_gAAAI0"], referer: https://visionforandfromchildren.org/wp-includes/class-phpass.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-01-05 07:28:57 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 18.218.142.163 (ec2-18-218-142-163.us-east-2.co ... show more (mod_security) mod_security (id:210730) triggered by 18.218.142.163 (ec2-18-218-142-163.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 05 02:28:49.651245 2024] [security2:error] [pid 26576] [client 18.218.142.163:42922] [client 18.218.142.163] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|plumeriatc.org\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "plumeriatc.org"] [uri "/plumphot/Thumbs.db"] [unique_id "ZZevsbj3Ljv6pFnQAspW1QAAAAs"], referer: https://plumeriatc.org/plumphot/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-01-04 16:39:50 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 18.218.142.163 (ec2-18-218-142-163.us-east-2.co ... show more (mod_security) mod_security (id:210730) triggered by 18.218.142.163 (ec2-18-218-142-163.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 04 11:39:47.397325 2024] [security2:error] [pid 10535] [client 18.218.142.163:49384] [client 18.218.142.163] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gsrsv.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gsrsv.org"] [uri "/springtimeinc.com"] [unique_id "ZZbfU_cB98T5fiKWzcU7RAAAAAU"], referer: https://gsrsv.org/RescueRecord2021.htm show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-01-04 16:11:39 (2 years ago)	(php-url-fopen) Failed php-url-fopen trigger from 18.218.142.163 (US/United States/ec2-18-218-142-16 ... show more (php-url-fopen) Failed php-url-fopen trigger from 18.218.142.163 (US/United States/ec2-18-218-142-163.us-east-2.compute.amazonaws.com) show less	Web App Attack
🇭🇺 DumaNet	2024-01-04 04:41:41 (2 years ago)	WordPress plugin attack attempts. Date: 2024 Jan 03. 13:12:00 Source IP: 18.218.142.163 Portion ... show more WordPress plugin attack attempts. Date: 2024 Jan 03. 13:12:00 Source IP: 18.218.142.163 Portion of the log(s): 18.218.142.163 - [03/Jan/2024:13:11:59 +0100] "GET /wp-includes/js/jquery/text/plain HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0" 18.218.142.163 - [03/Jan/2024:13:11:59 +0100] "GET /wp-includes/js/jquery/text/xml HTTP/1.1" 404 153 "-" "Opera/9.80 (Windows NT 10.0; U; en) Presto/2.9.168 Version/11.50" 18.218.142.163 - [03/Jan/2024:13:11:59 +0100] "GET /wp-includes/js/jquery/text/html HTTP/1.1" 404 153 "-" "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00" 18.218.142.163 - [03/Jan/2024:13:11:59 +0100] "GET /text/plain HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36" 18.218.142.163 - [03/Jan/2024:13:11:59 +0100] "GET /text/html HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari show less	Hacking Web App Attack
🇺🇸 schoolpresser	2024-01-02 22:41:32 (2 years ago)	Aggressive scraping.	Bad Web Bot
🇧🇪 taivas.nl	2024-01-02 05:32:19 (2 years ago)	Many_bad_calls	Web App Attack
🇺🇸 physke	2024-01-02 05:17:48 (2 years ago)	REQUESTED PAGE: /js/skel.js	Web App Attack
🇺🇸 physke	2024-01-02 05:17:48 (2 years ago)	REQUESTED PAGE: /js/skel-layers.js	Web App Attack
🇺🇸 physke	2024-01-02 05:17:48 (2 years ago)	REQUESTED PAGE: /js/jquery.scrollzer.js	Web App Attack
🇺🇸 physke	2024-01-02 05:17:48 (2 years ago)	REQUESTED PAGE: /js/jquery.js	Web App Attack
🇺🇸 WebWizards.NZ	2024-01-02 04:55:02 (2 years ago)	Dodgy URLs Bad Bot	Bad Web Bot
🇳🇱 Savvii	2024-01-01 18:09:58 (2 years ago)	20 attempts against mh-misbehave-ban on chico	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2024-01-01 13:25:48 (2 years ago)	25 attempts against mh_ha-misbehave-ban on iron	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 179.98.0.101

🇩🇪 217.154.152.20

🇧🇷 186.224.9.72

🇺🇸 165.22.134.80

🇫🇷 91.196.152.73

🇸🇪 78.66.44.61

🇭🇰 58.152.42.212

🇮🇳 203.109.79.47

🇨🇴 200.41.113.216

🇮🇩 103.174.122.69

🇺🇸 45.79.82.114

🇺🇸 2a04:4e42:600::347

🇬🇧 217.146.80.109

🇧🇯 197.234.219.138

🇿🇦 102.141.183.244

🇧🇷 16.5.0.236

🇹🇷 213.194.119.79

🇧🇷 200.195.5.37

🇬🇧 195.206.182.218

🇨🇱 190.114.33.149