JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

3.129.128.47

Neutral Activity

Abuse Confidence Score

0% Low Risk

9 reports

8 reporters · latest 3 months ago

ISP: Amazon Technologies Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS16509
Hostname(s): ec2-3-129-128-47.us-east-2.compute.amazonaws.com
Domain Name: amazon.com
Country: 🇺🇸 United States of America
City: Columbus, Ohio

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

3.129.128.47 has been reported 9 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

9 from 8 distinct reporters

First reported

July 24th 2026

Most recent report

3 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-29 07:00:00 UTC · (3 months ago)	Apache probe; attempts=1055; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.env.bak \| /.env.ci \| /.env.dev \| /.env.development \| /.env.dist \| /.env.docker \| /.env.example \| /.env.fly \| /.env.json \| /.env.live \| /.env.local \| /. ... show more Apache probe; attempts=1055; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.env.bak \| /.env.ci \| /.env.dev \| /.env.development \| /.env.dist \| /.env.docker \| /.env.example \| /.env.fly \| /.env.json \| /.env.live \| /.env.local \| /.env.neon \| /.env.old \| /.env.preprod \| /.env.prod \| /.env.production \| /.env.railway \| /.env.remote \| /.env.render \| /.env.sample \| /.env.save \| /.env.stage \| /.env.staging \| /.env.supabase \| /.env.swp \| /.env.test \| /.env.txt \| /.env.uat \| /.env.vault \| /.env.vercel \| /.env.yaml \| /.env.yml \| /.env~ \| /.git/.env \| /.git/config \| /actions/.env \| /admin-panel/.env \| /admin/.env \| /administrator/.env \| /angular/.env \| /ansible/.env \| /api/.env \| /api/dev/.env \| /api/staging/.env \| /api/v1/.env \| /api/v2/.env \| /api/v3/.env \| /app/.env \| /application/.env \| /apps/.env \| /assets/.env \| /aws/.env \| /azure/.env \| /backend/.env \| /backup/.env \| /backups/.env \| /beta/.env \| ... [211 exact paths total] show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 14:27:13 UTC · (3 months ago)	(mod_security) mod_security (id:210492) triggered by 3.129.128.47 (ec2-3-129-128-47.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 10:27:08.097790 2026] [security2:error] [pid 3 ... show more (mod_security) mod_security (id:210492) triggered by 3.129.128.47 (ec2-3-129-128-47.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 10:27:08.097790 2026] [security2:error] [pid 3939808:tid 3939808] [client 3.129.128.47:57524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cultiplant.com"] [uri "/.git/config"] [unique_id "amdqvGW-kIHHMeePdV6IiwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 12:29:27 UTC · (3 months ago)	(mod_security) mod_security (id:210492) triggered by 3.129.128.47 (ec2-3-129-128-47.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:29:22.564349 2026] [security2:error] [pid 3 ... show more (mod_security) mod_security (id:210492) triggered by 3.129.128.47 (ec2-3-129-128-47.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:29:22.564349 2026] [security2:error] [pid 3564962:tid 3564962] [client 3.129.128.47:45128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cuisine.gevieworld.com"] [uri "/.git/config"] [unique_id "amdPIgPf-_lDk4C75Fd3PAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-07-27 11:05:07 UTC · (3 months ago)	Scanning/Probing (16)	Brute-Force Web App Attack
🇮🇩 rafli	2026-07-26 02:54:13 UTC · (3 months ago)	{"level":"info","ts":1785034438.7893026,"logger":"http.log.access.log2","msg":"handled request","request":{"remote_ip":"3.129.128.47","remote_port":"54382","client_ip":"3.129.128.47","proto":"HTTP/1.1","method":"GET","host":"cdn.oncall.id","uri":"/", ... show more {"level":"info","ts":1785034438.7893026,"logger":"http.log.access.log2","msg":"handled request","request":{"remote_ip":"3.129.128.47","remote_port":"54382","client_ip":"3.129.128.47","proto":"HTTP/1.1","method":"GET","host":"cdn.oncall.id","uri":"/","headers":{"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"Accept-Encoding":["gzip, deflate"],"Accept":["/"],"Connection":["keep-alive"],"Next-Action":["x"],"X-Nextjs-Request-Id":["88df0ca8"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"cdn.oncall.id","ech":false}},"bytes_read":0,"user_id":"","duration":0.091115445,"size":532,"status":404,"resp_headers":{"Date":["Sun, 26 Jul 2026 02:53:58 GMT"],"Content-Type":["text/html; charset=UTF-8"],"Vary":["Accept-Encoding"],"Via":["1.1 Caddy"],"X-Powered-By":["PHP/8.4.23"],"Cache-Control":["no-cache, private"],"Permissions-Policy":["microphone=(self), autoplay=(self ... show less	Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-07-25 15:24:37 UTC · (3 months ago)	20 attempts against mh-misbehave-ban on lunar	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-07-25 12:14:19 UTC · (3 months ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-24 22:02:52 UTC · (3 months ago)	Auto-ban: >3000 req/min op 2026-07-24	Web App Attack SSH Hacking
Anonymous	2026-07-24 08:05:56 UTC · (3 months ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (41/60 min)'; Requests=41	Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 207.175.76.72

🇦🇺 198.251.85.196

🇺🇦 193.107.107.65

🇷🇴 193.46.255.86

🇦🇷 192.141.148.102

🇺🇸 191.101.241.242

🇳🇱 185.242.226.60

🇺🇸 152.32.148.250

🇭🇰 118.193.35.25

🇯🇵 104.198.118.38

🇺🇸 205.251.153.208

🇳🇱 176.65.148.94

🇺🇸 162.216.150.120

🇺🇸 162.216.150.51

🇩🇪 151.243.11.141

🇩🇪 151.243.11.47

🇺🇸 143.244.148.170

🇨🇴 138.117.87.161

🇮🇳 122.184.78.199

🇵🇱 109.173.179.206