JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.111.17

47.128.111.17 was found in our database!

This IP was reported 266 times. Confidence of Abuse is 9%: ?

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-111-17.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.111.17

Whois 47.128.111.17

IP Abuse Reports for 47.128.111.17:

This IP address has been reported a total of 266 times from 49 distinct sources. 47.128.111.17 was first reported on December 19th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-27 15:08:21 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 47.128.111.17 (ec2-47-128-111-17.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.111.17 (ec2-47-128-111-17.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 11:08:15.487112 2026] [security2:error] [pid 9317:tid 9317] [client 47.128.111.17:14222] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|scoutinsignia.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "scoutinsignia.com"] [uri "/flags/WS_FTP.LOG"] [unique_id "apBS3yAdwHh1gD0qu_P0ZQAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-08-17 03:27:45 (1 month ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://bytedance.sg.larkoffice.com/docx/K5bxdypulop3IIxrJb0lOjLVgFe) show less	Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-07-14 04:49:54 (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-13 17:24:55 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.111.17 (ec2-47-128-111-17.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.111.17 (ec2-47-128-111-17.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 13:24:50.982184 2026] [security2:error] [pid 28724:tid 28724] [client 47.128.111.17:48980] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|scoutinsignia.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "scoutinsignia.com"] [uri "/WS_FTP.LOG"] [unique_id "alUfYvFNWwigprqPyXrtWQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mccsoft.io	2026-06-29 09:53:07 (2 months ago)	Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ... show more Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received). show less	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-06-28 21:56:06 (2 months ago)	Persistent bad bot: 8 repeated bans (nginx-level blocked traffic)	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-06-28 08:32:25 (2 months ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) show less	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-06-25 16:07:26 (2 months ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) show less	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-06-20 20:21:25 (2 months ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) show less	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-06-19 13:16:09 (2 months ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 18:16:44 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.111.17 (ec2-47-128-111-17.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.111.17 (ec2-47-128-111-17.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 14:16:39.659480 2026] [security2:error] [pid 18471:tid 18471] [client 47.128.111.17:52850] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|scoutinsignia.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "scoutinsignia.com"] [uri "/insignia/WS_FTP.LOG"] [unique_id "ajLkh8qHupS3uijRoczDXQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mccsoft.io	2026-06-17 14:27:50 (3 months ago)	Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ... show more Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received). show less	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-06-07 23:16:21 (3 months ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) show less	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-06-06 03:25:35 (3 months ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) show less	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-06-04 23:02:45 (3 months ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 266 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2001:41d0:33d:9200::40f

🇰🇷 210.91.62.223

🇺🇸 193.58.147.147

🇺🇸 162.216.149.17

🇧🇩 146.196.48.195

🇷🇺 85.198.80.2

🇳🇱 45.148.10.152

🇳🇱 45.148.10.151

🇺🇦 31.40.19.215

🇬🇧 213.166.84.39

🇳🇱 193.176.31.195

🇺🇦 192.166.132.101

🇹🇼 172.68.87.246

🇬🇧 138.68.144.227

🇦🇷 131.196.3.216

🇵🇭 115.147.60.151

🇮🇩 103.188.171.221

🇮🇩 103.46.186.148

🇰🇪 102.208.61.58

🇳🇱 45.148.10.157