JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.111.241

47.128.111.241 was found in our database!

This IP was reported 248 times. Confidence of Abuse is 23%: ?

23%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-111-241.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.111.241

Whois 47.128.111.241

IP Abuse Reports for 47.128.111.241:

This IP address has been reported a total of 248 times from 41 distinct sources. 47.128.111.241 was first reported on December 24th 2023, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 filstal.org	2026-06-06 01:49:31 (6 hours ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) show less	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-06-04 06:54:42 (2 days ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) show less	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-06-03 04:29:02 (3 days ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) show less	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-05-29 09:32:39 (1 week ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) show less	Bad Web Bot Web App Attack
🇺🇸 walnuts	2026-05-28 23:59:36 (1 week ago)	Automated: Triggered nginx security jail (nginx-444) - probing blocked paths on web server	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-05-24 10:32:58 (1 week ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) show less	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-05-23 10:14:30 (1 week ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-21 19:22:51 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 47.128.111.241 (ec2-47-128-111-241.ap-southeast ... show more (mod_security) mod_security (id:210730) triggered by 47.128.111.241 (ec2-47-128-111-241.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 15:22:43.571593 2026] [security2:error] [pid 11785:tid 11785] [client 47.128.111.241:51098] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|scoutinsignia.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "scoutinsignia.com"] [uri "/train_files/WS_FTP.LOG"] [unique_id "ag9bg6oXNZS2ONRFi-OgUQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-05-20 00:57:21 (2 weeks ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) show less	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-05-16 20:18:59 (2 weeks ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) show less	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-05-08 05:44:09 (4 weeks ago)	Unauthorized web crawling detected: known aggressive crawler or bot activity identified in web acces ... show more Unauthorized web crawling detected: known aggressive crawler or bot activity identified in web access logs show less	Bad Web Bot
🇪🇸 librebit	2026-04-23 22:31:01 (1 month ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-04-17 19:03:06 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 47.128.111.241 (ec2-47-128-111-241.ap-southeast ... show more (mod_security) mod_security (id:210730) triggered by 47.128.111.241 (ec2-47-128-111-241.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 15:02:58.988042 2026] [security2:error] [pid 692465:tid 692465] [client 47.128.111.241:61458] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.scoutinsignia.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.scoutinsignia.com"] [uri "/icons/WS_FTP.LOG"] [unique_id "aeKD4nUL6zITUtqhxzQfBwAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 walnuts	2026-04-17 12:51:22 (1 month ago)	Automated: Triggered nginx security jail (nginx-444) - probing blocked paths on web server	Bad Web Bot Web App Attack
🇪🇸 librebit	2026-04-13 18:52:12 (1 month ago)	Brute force	Brute-Force

Showing 1 to 15 of 248 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.120

🇮🇳 122.180.21.11

🇧🇪 34.140.168.155

🇩🇪 2a01:4f8:150:13a5::100:1b

🇳🇱 193.176.31.201

🇬🇧 193.176.29.21

🇺🇸 172.214.44.149

🇬🇧 159.65.94.135

🇨🇳 123.163.52.74

🇪🇪 109.206.241.199

🇳🇱 103.161.34.59

🇬🇷 91.140.8.222

🇱🇻 83.99.206.162

🇩🇪 69.5.169.163

🇺🇸 66.132.195.23

🇬🇧 45.89.63.39

🇧🇪 213.49.19.254

🇺🇸 172.234.25.243

🇻🇳 152.32.163.183

🇨🇳 115.236.121.185