JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.242.71

47.128.242.71 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 67%: ?

67%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-242-71.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.242.71

Whois 47.128.242.71

IP Abuse Reports for 47.128.242.71:

This IP address has been reported a total of 16 times from 12 distinct sources. 47.128.242.71 was first reported on May 21st 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-23 22:00:54 (1 hour ago)	Auto-ban: >3000 req/min op 2026-08-23	Web App Attack SSH Hacking
🇧🇪 cmbplf	2026-08-23 14:29:27 (8 hours ago)	2.548 requests with url.path .env 434 requests with url.path phpinfo.php	Brute-Force Bad Web Bot
🇳🇱 Site.eu	2026-08-23 04:09:48 (19 hours ago)	Excessive 404/403 errors	Brute-Force
🇩🇪 ghostwarriors	2026-08-22 21:20:15 (1 day ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-08-22 21:11:11 (1 day ago)	47.128.242.71 - - [22/Aug/2026:23:11:06 +0200] "POST / HTTP/1.1" 200 1433 "-" "Mozilla/5.0 (Windows ... show more 47.128.242.71 - - [22/Aug/2026:23:11:06 +0200] "POST / HTTP/1.1" 200 1433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 47.128.242.71 - - [22/Aug/2026:23:11:06 +0200] "GET /.git/config HTTP/1.1" 403 527 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 47.128.242.71 - - [22/Aug/2026:23:11:07 +0200] "GET /.env HTTP/1.1" 404 524 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 47.128.242.71 - - [22/Aug/2026:23:11:07 +0200] "GET /.env.local HTTP/1.1" 404 524 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 47.128.242.71 - - [22/Aug/2026:23:11:07 +0200] "GET /.env.production HTTP/1.1" 404 524 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 47.128.2 show less	Web App Attack Hacking
Anonymous	2026-08-22 19:41:46 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇵🇱 maciejka	2026-08-22 18:05:28 (1 day ago)	47.128.242.71 - - [22/Aug/2026:20:05:27 +0200] "GET /mailer/.env HTTP/1.1" 404 189 "-" "Mozilla/5.0 ... show more 47.128.242.71 - - [22/Aug/2026:20:05:27 +0200] "GET /mailer/.env HTTP/1.1" 404 189 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 47.128.242.71 - - [22/Aug/2026:20:05:27 +0200] "GET /mail/.env HTTP/1.1" 404 189 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" ... show less	Bad Web Bot
🇩🇪 seal	2026-08-22 17:34:40 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	SSH Brute-Force
🇺🇸 kosada.com	2026-08-22 13:53:37 (1 day ago)	Web vulnerability probing: /.env.test	Web App Attack
🇨🇭 🇨🇭 Hosting	2026-08-22 05:10:09 (1 day ago)	Automated WAF report: 400-500 blocked requests from this IP detected by our WAF.	Bad Web Bot Web App Attack
Anonymous	2026-08-22 05:04:48 (1 day ago)	(caddyscan) Scanner path probe from 47.128.242.71 (ec2-47-128-242-71.ap-southeast-1.compute.amazonaw ... show more (caddyscan) Scanner path probe from 47.128.242.71 (ec2-47-128-242-71.ap-southeast-1.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 47.128.242.71 - - [22/Aug/2026:05:04:42 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 47.128.242.71 - - [22/Aug/2026:05:04:42 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 47.128.242.71 - - [22/Aug/2026:05:04:43 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 47.128.242.71 - - [22/Aug/2026:05:04:43 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 47.128.242.71 - - [22/Aug/2026:05:04:43 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
Anonymous	2026-08-22 02:41:26 (1 day ago)	(caddyscan) Scanner path probe from 47.128.242.71 (ec2-47-128-242-71.ap-southeast-1.compute.amazonaw ... show more (caddyscan) Scanner path probe from 47.128.242.71 (ec2-47-128-242-71.ap-southeast-1.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 47.128.242.71 - - [22/Aug/2026:02:41:21 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 47.128.242.71 - - [22/Aug/2026:02:41:22 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 47.128.242.71 - - [22/Aug/2026:02:41:22 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 47.128.242.71 - - [22/Aug/2026:02:41:22 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 47.128.242.71 - - [22/Aug/2026:02:41:22 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
Anonymous	2026-08-21 15:04:20 (2 days ago)	(caddyscan) Scanner path probe from 47.128.242.71 (ec2-47-128-242-71.ap-southeast-1.compute.amazonaw ... show more (caddyscan) Scanner path probe from 47.128.242.71 (ec2-47-128-242-71.ap-southeast-1.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 47.128.242.71 - - [21/Aug/2026:15:04:15 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 47.128.242.71 - - [21/Aug/2026:15:04:15 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 47.128.242.71 - - [21/Aug/2026:15:04:15 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 47.128.242.71 - - [21/Aug/2026:15:04:16 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 47.128.242.71 - - [21/Aug/2026:15:04:16 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
🇩🇪 stalker.to	2025-05-23 10:20:09 (1 year ago)	Datacenter Proxy	Web Spam
🇩🇪 stalker.to	2025-05-22 14:41:59 (1 year ago)	Datacenter Proxy	Web Spam

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 211.159.163.92

🇮🇸 185.165.170.80

🇹🇷 185.22.185.4

🇺🇸 45.156.129.60

🇬🇧 35.203.210.18

🇵🇱 109.205.211.110

🇩🇪 82.165.124.43

🇺🇸 35.227.50.29

🇨🇳 220.250.52.94

🇱🇹 213.176.26.186

🇦🇺 103.208.219.38

🇲🇲 103.59.163.133

🇹🇷 94.154.43.125

🇨🇦 85.217.149.55

🇸🇪 51.12.221.15

🇳🇱 31.59.129.150

🇮🇷 217.60.255.130

🇦🇷 186.148.224.83

🇷🇺 178.178.194.128

🇺🇸 157.230.53.146