JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.25.103

47.128.25.103 was found in our database!

This IP was reported 266 times. Confidence of Abuse is 4%: ?

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-25-103.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.25.103

Whois 47.128.25.103

IP Abuse Reports for 47.128.25.103:

This IP address has been reported a total of 266 times from 50 distinct sources. 47.128.25.103 was first reported on August 17th 2023, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-07-18 14:29:18 (23 hours ago)	Bad Web Bot	DDoS Attack Bad Web Bot
🇫🇷 bigorre.org	2026-03-02 16:17:38 (4 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇪🇸 librebit	2026-02-15 03:08:11 (5 months ago)	Brute force	Brute-Force
🇫🇷 bigorre.org	2026-02-14 16:19:57 (5 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇫🇷 conseilgouz	2026-02-10 10:56:21 (5 months ago)	sae-88 : Bloc AI bots=>/vie-municipale/compte-rendu-conseil-municipal/compte-rendu-conseil-municipal ... show more sae-88 : Bloc AI bots=>/vie-municipale/compte-rendu-conseil-municipal/compte-rendu-conseil-municipal-2022(Bytespider) show less	Hacking
🇫🇷 bigorre.org	2026-02-06 16:25:05 (5 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2026-01-31 10:01:51 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.25.103 (ec2-47-128-25-103.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.25.103 (ec2-47-128-25-103.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 31 05:01:46.533943 2026] [security2:error] [pid 16931:tid 16931] [client 47.128.25.103:10416] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "aX3TClOD6119hdtpHQlm6AAAAAg"], referer: http://www.civilwarzone.com/GeorgeMcClellan.html show less	Brute-Force Bad Web Bot Web App Attack
🇦🇷 RocketEmi	2026-01-23 01:37:42 (5 months ago)	Repeated access attempts from blocked IP after being denied. Behavior consistent with brute-force or ... show more Repeated access attempts from blocked IP after being denied. Behavior consistent with brute-force or persistent unauthorized probing. show less	Hacking
🇦🇷 RocketEmi	2026-01-17 11:04:19 (6 months ago)	Automated web crawling detected: high request rate, scraping multiple pages. Behavior consistent wit ... show more Automated web crawling detected: high request rate, scraping multiple pages. Behavior consistent with Bad Web Bot. show less	Bad Web Bot
🇩🇪 BlueWire Hosting	2026-01-10 08:25:36 (6 months ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-19 21:20:04 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.25.103 (ec2-47-128-25-103.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.25.103 (ec2-47-128-25-103.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 19 16:19:59.178026 2025] [security2:error] [pid 7053:tid 7053] [client 47.128.25.103:12132] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|home.agingworkforcenews.com\|F\|2"] [data ".employmentguide.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "home.agingworkforcenews.com"] [uri "/www.EmploymentGuide.com"] [unique_id "aUXBfwoEhjz7uHSC8vCOMAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇷 RocketEmi	2025-11-17 07:08:35 (8 months ago)	Repeated access attempts from blocked IP after being denied. Behavior consistent with brute-force or ... show more Repeated access attempts from blocked IP after being denied. Behavior consistent with brute-force or persistent unauthorized probing. show less	Hacking
🇦🇷 RocketEmi	2025-10-28 12:47:53 (8 months ago)	Automated web crawling detected: high request rate, scraping multiple pages. Behavior consistent wit ... show more Automated web crawling detected: high request rate, scraping multiple pages. Behavior consistent with Bad Web Bot. show less	Bad Web Bot
🇮🇳 dineshskt4all	2025-10-13 00:45:06 (9 months ago)	47.128.25.103 - - [13/Oct/2025:00:45:04 +0000] "GET /index.php?limit=50&order=DESC&path=80_90&produc ... show more 47.128.25.103 - - [13/Oct/2025:00:45:04 +0000] "GET /index.php?limit=50&order=DESC&path=80_90&product_id=164&route=product%2Fproduct&sort=p.model HTTP/1.0" 200 17111 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" ... show less	IoT Targeted
Anonymous	2025-10-12 10:17:33 (9 months ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 266 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.230.189.189

🇮🇳 182.95.181.166

🇨🇳 180.184.176.74

🇻🇳 180.93.249.92

🇳🇱 160.119.69.14

🇨🇦 139.177.196.99

🇮🇩 103.101.193.38

🇨🇦 85.217.149.26

🇺🇸 64.62.156.13

🇷🇺 46.8.245.94

🇺🇸 45.61.121.18

🇻🇳 14.225.217.138

🇺🇸 8.228.67.159

🇳🇱 5.187.35.26

🇨🇦 4.206.92.183

🇸🇬 2a04:4e40:1700:0:ad1:a032:1dee:952d

🇹🇭 122.154.235.21

🇺🇸 104.239.80.188

🇨🇳 101.126.89.164

🇹🇷 94.154.43.56