JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.31.166

47.128.31.166 was found in our database!

This IP was reported 308 times. Confidence of Abuse is 21%: ?

21%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-31-166.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.31.166

Whois 47.128.31.166

IP Abuse Reports for 47.128.31.166:

This IP address has been reported a total of 308 times from 44 distinct sources. 47.128.31.166 was first reported on August 17th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 palzer.IT	2026-09-23 15:31:15 (1 day ago)	Fail2ban automatic report for plesk-apache-badbot: 47.128.31.166 - - [23/Sep/2026:17:30:52 +0200] GE ... show more Fail2ban automatic report for plesk-apache-badbot: 47.128.31.166 - - [23/Sep/2026:17:30:52 +0200] GET /en/axial-full-cone-nozzles-customized-special-solutions.html [DOMAIN_REMOVED] 200 14461 - Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@[DOMAIN_REMOVED]) show less	Bad Web Bot
🇩🇪 palzer.IT	2026-09-13 09:14:05 (1 week ago)	Fail2ban automatic report for plesk-apache-badbot: 47.128.31.166 - - [13/Sep/2026:11:13:46 +0200] GE ... show more Fail2ban automatic report for plesk-apache-badbot: 47.128.31.166 - - [13/Sep/2026:11:13:46 +0200] GET /en/nozzles.html [DOMAIN_REMOVED] 200 33925 - Mozilla/5.0 (compatible; Bytespider; spider-feedback@[DOMAIN_REMOVED]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 LRob	2026-09-07 15:27:52 (2 weeks ago)	Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5 ... show more Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-fee \| path: /categorie/bilan-climatologique/ \| 2026-09-07 15:27 UTC show less	Bad Web Bot
🇩🇪 LRob	2026-09-07 09:08:03 (2 weeks ago)	Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5 ... show more Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-fee \| path: /normes-climatologiques-par-ville/ \| 2026-09-07 09:08 UTC show less	Bad Web Bot
🇩🇪 LRob	2026-09-07 03:57:38 (2 weeks ago)	Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5 ... show more Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-fee \| path: /adherer-association-meteo-centre/ \| 2026-09-07 03:57 UTC show less	Bad Web Bot
🇩🇪 LRob	2026-09-07 01:00:04 (2 weeks ago)	Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5 ... show more Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-fee \| path: /meteo-16-au-22-mars-2026-souvent-ensoleillee/ \| 2026-09-07 01:00 UTC show less	Bad Web Bot
🇩🇪 palzer.IT	2026-09-05 02:16:03 (2 weeks ago)	Fail2ban automatic report for plesk-apache-badbot: 47.128.31.166 - - [05/Sep/2026:04:15:48 +0200] GE ... show more Fail2ban automatic report for plesk-apache-badbot: 47.128.31.166 - - [05/Sep/2026:04:15:48 +0200] GET /en/axial-full-cone-nozzles-with-flange-series-vk-fl-dn80-dn400.html [DOMAIN_REMOVED] 200 15085 - Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@[DOMAIN_REMOVED]) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-31 19:00:05 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 47.128.31.166 (ec2-47-128-31-166.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.31.166 (ec2-47-128-31-166.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 14:59:56.211308 2026] [security2:error] [pid 15204:tid 15204] [client 47.128.31.166:41186] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.homebuilt.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.homebuilt.org"] [uri "/directory/[email protected]"] [unique_id "apXPLKIpJYtbip3_gLz5QgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-08-07 11:16:12 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇩🇪 Hazzard	2026-08-03 07:41:59 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇩🇪 Hazzard	2026-07-30 04:07:02 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-21 18:59:07 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.31.166 (ec2-47-128-31-166.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.31.166 (ec2-47-128-31-166.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 14:59:00.454002 2026] [security2:error] [pid 12478:tid 12478] [client 47.128.31.166:60472] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|homebuilt.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "homebuilt.org"] [uri "/directory/[email protected]"] [unique_id "al_BdNuAViD1jbfG0kMGAAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 librebit	2026-07-12 10:38:03 (2 months ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-06-12 07:08:52 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.31.166 (ec2-47-128-31-166.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.31.166 (ec2-47-128-31-166.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 03:08:47.333741 2026] [security2:error] [pid 13066:tid 13066] [client 47.128.31.166:11608] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.homebuilt.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.homebuilt.org"] [uri "/vendors/p&e/[email protected]"] [unique_id "aiuwfwgrTMuN1HOtlnmheQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2026-03-10 10:13:32 (6 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot

Showing 1 to 15 of 308 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 34.93.78.175

🇭🇰 219.79.4.2

🇭🇰 199.45.154.56

🇮🇳 185.100.212.141

🇧🇷 177.188.141.75

🇺🇸 174.67.188.35

🇺🇸 162.216.150.156

🇭🇰 156.225.20.213

🇻🇳 124.158.13.141

🇹🇼 101.13.5.39

🇺🇸 64.202.191.109

🇱🇹 62.60.130.242

🇺🇸 40.124.168.247

🇧🇪 34.62.18.127

🇨🇴 190.61.43.220

🇺🇦 176.120.111.150

🇸🇪 83.216.111.153

🇻🇳 58.186.20.143

🇧🇪 34.77.9.229

🇧🇪 207.175.34.146