JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.63.131

47.128.63.131 was found in our database!

This IP was reported 299 times. Confidence of Abuse is 1%: ?

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-63-131.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.63.131

Whois 47.128.63.131

IP Abuse Reports for 47.128.63.131:

This IP address has been reported a total of 299 times from 38 distinct sources. 47.128.63.131 was first reported on September 16th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 masterguru	2026-08-03 05:44:51 (3 weeks ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇪🇸 masterguru	2026-06-15 02:50:32 (2 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇫🇷 bigorre.org	2026-03-05 13:09:49 (5 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇫🇷 bigorre.org	2026-03-02 16:18:37 (5 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇫🇷 bigorre.org	2026-02-26 17:35:05 (6 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇩🇪 dbmwebdesign	2026-02-14 09:45:39 (6 months ago)	Bot detected and blocked by Fail2Ban in bytespider jail	Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-09 02:45:53 (6 months ago)	(mod_security) mod_security (id:211190) triggered by 47.128.63.131 (ec2-47-128-63-131.ap-southeast-1 ... show more (mod_security) mod_security (id:211190) triggered by 47.128.63.131 (ec2-47-128-63-131.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 21:45:48.041804 2026] [security2:error] [pid 16564:tid 16564] [client 47.128.63.131:46332] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|heuristicbooks.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /Heuristic Books -- Algorithms for Better Living_files/ccx/?dir=%2Fhome%2Frbanis%2Fetc%2Fearlyeditionsbooks.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heuristicbooks.com"] [uri "/Heuristic Books -- Algorithms for Better Living_files/ccx/"] [unique_id "aYlKXDgMEsoVO2wWFu6L0QAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-01-14 18:09:57 (7 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇩🇪 Reinhard	2026-01-10 09:20:15 (7 months ago)	Unknown activity, but too many attacks with too many users.	Hacking
🇺🇸 TPI-Abuse	2026-01-06 19:50:22 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.63.131 (ec2-47-128-63-131.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.63.131 (ec2-47-128-63-131.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 06 14:50:17.270021 2026] [security2:error] [pid 4700:tid 4700] [client 47.128.63.131:16156] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|med-engineering.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "med-engineering.com"] [uri "/levotas.com"] [unique_id "aV1nebcKjaFs45Ub2168QQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-12-09 01:17:04 (8 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-11-29 08:21:50 (8 months ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-10-23 12:21:05 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 47.128.63.131 (ec2-47-128-63-131.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 47.128.63.131 (ec2-47-128-63-131.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 08:21:01.451378 2025] [security2:error] [pid 10583:tid 10583] [client 47.128.63.131:21574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.heuristicbooks.com"] [uri "/Heuristic%20Books%20--%20Algorithms%20for%20Better%20Living_files/ccx/"] [unique_id "aPodrWsXHzmsgnOEGtJgNAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-08 11:50:30 (10 months ago)	Excessive crawling/scraping	Hacking Brute-Force
🇫🇷 bigorre.org	2025-09-20 11:46:54 (11 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot

Showing 1 to 15 of 299 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 172.71.122.211

🇲🇽 158.23.147.79

🇺🇸 66.132.172.146

🇫🇷 172.69.222.82

🇨🇦 158.51.222.6

🇫🇷 91.231.89.139

🇲🇾 202.165.26.42

🇺🇸 198.54.120.148

🇩🇪 193.27.14.243

🇫🇷 172.69.222.83

🇵🇱 109.205.211.110

🇮🇳 106.201.232.211

🇳🇱 81.19.216.86

🇩🇪 69.5.169.179

🇬🇧 62.60.130.253

🇺🇸 52.165.92.144

🇩🇰 212.60.125.177

🇧🇪 198.235.24.231

🇺🇸 184.105.139.80

🇺🇸 143.42.173.60