JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.130.153.42

47.130.153.42 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 57%: ?

57%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-130-153-42.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.130.153.42

Whois 47.130.153.42

IP Abuse Reports for 47.130.153.42:

This IP address has been reported a total of 13 times from 9 distinct sources. 47.130.153.42 was first reported on July 16th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 screwlooseit.com.au	2026-07-18 08:13:42 (1 day ago)	Blocked by CSF 13 firewall - Rule: config-dotfile CA/Canada/ec2-47-130-153-42.ap-southeast-1.compute ... show more Blocked by CSF 13 firewall - Rule: config-dotfile CA/Canada/ec2-47-130-153-42.ap-southeast-1.compute.amazonaws.com show less	Web App Attack
🇳🇱 Mangelot Hosting	2026-07-18 07:19:38 (1 day ago)	(modsecurity) srv103 ModSecurity 47.130.153.42 (SG/Singapore/ec2-47-130-153-42.ap-southeast-1.comput ... show more (modsecurity) srv103 ModSecurity 47.130.153.42 (SG/Singapore/ec2-47-130-153-42.ap-southeast-1.compute.amazonaws.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 R.G.	2026-07-18 07:05:18 (1 day ago)	(ScanningForFiles) Scanning for files triggerd 47.130.153.42 (SG/Singapore/ec2-47-130-153-42.ap-sout ... show more (ScanningForFiles) Scanning for files triggerd 47.130.153.42 (SG/Singapore/ec2-47-130-153-42.ap-southeast-1.compute.amazonaws.com): 10 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
Anonymous	2026-07-18 05:01:22 (1 day ago)	(caddyscan) Scanner path probe from 47.130.153.42 (SG/Singapore/ec2-47-130-153-42.ap-southeast-1.com ... show more (caddyscan) Scanner path probe from 47.130.153.42 (SG/Singapore/ec2-47-130-153-42.ap-southeast-1.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 47.130.153.42 - - [18/Jul/2026:05:01:20 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 47.130.153.42 - - [18/Jul/2026:05:01:20 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 47.130.153.42 - - [18/Jul/2026:05:01:21 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 47.130.153.42 - - [18/Jul/2026:05:01:21 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 47.130.153.42 - - [18/Jul/2026:05:01:21 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
Anonymous	2026-07-18 02:43:17 (1 day ago)	(caddyscan) Scanner path probe from 47.130.153.42 (SG/Singapore/ec2-47-130-153-42.ap-southeast-1.com ... show more (caddyscan) Scanner path probe from 47.130.153.42 (SG/Singapore/ec2-47-130-153-42.ap-southeast-1.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 47.130.153.42 - - [18/Jul/2026:02:43:12 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 47.130.153.42 - - [18/Jul/2026:02:43:13 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 47.130.153.42 - - [18/Jul/2026:02:43:13 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 47.130.153.42 - - [18/Jul/2026:02:43:13 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 47.130.153.42 - - [18/Jul/2026:02:43:13 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
🇳🇱 Mangelot Hosting	2026-07-18 02:09:49 (1 day ago)	(modsecurity) srv104 ModSecurity 47.130.153.42 (SG/Singapore/ec2-47-130-153-42.ap-southeast-1.comput ... show more (modsecurity) srv104 ModSecurity 47.130.153.42 (SG/Singapore/ec2-47-130-153-42.ap-southeast-1.compute.amazonaws.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-18 01:48:50 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
Anonymous	2026-07-18 00:44:59 (1 day ago)	(caddyscan) Scanner path probe from 47.130.153.42 (SG/Singapore/ec2-47-130-153-42.ap-southeast-1.com ... show more (caddyscan) Scanner path probe from 47.130.153.42 (SG/Singapore/ec2-47-130-153-42.ap-southeast-1.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 47.130.153.42 - - [18/Jul/2026:00:44:56 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 47.130.153.42 - - [18/Jul/2026:00:44:56 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 47.130.153.42 - - [18/Jul/2026:00:44:56 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 47.130.153.42 - - [18/Jul/2026:00:44:57 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 47.130.153.42 - - [18/Jul/2026:00:44:57 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
🇳🇱 homeshowdomain.nl	2026-07-17 22:04:03 (2 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-16. show less	Web App Attack SSH Hacking
🇳🇱 Site.eu	2026-07-17 03:15:28 (2 days ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-07-17 00:33:38 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 47.130.153.42 (ec2-47-130-153-42.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 47.130.153.42 (ec2-47-130-153-42.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 20:33:32.745111 2026] [security2:error] [pid 37607:tid 37607] [client 47.130.153.42:49752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jakeis.link.greenlight.us"] [uri "/.git/config"] [unique_id "all4XPIcE9EPtbtpka_QegAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nasset	2026-07-16 18:50:31 (3 days ago)	47.130.153.42 - - [16/Jul/2026:11:50:29 -0700] "GET /.env.yaml HTTP/1.1" 403 640 "-" "Mozilla/5.0 (M ... show more 47.130.153.42 - - [16/Jul/2026:11:50:29 -0700] "GET /.env.yaml HTTP/1.1" 403 640 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 47.130.153.42 - - [16/Jul/2026:11:50:29 -0700] "GET /.env.yml HTTP/1.1" 403 640 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 47.130.153.42 - - [16/Jul/2026:11:50:30 -0700] "GET /apps/.env HTTP/1.1" 403 6493 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 47.130.153.42 - - [16/Jul/2026:11:50:30 -0700] "GET /api/.env HTTP/1.1" 403 640 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 47.130.153.42 - - [16/Jul/2026:11:50:30 -0700] "GET /web/.env HTTP/1.1" 403 640 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13 ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 15:49:56 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 47.130.153.42 (ec2-47-130-153-42.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 47.130.153.42 (ec2-47-130-153-42.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 11:49:48.547693 2026] [security2:error] [pid 4475:tid 4525] [client 47.130.153.42:41756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "metabotic.com"] [uri "/.git/config"] [unique_id "alj9nKpsNiNYiGHljysf7QAAAJQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 66.78.32.242

🇸🇬 43.173.177.212

🇺🇸 35.212.132.244

🇲🇾 27.125.242.149

🇷🇴 193.46.255.86

🇵🇱 176.53.159.197

🇨🇳 123.160.192.224

🇮🇶 92.119.60.172

🇪🇸 79.112.31.58

🇨🇳 36.135.62.103

🇬🇧 34.39.87.128

🇨🇳 8.138.23.255

🇩🇪 217.160.254.235

🇧🇪 198.235.24.209

🇿🇦 197.185.149.214

🇮🇪 193.1.33.5

🇩🇪 185.242.3.195

🇹🇼 114.37.220.14

🇮🇩 103.118.82.254

🇷🇴 80.94.92.55