JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.131.248.86

47.131.248.86 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 49%: ?

49%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-131-248-86.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.131.248.86

Whois 47.131.248.86

IP Abuse Reports for 47.131.248.86:

This IP address has been reported a total of 12 times from 7 distinct sources. 47.131.248.86 was first reported on July 29th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-29 22:05:17 (4 hours ago)	Auto-ban: >3000 req/min op 2026-07-29	Web App Attack SSH Hacking
🇫🇷 masterguru	2026-07-29 12:22:13 (13 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-29 11:05:25 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 47.131.248.86 (ec2-47-131-248-86.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 47.131.248.86 (ec2-47-131-248-86.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 07:05:16.000338 2026] [security2:error] [pid 2789286:tid 2789286] [client 47.131.248.86:57310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ossinatm.pierrebastin.com"] [uri "/.git/config"] [unique_id "amneayt15FfZ_cwGbQwJcQAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-07-29 10:17:29 (15 hours ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
Anonymous	2026-07-29 09:58:15 (16 hours ago)	Automated Apache suspicious-path probe detected in last 15m: hits=204; wp-login_hits=0; url=/.git/co ... show more Automated Apache suspicious-path probe detected in last 15m: hits=204; wp-login_hits=0; url=/.git/config\|/.env.production\|/.env.staging\|/.env.local\|/.env.development\|/.env.test\|/.env\|/.env.backup\|(+196 more) show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-29 09:09:27 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 47.131.248.86 (ec2-47-131-248-86.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 47.131.248.86 (ec2-47-131-248-86.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 05:09:24.049091 2026] [security2:error] [pid 3530294:tid 3530294] [client 47.131.248.86:49412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.osmanbozkurt.pist.org.tr"] [uri "/.git/config"] [unique_id "amnDRCqYRnzLbfllob_d3gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-29 08:40:45 (17 hours ago)	Automated Apache suspicious-path probe detected in last 15m: hits=204; wp-login_hits=0; url=/.git/co ... show more Automated Apache suspicious-path probe detected in last 15m: hits=204; wp-login_hits=0; url=/.git/config\|/.env\|/.env.production\|/.env.staging\|/.env.local\|/.env.development\|/.env.test\|/.env.remote\|(+196 more) show less	Web App Attack
Anonymous	2026-07-29 08:24:48 (17 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
Anonymous	2026-07-29 07:49:14 (18 hours ago)	Automated Apache suspicious-path probe detected in last 1m: hits=11; wp-login_hits=0; uniq_paths=6	Web App Attack
🇺🇸 TPI-Abuse	2026-07-29 07:43:12 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 47.131.248.86 (ec2-47-131-248-86.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 47.131.248.86 (ec2-47-131-248-86.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 03:43:09.132656 2026] [security2:error] [pid 2935078:tid 2935078] [client 47.131.248.86:52806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oshkoshvolleyball.thinksite.net"] [uri "/.git/config"] [unique_id "ammvDfhG3lSjC7HW34Y1hAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-29 07:26:12 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 47.131.248.86 (ec2-47-131-248-86.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 47.131.248.86 (ec2-47-131-248-86.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 03:26:05.899418 2026] [security2:error] [pid 8889:tid 8889] [client 47.131.248.86:50952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oshawinfree.robtown.com"] [uri "/.git/config"] [unique_id "ammrDe44u1qACVP21IvaRAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-07-29 05:50:02 (20 hours ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.39.59.145

🇯🇵 219.104.129.25

🇺🇸 216.25.89.74

🇮🇳 152.52.15.213

🇭🇰 139.198.113.29

🇨🇳 115.230.33.175

🇮🇩 103.155.221.74

🇳🇱 93.123.109.35

🇦🇿 82.194.24.87

🇮🇩 69.5.7.218

🇧🇪 34.62.251.118

🇺🇸 3.130.168.2

🇳🇱 194.124.52.161

🇺🇸 192.3.176.32

🇸🇪 171.25.158.74

🇺🇸 167.99.155.75

🇩🇪 164.90.234.134

🇫🇮 147.185.133.149

🇺🇸 147.185.132.210

🇳🇱 91.92.42.195