JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.110.116

47.128.110.116 was found in our database!

This IP was reported 230 times. Confidence of Abuse is 17%: ?

17%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-110-116.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.110.116

Whois 47.128.110.116

IP Abuse Reports for 47.128.110.116:

This IP address has been reported a total of 230 times from 38 distinct sources. 47.128.110.116 was first reported on December 21st 2023, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 filstal.org	2026-07-07 22:54:56 (2 hours ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) show less	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-06-20 01:27:08 (2 weeks ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) show less	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-06-17 23:01:35 (2 weeks ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 08:09:09 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 47.128.110.116 (ec2-47-128-110-116.ap-southeast ... show more (mod_security) mod_security (id:210730) triggered by 47.128.110.116 (ec2-47-128-110-116.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 04:09:06.362194 2026] [security2:error] [pid 5227:tid 5227] [client 47.128.110.116:58298] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|celebritybikinigossip.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "celebritybikinigossip.com"] [uri "/2010/11/2119/thehollywoodgossip.com"] [unique_id "ajJWIiXilhhnOO9dTsweBAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 04:03:54 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 47.128.110.116 (ec2-47-128-110-116.ap-southeast ... show more (mod_security) mod_security (id:210492) triggered by 47.128.110.116 (ec2-47-128-110-116.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 00:03:47.206298 2026] [security2:error] [pid 20306:tid 20325] [client 47.128.110.116:23720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "certifiedebusinessconsultant.aafm.us"] [uri "/.htaccess"] [unique_id "aijiI57smSp7jsezLQaIQQAAAIU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 17:12:32 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 47.128.110.116 (ec2-47-128-110-116.ap-southeast ... show more (mod_security) mod_security (id:210730) triggered by 47.128.110.116 (ec2-47-128-110-116.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 13:12:28.910850 2026] [security2:error] [pid 10667:tid 10679] [client 47.128.110.116:55432] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|aafm.us\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aafm.us"] [uri "/gafm.org/http/charteredfinancialmanager.com"] [unique_id "ahXUfHP0k14TReU-ZbrbqgAAAMk"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-05-22 01:13:52 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇪🇸 masterguru	2026-05-08 08:43:38 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇩🇪 filstal.org	2026-05-06 20:39:30 (2 months ago)	Unauthorized web crawling detected: known aggressive crawler or bot activity identified in web acces ... show more Unauthorized web crawling detected: known aggressive crawler or bot activity identified in web access logs show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-28 04:34:12 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.110.116 (ec2-47-128-110-116.ap-southeast ... show more (mod_security) mod_security (id:210730) triggered by 47.128.110.116 (ec2-47-128-110-116.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 00:34:08.520432 2026] [security2:error] [pid 11480:tid 11588] [client 47.128.110.116:40614] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|aafm.us\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aafm.us"] [uri "/gafm.org/http/charteredfinancialmanager.com"] [unique_id "afA4wMG1LnN54crzeq6BbgAAAxI"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-04-21 12:48:59 (2 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇪🇸 masterguru	2026-03-29 21:54:00 (3 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇩🇪 filstal.org	2026-03-28 23:03:53 (3 months ago)	Aggressive Web Bot/Crawler - Multiple UA-switching detected.	Bad Web Bot
🇩🇪 filstal.org	2026-03-22 23:03:27 (3 months ago)	Aggressive Web Bot/Crawler - Multiple UA-switching detected.	Bad Web Bot
🇪🇸 librebit	2026-03-11 05:49:36 (3 months ago)	Brute force	Brute-Force

Showing 1 to 15 of 230 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 65.49.1.241

🇺🇸 178.128.144.159

🇺🇸 167.71.254.99

🇺🇸 146.88.240.178

🇨🇳 115.190.179.68

🇹🇷 94.154.43.116

🇫🇷 92.205.239.91

🇬🇧 87.236.176.97

🇩🇪 87.106.42.210

🇪🇸 82.223.49.127

🇧🇬 79.124.40.138

🇸🇬 47.84.140.139

🇬🇧 35.203.211.48

🇺🇸 240b:4002:14:9200:89d:8f4e:8a4f:96b9

🇬🇧 206.189.20.80

🇧🇷 187.21.171.20

🇺🇸 159.65.33.95

🇺🇸 146.88.240.138

🇺🇸 109.105.209.20