JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.113.111

47.128.113.111 was found in our database!

This IP was reported 231 times. Confidence of Abuse is 21%: ?

21%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-113-111.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.113.111

Whois 47.128.113.111

IP Abuse Reports for 47.128.113.111:

This IP address has been reported a total of 231 times from 37 distinct sources. 47.128.113.111 was first reported on December 24th 2023, and the most recent report was 58 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-03 19:23:04 (58 minutes ago)	(mod_security) mod_security (id:210730) triggered by 47.128.113.111 (ec2-47-128-113-111.ap-southeast ... show more (mod_security) mod_security (id:210730) triggered by 47.128.113.111 (ec2-47-128-113-111.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 15:23:00.049464 2026] [security2:error] [pid 30651:tid 30651] [client 47.128.113.111:56990] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.ozkanturker.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ozkanturker.com"] [uri "/makaleler/Thumbs.db"] [unique_id "akgMFIr-xDR8K2JicAf1awAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇳 dineshskt4all	2026-07-01 11:39:04 (2 days ago)	47.128.113.111 - - [01/Jul/2026:11:38:55 +0000] "GET /robots.txt HTTP/1.1" 200 118 "-" "Mozilla/5.0 ... show more 47.128.113.111 - - [01/Jul/2026:11:38:55 +0000] "GET /robots.txt HTTP/1.1" 200 118 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" ... show less	IoT Targeted
🇪🇸 masterguru	2026-06-19 07:45:07 (2 weeks ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇪🇸 masterguru	2026-03-31 02:23:29 (3 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇪🇸 masterguru	2026-03-24 09:41:54 (3 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇪🇸 masterguru	2026-03-17 07:04:56 (3 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇨🇭 backslash	2026-03-02 21:12:07 (4 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇪🇸 librebit	2026-02-09 09:47:15 (4 months ago)	Brute force	Brute-Force
🇪🇸 librebit	2026-01-19 12:18:30 (5 months ago)	Brute force	Brute-Force
🇪🇸 librebit	2026-01-13 05:08:51 (5 months ago)	Brute force	Brute-Force
🇩🇪 Didier Lagaert	2025-12-24 09:17:42 (6 months ago)	lie-88 : Bloc AI bots=>/component/jevents/evenementsparsemaine/2029/7/30/-?Itemid=950(Bytespider)	Hacking
🇮🇹 VHosting	2025-12-23 20:50:13 (6 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇨🇦 1gz	2025-12-14 21:18:21 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 dbmwebdesign	2025-12-02 04:05:32 (7 months ago)	Bot detected and blocked by Fail2Ban in bytespider jail	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-01 22:50:57 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.113.111 (ec2-47-128-113-111.ap-southeast ... show more (mod_security) mod_security (id:210730) triggered by 47.128.113.111 (ec2-47-128-113-111.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 01 18:50:52.928497 2025] [security2:error] [pid 9234:tid 9234] [client 47.128.113.111:10366] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.chicagowca.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.chicagowca.com"] [uri "/[email protected]"] [unique_id "aQaOzMhqcOEYVerNm4ZTUgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 231 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.114

🇹🇼 198.235.24.51

🇧🇷 186.208.74.116

🇦🇷 181.28.101.14

🇦🇷 181.26.86.70

🇩🇪 167.94.145.22

🇯🇵 152.32.202.244

🇨🇳 119.6.246.190

🇷🇴 92.118.39.57

🇺🇸 66.132.186.190

🇦🇲 62.89.29.174

🇫🇷 51.38.12.22

🇭🇰 47.238.176.109

🇺🇸 34.148.143.234

🇺🇸 216.239.38.223

🇧🇷 191.53.13.8

🇧🇴 181.188.178.53

🇺🇸 172.253.9.144

🇳🇱 91.92.40.4

🇨🇳 47.108.214.29