JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.113.9

47.128.113.9 was found in our database!

This IP was reported 260 times. Confidence of Abuse is 13%: ?

13%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-113-9.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.113.9

Whois 47.128.113.9

IP Abuse Reports for 47.128.113.9:

This IP address has been reported a total of 260 times from 36 distinct sources. 47.128.113.9 was first reported on December 18th 2023, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 bancix	2026-08-24 08:00:36 (18 hours ago)	Heimdall NIDS: Automatic ban triggered. Reason: RST_LIMIT_EXCEEDED (5/5)	Port Scan
🇩🇪 Hazzard	2026-08-18 02:12:36 (6 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇨🇭 backslash	2026-03-02 19:27:02 (5 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇫🇷 bigorre.org	2026-02-22 16:20:36 (6 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇪🇸 librebit	2026-02-09 04:41:23 (6 months ago)	Brute force	Brute-Force
🇨🇦 1gz	2026-02-03 17:57:33 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/rrumbullaku-jep-doreheqjen-kryepolici-dorezon-detyren-neser-ja-nga-kush-pritet-te-zevendesohet/725454/ UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇪🇸 librebit	2026-02-03 14:18:48 (6 months ago)	Brute force	Brute-Force
🇨🇦 1gz	2026-01-21 01:51:26 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /sport/video-dy-gola-per-tre-minuta-futbollisti-qe-la-kosoven-per-shqiperine-shkelqen-ndaj-ukrainasve/851880/ UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇯🇵 beon	2026-01-06 03:10:00 (7 months ago)	This IP performed automated reconnaissance and vulnerability scanning against my server on 2026-01-0 ... show more This IP performed automated reconnaissance and vulnerability scanning against my server on 2026-01-05T05:37:33Z UTC. They probe with several queries using various strings. The query was c=aDRlQysyU2hwU1NhMnkrZXZ5T0pMUT09%5Dh%5BBVATDXQNwy46kVFHD7KiA%5Dl%5B%5Dl%5B&d=yg. This single IP isn't particularly active, but when viewed as a group 47.128.64.0/18, it becomes very active. 47.128.64.0/18 is clearly malicious and should be blocked or blacklisted. show less	Bad Web Bot Web App Attack
🇩🇪 Reinhard	2025-12-21 15:27:14 (8 months ago)	Unknown activity, but too many attacks with too many users.	Hacking
🇮🇩 hermawan	2025-12-13 00:49:52 (8 months ago)	[Sat Dec 13 07:49:51.828408 2025] [security2:error] [pid 238773:tid 139803667740352] [client 47.128. ... show more [Sat Dec 13 07:49:51.828408 2025] [security2:error] [pid 238773:tid 139803667740352] [client 47.128.113.9:23142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "253"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat"] [unique_id "aTy4L2Ig_-bqvcP1ro4TBAADAQA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmk ... show less	Hacking Web App Attack
🇪🇸 masterguru	2025-12-09 01:45:31 (8 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇺🇸 xmission.com	2025-12-03 12:24:09 (8 months ago)	47.128.113.9 - - [03/Dec/2025:05:24:08 -0700] "GET /related/parenthood/page/453/?page=67 HTTP/2.0" 2 ... show more 47.128.113.9 - - [03/Dec/2025:05:24:08 -0700] "GET /related/parenthood/page/453/?page=67 HTTP/2.0" 200 12212 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.113.9 - - [03/Dec/2025:05:24:08 -0700] "GET /photos/leta/456.jpg HTTP/2.0" 404 548 "https://dooce.com/related/parenthood/page/453/?page=67" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.113.9 - - [03/Dec/2025:05:24:09 -0700] "GET /photos/leta/452.jpg HTTP/2.0" 404 548 "https://dooce.com/related/parenthood/page/453/?page=67" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.113.9 - - [03/Dec/2025:05:24:09 -0700] "GET /photos/leta/454.jpg HTTP/2.0" 404 548 "https://dooce.com/related/parenthood/page/453/?page=67" "Mozilla/5.0 (compatible; Byt ... show less	Bad Web Bot
Anonymous	2025-12-01 15:47:00 (8 months ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇸🇬 anotherwatcher	2025-11-27 21:28:29 (8 months ago)	bad bot	Bad Web Bot

Showing 1 to 15 of 260 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.139.93.67

🇺🇸 170.187.147.182

🇺🇸 146.168.63.66

🇺🇸 146.88.240.182

🇨🇳 118.81.202.166

🇫🇷 91.231.89.40

🇫🇷 91.196.152.120

🇺🇸 64.57.129.41

🇲🇾 47.250.127.59

🇳🇱 195.178.110.227

🇧🇴 181.115.192.10

🇨🇳 119.181.21.237

🇫🇷 85.217.140.6

🇨🇳 59.34.17.130

🇺🇸 45.194.67.69

🇫🇷 2400:cb00:532:1000:e260:7c8e:d31d:70c5

🇬🇧 193.163.125.30

🇭🇰 118.193.44.112

🇺🇦 46.174.127.87

🇺🇸 45.43.57.63