AbuseIPDB » 47.128.118.22

47.128.118.22 was found in our database!

This IP was reported 204 times. Confidence of Abuse is 30%: ?

30%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-118-22.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 47.128.118.22

Whois 47.128.118.22

IP Abuse Reports for 47.128.118.22:

This IP address has been reported a total of 204 times from 28 distinct sources. 47.128.118.22 was first reported on December 21st 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-12-17 12:42:06 (5 months ago)	Excessive crawling/scraping	Hacking Brute-Force
MAGIC	2024-12-12 10:08:41 (6 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2024-12-11 00:06:09 (6 months ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
selahattinalan	2024-11-29 07:59:08 (6 months ago)	47.128.118.22 - - [29/Nov/2024:10:59:07 +0300] "GET /index.php?limit=75&order=DESC&route=product%2Fs ... show more47.128.118.22 - - [29/Nov/2024:10:59:07 +0300] "GET /index.php?limit=75&order=DESC&route=product%2Fsearch&sort=p.model&tag=KR001 HTTP/2.0" 200 5925 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" show less	Brute-Force
MAGIC	2024-11-22 09:04:54 (6 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
MAGIC	2024-11-09 10:02:27 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
MAGIC	2024-11-03 13:02:53 (7 months ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
MAGIC	2024-10-31 08:10:20 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
rtbh.com.tr	2024-10-30 20:53:39 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
TPI-Abuse	2024-10-30 11:38:50 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.118.22 (ec2-47-128-118-22.ap-southeast-1 ... show more(mod_security) mod_security (id:210730) triggered by 47.128.118.22 (ec2-47-128-118-22.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 30 07:38:45.291724 2024] [security2:error] [pid 22332:tid 22332] [client 47.128.118.22:14852] [client 47.128.118.22] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.doctorc.net|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.doctorc.net"] [uri "/Labs/Lab21/IMAGES/Picasa.ini"] [unique_id "ZyIaxZ4suQ5gjBlSWTR18AAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
rtbh.com.tr	2024-10-29 20:53:40 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
hermawan	2024-10-29 11:27:49 (7 months ago)	[Tue Oct 29 06:23:12.614241 2024] [security2:error] [pid 201498:tid 130149381048000] [client 47.128. ... show more[Tue Oct 29 06:23:12.614241 2024] [security2:error] [pid 201498:tid 130149381048000] [client 47.128.118.22:35022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.7.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "59"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) request_line = GET /index.php/analisis-iklim/analisis-bulanan/analisis-tingkat-ketersediaan-air-tanah/555558744-analisis-bulanan-tingkat-ketersediaan-air-tanah-bulan-april-tahun-2021-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-bulanan/analisis-tingkat-ketersediaan-air-tanah/555558744-analisis-bulanan-tingkat-ketersediaan- ... show less	Hacking Web App Attack
Anonymous	2024-10-29 01:37:12 (7 months ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
ghostwarriors	2024-10-28 14:20:17 (7 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
ksol-hostmaster	2024-10-28 13:57:36 (7 months ago)	2024/10/28 14:57:35 [error] 52926#876873: *3412791 limiting requests, excess: 0.150 by zone "crawler ... show more2024/10/28 14:57:35 [error] 52926#876873: *3412791 limiting requests, excess: 0.150 by zone "crawler", client: 47.128.118.22, server: crxforum.ksol.io, request: "GET /showTopic.php?seed=65a9b891c5ec4&topicId=56 HTTP/2.0", host: "crxforum.ksol.io" ... show less	Bad Web Bot

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩