JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.120.158

47.128.120.158 was found in our database!

This IP was reported 286 times. Confidence of Abuse is 29%: ?

29%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-120-158.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.120.158

Whois 47.128.120.158

IP Abuse Reports for 47.128.120.158:

This IP address has been reported a total of 286 times from 46 distinct sources. 47.128.120.158 was first reported on December 19th 2023, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-07-11 05:25:42 (14 hours ago)	Brute force	Brute-Force
🇲🇾 Rizzy	2026-07-07 23:54:34 (3 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 etu brutus	2026-07-03 05:23:57 (1 week ago)	47.128.120.158 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-06-15 00:44:55 (3 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇹🇷 baku.hosting	2026-06-06 11:02:51 (1 month ago)	CSF Auto Report: (mod_security) mod_security (id:949110) triggered by 47.128.120.158 (ec2-47-128-120 ... show more CSF Auto Report: (mod_security) mod_security (id:949110) triggered by 47.128.120.158 (ec2-47-128-120-158.ap-southeast-1.compute.amazonaws.com): 5 in the last 3600 secs show less	Brute-Force Web App Attack
🇮🇩 hermawan	2026-06-01 08:02:51 (1 month ago)	[Mon Jun 01 15:01:25.057632 2026] [security2:error] [pid 1733029:tid 140109887289024] [client 47.128 ... show more [Mon Jun 01 15:01:25.057632 2026] [security2:error] [pid 1733029:tid 140109887289024] [client 47.128.120.158:55536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "254"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan"] [unique_id "ah08Vdf88vuWavwQVDCG9gAAhQY"] [staklim-jatim.bmkg.go.id] ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-01 07:29:43 (1 month ago)	[Mon Jun 01 14:29:40.668268 2026] [security2:error] [pid 1712291:tid 140318992160448] [client 47.128 ... show more [Mon Jun 01 14:29:40.668268 2026] [security2:error] [pid 1712291:tid 140318992160448] [client 47.128.120.158:35530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "254"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim"] [unique_id "ah005N7Yv6W1Ev5vTGWd5gAAgRU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1712369] [JolVKOyH268] [ah005N ... show less	Email Spam Hacking
🇲🇾 Rizzy	2026-05-14 05:56:03 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇦🇺 MAGIC	2026-05-09 02:18:39 (2 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2026-04-23 20:20:13 (2 months ago)	Reconnaissance (URL Enumeration)	Bad Web Bot
🇲🇾 Rizzy	2026-04-18 23:06:14 (2 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇮🇩 hermawan	2026-04-12 05:43:22 (2 months ago)	[Sun Apr 12 12:43:21.955844 2026] [security2:error] [pid 414800:tid 140136263169728] [client 47.128. ... show more [Sun Apr 12 12:43:21.955844 2026] [security2:error] [pid 414800:tid 140136263169728] [client 47.128.120.158:13554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "293"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa"] [unique_id "adsw-SGnTF1X1UzEFWZSOQABDgY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[414873] [+rUO2DyKhhw] [adsw-SGnTF1X1UzEFWZSOQABDgY] keep_alive= ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-04-09 02:16:44 (3 months ago)	1775700313.366452 47.128.120.158 103.166.156.58 42340_2-4-8-1-3_1460_10 2026-04-09 09:05:13 WIB ...	Email Spam Hacking
🇮🇩 hermawan	2026-04-06 06:37:53 (3 months ago)	1775457466.080833 47.128.120.158 103.166.156.58 42340_2-4-8-1-3_1460_10 2026-04-06 20:37:46 WIB ...	Email Spam Hacking
🇮🇩 hermawan	2026-04-05 12:24:52 (3 months ago)	1775391877.463933 CPbaUq3xumEJNdxFU7 47.128.120.158 46440 103.166.156.58 443 tcp - 3.033963 0 0 S0 F ... show more 1775391877.463933 CPbaUq3xumEJNdxFU7 47.128.120.158 46440 103.166.156.58 443 tcp - 3.033963 0 0 S0 F F 0 S 3 180 0 0 - 6 887695939238924_58 (empty) 42340_2-4-8-1-3_1460_10 (empty) 04/05/2026-19:24:37.463933 ... show less	Email Spam Hacking

Showing 1 to 15 of 286 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.93.89.9

🇷🇺 154.90.70.254

🇹🇷 94.154.43.177

🇺🇸 66.132.224.18

🇩🇪 64.226.126.224

🇩🇪 213.209.159.225

🇺🇸 205.210.31.35

🇭🇰 199.45.154.186

🇧🇪 198.235.24.199

🇧🇷 179.51.153.37

🇺🇸 162.216.150.245

🇪🇬 102.184.243.67

🇬🇧 86.173.47.52

🇫🇷 85.217.140.41

🇦🇷 190.221.50.122

🇳🇱 185.180.109.243

🇨🇳 120.48.90.166

🇸🇬 114.119.158.143

🇹🇼 101.13.5.33

🇶🇦 78.100.129.165