JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

47.128.120.17

Recent Activity

Abuse confidence score ?

35% Elevated

328 reports

53 reporters · latest 7 hours ago

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-120-17.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 47.128.120.17

This IP address has been reported a total of 328 times from 53 distinct sources. 47.128.120.17 was first reported on December 24th 2023, and the most recent report was 7 hours ago. In the last 60 days, the top reporter locations were: Indonesia with 12 reports; Malaysia with 3 reports; Germany with 2 reports. The most common categories in these recent reports were: Hacking 13 times; Email Spam 12 times; Web App Attack 5 times; Brute-Force 5 times; Bad Web Bot 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-09-29 02:24:19 (7 hours ago)	[Tue Sep 29 09:20:58.593820 2026] [security2:error] [pid 43691:tid 140027166172864] [client 47.128.1 ... show more [Tue Sep 29 09:20:58.593820 2026] [security2:error] [pid 43691:tid 140027166172864] [client 47.128.120.17:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/90- HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/90-"] [unique_id "arsgiiw5JLrN-iueYe9yPQAAAEw"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[43750] [vb5K1VWzjcs] [arsgiiw5JLrN-iueYe9yPQAAAEw] keep_alive=[0] [2026-09-29 09:20:58.593823] [R:arsgiiw5JLrN-iueYe9yPQAAAEw] UA:'Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHT ... show less	Email Spam Hacking
🇩🇪 ghostwarriors	2026-09-28 05:50:21 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇮🇩 hermawan	2026-09-28 03:27:22 (1 day ago)	Captured JA4H: ge11n_63cf1041adb5 \| Log: 47.128.120.17 - - [28/Sep/2026:10:25:08 +0700] "GET /index. ... show more Captured JA4H: ge11n_63cf1041adb5 \| Log: 47.128.120.17 - - [28/Sep/2026:10:25:08 +0700] "GET /index.php/prediksi-iklim/prediksi-musim-tiap-6-bulan-sekali/prediksi-musim-hujan/prediksi-durasi-musim-hujan HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected])" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry... ... show less	Email Spam Hacking
🇩🇪 filstal.org	2026-09-25 13:33:49 (3 days ago)	Bad bot activity detected (automated scraping/probing).	Bad Web Bot Web App Attack
🇮🇩 hermawan	2026-09-24 02:55:48 (5 days ago)	Captured JA4H: ge11n_63cf1041adb5 \| Log: 47.128.120.17 - - [24/Sep/2026:09:53:32 +0700] "GET /index. ... show more Captured JA4H: ge11n_63cf1041adb5 \| Log: 47.128.120.17 - - [24/Sep/2026:09:53:32 +0700] "GET /index.php/90-klimatologi/analisis-klimatologi/artikel-perubahan-iklim/126-artikel-perubahan-iklim HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected])" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry... ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-24 02:33:52 (5 days ago)	[Thu Sep 24 09:33:05.728676 2026] [security2:error] [pid 6179:tid 139649177511616] [client 47.128.12 ... show more [Thu Sep 24 09:33:05.728676 2026] [security2:error] [pid 6179:tid 139649177511616] [client 47.128.120.17:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/component/tags/tag/182 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/component/tags/tag/182"] [unique_id "arSL4TLEcFIDLBhvWwONBAAAAIE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[6236] [khBtazEtB7Y] [arSL4TLEcFIDLBhvWwONBAAAAIE] keep_alive=[0] [2026-09-24 09:33:05.728682] [R:arSL4TLEcFIDLBhvWwONBAAAAIE] UA:'Mozilla/5.0 (Linux; ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-24 01:34:20 (5 days ago)	[Thu Sep 24 08:34:15.709867 2026] [security2:error] [pid 11113:tid 139820428940992] [client 47.128.1 ... show more [Thu Sep 24 08:34:15.709867 2026] [security2:error] [pid 11113:tid 139820428940992] [client 47.128.120.17:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/analisis-bulanan-distribusi-curah-hujan-di-provinsi-jawa-timur-tahun-2026 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/analisis-bulanan-distribusi-curah-hujan-di-provinsi-jawa-timur-tahun-2026"] [unique_id "arR-F-zceLa7P23Eeox8WwAAAFQ"] [staklim-jatim.bmkg.go.id] [stakli ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-23 04:20:33 (6 days ago)	[Wed Sep 23 11:19:35.842138 2026] [security2:error] [pid 2184:tid 139977077814976] [client 47.128.12 ... show more [Wed Sep 23 11:19:35.842138 2026] [security2:error] [pid 2184:tid 139977077814976] [client 47.128.120.17:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim"] [unique_id "arNTVw39RZUBJs852snl1QAAAJU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[2353] [2hV3yh7zdk4] [arNTV ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-23 01:55:19 (6 days ago)	[Wed Sep 23 08:54:49.233805 2026] [security2:error] [pid 29319:tid 140714830620352] [client 47.128.1 ... show more [Wed Sep 23 08:54:49.233805 2026] [security2:error] [pid 29319:tid 140714830620352] [client 47.128.120.17:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim"] [unique_id "arMxaSH2k_-pEWX_jPRJ9gAAAIE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[29349] [IPazxBwJWNI] [arM ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-22 07:21:43 (1 week ago)	Captured JA4H: ge11n_63cf1041adb5 \| Log: 47.128.120.17 - - [22/Sep/2026:10:08:03 +0700] "GET /index. ... show more Captured JA4H: ge11n_63cf1041adb5 \| Log: 47.128.120.17 - - [22/Sep/2026:10:08:03 +0700] "GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected])" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry... ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-22 05:05:24 (1 week ago)	[Tue Sep 22 12:05:21.126258 2026] [security2:error] [pid 76013:tid 140303411435200] [client 47.128.1 ... show more [Tue Sep 22 12:05:21.126258 2026] [security2:error] [pid 76013:tid 140303411435200] [client 47.128.120.17:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561495-infografis-waspada-cuaca-ekstrem-di-masa-pancaroba HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561495-infografis-waspada-cuaca-ekstrem-di-masa-pancaroba"] [unique_id "arIMkeYlsZZVJDFk7VPM1QAAANU"] [staklim-jatim.bmk ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-22 03:39:04 (1 week ago)	[Tue Sep 22 10:39:03.905374 2026] [security2:error] [pid 35918:tid 140304317388480] [client 47.128.1 ... show more [Tue Sep 22 10:39:03.905374 2026] [security2:error] [pid 35918:tid 140304317388480] [client 47.128.120.17:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/analisis-klimatologi?start=1500 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/analisis-klimatologi"] [unique_id "arH4V7BlNJd9BKQ9-h5jXwAAAIw"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[35975] [ZU6rG8pGNlU] [arH4V7BlNJd9BKQ9-h5jXwAAAIw] keep_alive=[0] [202 ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-22 01:57:45 (1 week ago)	[Tue Sep 22 08:57:43.799352 2026] [security2:error] [pid 49813:tid 139779911972544] [client 47.128.1 ... show more [Tue Sep 22 08:57:43.799352 2026] [security2:error] [pid 49813:tid 139779911972544] [client 47.128.120.17:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "273"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspa ... show less	Email Spam Hacking
🇲🇾 Rizzy	2026-09-20 05:16:33 (1 week ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇮🇩 hermawan	2026-09-19 15:45:12 (1 week ago)	[Sat Sep 19 22:45:07.285184 2026] [security2:error] [pid 225092:tid 140665174243008] [client 47.128. ... show more [Sat Sep 19 22:45:07.285184 2026] [security2:error] [pid 225092:tid 140665174243008] [client 47.128.120.17:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "273"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan"] [unique_id "aq6uA64_W6LaBJbwB19j7gAAAIM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[225184] [upq55 ... show less	Email Spam Hacking

Showing 1 to 15 of 328 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 200.92.188.108

🇹🇼 198.235.24.104

🇺🇸 172.59.84.56

🇻🇳 123.19.115.94

🇷🇴 84.232.178.186

🇺🇸 71.6.233.253

🇸🇬 47.79.198.106

🇸🇬 47.79.197.161

🇸🇬 47.79.197.65

🇸🇬 47.79.196.240

🇵🇰 39.39.104.243

🇺🇸 34.60.122.71

🇨🇳 27.11.199.165

🇭🇰 2401:2660:216:70ad:fe94:900b:f2ce:f27

🇹🇼 198.235.24.54

🇧🇷 177.137.216.224

🇺🇸 162.158.154.173

🇨🇳 139.227.161.110

🇨🇦 137.184.171.122

🇨🇳 117.13.170.158