JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.120.211

47.128.120.211 was found in our database!

This IP was reported 273 times. Confidence of Abuse is 24%: ?

24%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-120-211.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.120.211

Whois 47.128.120.211

IP Abuse Reports for 47.128.120.211:

This IP address has been reported a total of 273 times from 49 distinct sources. 47.128.120.211 was first reported on December 24th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇾 Rizzy	2026-07-15 10:32:38 (1 day ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇪🇸 librebit	2026-06-21 21:49:57 (3 weeks ago)	Brute force	Brute-Force
Anonymous	2026-06-18 03:46:08 (4 weeks ago)	WEB attack	Brute-Force
🇺🇸 sandra361	2026-06-14 07:51:43 (1 month ago)	Port scan detected: 5 attempts across 1 ports (443). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=47.128 ... show more Port scan detected: 5 attempts across 1 ports (443). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=47.128.120.211 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=62494 DF PROTO=TCP SPT=30710 DPT=443 WINDOW=42340 RES=0x00 SYN URGP=0 show less	Port Scan
🇲🇾 Rizzy	2026-06-14 00:09:19 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-06-10 03:26:24 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇮🇩 hermawan	2026-06-01 13:47:41 (1 month ago)	[Mon Jun 01 20:39:40.653253 2026] [security2:error] [pid 162826:tid 140305536837312] [client 47.128. ... show more [Mon Jun 01 20:39:40.653253 2026] [security2:error] [pid 162826:tid 140305536837312] [client 47.128.120.211:53872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "254"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561307-infografis-perubahan-iklim-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561307-infografis-perubahan-iklim-jawa-timur"] [unique_id "ah2LnNIKa758IvlcP9RkKgABTxE"] [staklim-jatim.bmkg.go.id] [staklim-ja ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-01 06:40:02 (1 month ago)	[Mon Jun 01 13:39:31.353784 2026] [security2:error] [pid 1690072:tid 140650042324672] [client 47.128 ... show more [Mon Jun 01 13:39:31.353784 2026] [security2:error] [pid 1690072:tid 140650042324672] [client 47.128.120.211:16566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "254"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /Prakicu_Mingguan_Malang_Batu-v1.html HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/Prakicu_Mingguan_Malang_Batu-v1.html"] [unique_id "ah0pI4ZkCoJAfy4GZxm4pQAATQs"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1690115] [mx73dKtvhNo] [ah0pI4ZkCoJAfy4GZxm4pQAATQs] keep_alive=[1] [2026-06-01 13:39:31.353788] [R:ah0pI4ZkCoJAfy4GZxm4pQAATQs] UA:'M ... show less	Email Spam Hacking
🇲🇾 Rizzy	2026-05-23 23:29:08 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-05-04 01:39:42 (2 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2026-04-25 03:56:47 (2 months ago)	Reported from Nginx log analysis 18. Log: 47.128.120.211 - - [25/Apr/2026:xx:xx:xx 0200] "GET /2022 ... show more Reported from Nginx log analysis 18. Log: 47.128.120.211 - - [25/Apr/2026:xx:xx:xx 0200] "GET /2022/10/11/hungarys-cave-bath-falls-into-soaring-gas-prices-in-a-land-of-spas/ HTTP/2.0" xxx xxx "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected])" "-" "SG Singapore Singapore" "AS16509" "Amazon.com, Inc." show less	Port Scan Brute-Force SSH
🇮🇩 hermawan	2026-04-23 09:03:00 (2 months ago)	1776934869.497182 47.128.120.211 103.166.156.58 42340_2-4-8-1-3_1460_10 2026-04-23 16:01:09 WIB ...	Email Spam Hacking
🇩🇪 ghostwarriors	2026-04-21 20:50:13 (2 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2026-04-21 01:18:22 (2 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-04-12 06:15:24 (3 months ago)	[Sun Apr 12 13:15:24.094958 2026] [security2:error] [pid 463417:tid 140136510904000] [client 47.128. ... show more [Sun Apr 12 13:15:24.094958 2026] [security2:error] [pid 463417:tid 140136510904000] [client 47.128.120.211:62842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "293"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/akar?start=6500 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/akar"] [unique_id "ads4e8nDSVOYC77FpNB1SAAAmAI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[463420] [+LCfSr1hBB0] [ads4e8nDSVOYC77FpNB1SAAAmAI] keep_alive=[1] [2026-04-12 13:15:24.095218] ... show less	Email Spam Hacking

Showing 1 to 15 of 273 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.133

🇻🇳 103.75.183.177

🇺🇸 2600:3c02::2000:d5ff:fe7c:c42f

🇺🇸 216.218.206.91

🇧🇷 185.100.215.213

🇨🇳 124.70.197.157

🇷🇴 92.223.15.15

🇵🇱 89.67.37.52

🇫🇷 85.217.140.16

🇳🇿 45.133.7.70

🇱🇾 41.254.48.165

🇯🇵 8.216.5.47

🇧🇷 164.152.250.192

🇮🇳 106.201.76.203

🇨🇳 101.67.139.3

🇨🇦 85.217.149.56

🇫🇷 80.241.208.173

🇮🇪 54.247.193.21

🇧🇷 45.239.238.119

🇮🇩 36.95.17.223