JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.120.216

47.128.120.216 was found in our database!

This IP was reported 274 times. Confidence of Abuse is 17%: ?

17%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-120-216.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.120.216

Whois 47.128.120.216

IP Abuse Reports for 47.128.120.216:

This IP address has been reported a total of 274 times from 44 distinct sources. 47.128.120.216 was first reported on December 28th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇾 Rizzy	2026-07-03 12:14:26 (1 day ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-06-25 16:54:41 (1 week ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-06-20 02:30:00 (2 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇳🇿 Antinson	2026-06-05 02:34:41 (4 weeks ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇮🇩 hermawan	2026-06-01 08:02:47 (1 month ago)	[Mon Jun 01 15:01:25.017492 2026] [security2:error] [pid 1732918:tid 140109862110912] [client 47.128 ... show more [Mon Jun 01 15:01:25.017492 2026] [security2:error] [pid 1732918:tid 140109862110912] [client 47.128.120.216:20592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "254"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim"] [unique_id "ah08VaK_L9vpkpzEqZUAogAA2Ak"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1732928] [pJPXmaxzA+E] [ah08Va ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-01 07:38:31 (1 month ago)	[Mon Jun 01 14:38:28.777738 2026] [security2:error] [pid 1716806:tid 140319076087488] [client 47.128 ... show more [Mon Jun 01 14:38:28.777738 2026] [security2:error] [pid 1716806:tid 140319076087488] [client 47.128.120.216:60906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "254"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim"] [unique_id "ah029NjVEindx72DszMaOwAA1Ao"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1716817] [uuLPR2zwmak] [ah029N ... show less	Email Spam Hacking
🇲🇾 Rizzy	2026-05-20 14:09:22 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-04-24 23:12:31 (2 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-04-20 17:23:24 (2 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇮🇩 hermawan	2026-04-20 14:34:04 (2 months ago)	[Mon Apr 20 21:33:12.340755 2026] [security2:error] [pid 279562:tid 139640704042688] [client 47.128. ... show more [Mon Apr 20 21:33:12.340755 2026] [security2:error] [pid 279562:tid 139640704042688] [client 47.128.120.216:39370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "295"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-anomali-suhu-udara/555562706-infografis-bulanan-anomali-suhu-udara-bulan-desember-tahun-2025-di-bmkg-stasiun-klimatologi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-anomali-suhu-udara ... show less	Email Spam Hacking
🇮🇳 dineshskt4all	2026-04-13 11:53:00 (2 months ago)	47.128.120.216 - - [13/Apr/2026:11:52:58 +0000] "GET / HTTP/1.0" 200 5234 "-" "Mozilla/5.0 (Linux; A ... show more 47.128.120.216 - - [13/Apr/2026:11:52:58 +0000] "GET / HTTP/1.0" 200 5234 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected])" ... show less	IoT Targeted
🇩🇪 conseilgouz	2026-04-12 12:34:12 (2 months ago)	vee-88 : Bloc AI bots=>/cookies(TikTokSpider)	Hacking
Anonymous	2026-04-11 21:58:30 (2 months ago)	Reported from Nginx log analysis 18. Log: 47.128.120.216 - - [11/Apr/2026:xx:xx:xx 0200] "GET /spac ... show more Reported from Nginx log analysis 18. Log: 47.128.120.216 - - [11/Apr/2026:xx:xx:xx 0200] "GET /space/ HTTP/2.0" xxx xxx "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected])" "-" "SG Singapore Singapore" "AS16509" "Amazon.com, Inc." show less	Port Scan Brute-Force SSH
🇮🇩 hermawan	2026-04-11 15:10:31 (2 months ago)	1775920222.719310 47.128.120.216 103.166.156.58 42340_2-4-8-1-3_1460_10 2026-04-11 22:10:22 WIB ...	Email Spam Hacking
🇪🇸 librebit	2026-04-11 05:24:53 (2 months ago)	Brute force	Brute-Force

Showing 1 to 15 of 274 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.238.160.104

🇺🇸 162.0.247.102

🇺🇸 64.62.156.84

🇬🇧 35.203.211.20

🇬🇧 35.203.211.15

🇯🇵 8.209.197.202

🇬🇧 2.57.17.190

🇵🇪 200.37.179.83

🇷🇸 178.149.90.154

🇨🇳 175.178.254.252

🇨🇳 113.219.177.95

🇺🇸 76.33.2.152

🇲🇽 189.146.40.238

🇺🇸 158.51.96.38

🇸🇪 4.223.135.162

🇨🇳 220.167.233.32

🇹🇬 196.170.47.56

🇺🇾 186.48.172.95

🇨🇳 122.96.28.16

🇺🇸 97.107.131.36