JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.120.227

47.128.120.227 was found in our database!

This IP was reported 283 times. Confidence of Abuse is 27%: ?

27%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-120-227.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.120.227

Whois 47.128.120.227

IP Abuse Reports for 47.128.120.227:

This IP address has been reported a total of 283 times from 48 distinct sources. 47.128.120.227 was first reported on December 24th 2023, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-09-24 02:54:43 (16 hours ago)	Captured JA4H: ge11n_63cf1041adb5 \| Log: 47.128.120.227 - - [24/Sep/2026:09:51:15 +0700] "GET /index ... show more Captured JA4H: ge11n_63cf1041adb5 \| Log: 47.128.120.227 - - [24/Sep/2026:09:51:15 +0700] "GET /index.php/profil/meteorologi/list-of-all-tags/4511 HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected])" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry... ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-24 01:27:53 (17 hours ago)	[Thu Sep 24 08:27:48.627425 2026] [security2:error] [pid 2345:tid 139820806416064] [client 47.128.12 ... show more [Thu Sep 24 08:27:48.627425 2026] [security2:error] [pid 2345:tid 139820806416064] [client 47.128.120.227:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/90-klimatologi/analisis-klimatologi/artikel-perubahan-iklim/126-artikel-perubahan-iklim HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/90-klimatologi/analisis-klimatologi/artikel-perubahan-iklim/126-artikel-perubahan-iklim"] [unique_id "arR8lAB-j0BXfKoO3nKCMgAAAJc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[2654] [R9XygbCCc+Y] ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-23 05:05:04 (1 day ago)	[Wed Sep 23 12:05:00.378594 2026] [security2:error] [pid 29823:tid 139977656616640] [client 47.128.1 ... show more [Wed Sep 23 12:05:00.378594 2026] [security2:error] [pid 29823:tid 139977656616640] [client 47.128.120.227:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "arNd_GnQ-FYzPt9AmbFyFQAAAIo"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[29899] [zTbcbF9HRUw] [arNd_GnQ-FYzPt9AmbFyFQAAAIo] keep_alive=[0] [2026-09-23 12:05:00.378598] [R:arNd_GnQ-FYzPt9AmbFyFQAAAIo] UA:'Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, lik ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-23 02:31:40 (1 day ago)	[Wed Sep 23 09:31:35.543367 2026] [security2:error] [pid 52149:tid 140714553874112] [client 47.128.1 ... show more [Wed Sep 23 09:31:35.543367 2026] [security2:error] [pid 52149:tid 140714553874112] [client 47.128.120.227:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "arM6B89VR8azeXujNeXZbQAAAIk"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[52185] [W5M1SB29XtA] [arM6B89VR8azeXujNeXZbQAAAIk] keep_alive=[0] [2026-09-23 09:31:35.543370] [R:arM6B89VR8azeXujNeXZbQAAAIk] UA:'Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Sa ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-22 08:00:56 (2 days ago)	Captured JA4H: ge11n_63cf1041adb5 \| Log: 47.128.120.227 - - [22/Sep/2026:14:58:53 +0700] "GET /index ... show more Captured JA4H: ge11n_63cf1041adb5 \| Log: 47.128.120.227 - - [22/Sep/2026:14:58:53 +0700] "GET /index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected])" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry... ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-22 05:48:26 (2 days ago)	[Tue Sep 22 12:48:25.747050 2026] [security2:error] [pid 95030:tid 140303528867520] [client 47.128.1 ... show more [Tue Sep 22 12:48:25.747050 2026] [security2:error] [pid 95030:tid 140303528867520] [client 47.128.120.227:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa"] [unique_id "arIWqa_e986bvN9tx1DxfQAAAJg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[95083] [kJtP6suNZlE] [arIWqa_e986bvN9tx1DxfQAAAJg] keep_alive=[0] [2 ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-22 04:05:20 (2 days ago)	[Tue Sep 22 11:05:19.360252 2026] [security2:error] [pid 46545:tid 140303294002880] [client 47.128.1 ... show more [Tue Sep 22 11:05:19.360252 2026] [security2:error] [pid 46545:tid 140303294002880] [client 47.128.120.227:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561307-infografis-perubahan-iklim-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561307-infografis-perubahan-iklim-jawa-timur"] [unique_id "arH-f6g6u_CQQ_sSAtKtPgAAAJQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.b ... show less	Email Spam Hacking
Anonymous	2026-09-22 00:55:15 (2 days ago)	IP matched detection query many 3xx errors.	Brute-Force
🇮🇩 hermawan	2026-09-19 17:07:22 (5 days ago)	[Sun Sep 20 00:07:18.845483 2026] [security2:error] [pid 36119:tid 140496850540224] [client 47.128.1 ... show more [Sun Sep 20 00:07:18.845483 2026] [security2:error] [pid 36119:tid 140496850540224] [client 47.128.120.227:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "273"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur"] [unique_id "aq7BRnrmN-NWdur-ypmZzgAAAMI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[36149] [/z2rDJnO1hA] [aq7BRnrmN-NWdu ... show less	Email Spam Hacking
🇲🇾 Rizzy	2026-08-28 02:46:57 (3 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇫🇷 claude CALVET	2026-08-22 03:44:32 (1 month ago)	gee-88 : Bloc AI bots=>/?filter_reset=1&id=4%3Agroupe-ciel&modjemcal_id=113&modjemcal_mo ... show more gee-88 : Bloc AI bots=>/?filter_reset=1&id=4%3Agroupe-ciel&modjemcal_id=113&modjemcal_month=6&modjemcal_year=877&task=archive(TikTokSpider) show less	Hacking
🇲🇾 Rizzy	2026-08-20 21:31:07 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-08-14 16:06:16 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-07-30 06:09:57 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇪🇸 librebit	2026-07-30 00:44:46 (1 month ago)	Brute force	Brute-Force

Showing 1 to 15 of 283 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 118.193.45.134

🇮🇷 85.198.19.251

🇺🇸 35.227.9.96

🇨🇳 14.154.35.168

🇧🇴 200.105.167.206

🇮🇳 122.187.230.250

🇷🇴 92.118.39.50

🇷🇺 78.155.213.21

🇺🇸 50.187.79.254

🇯🇵 35.221.84.92

🇺🇸 34.138.45.246

🇰🇷 34.47.64.149

🇩🇪 34.32.101.224

🇩🇪 23.132.164.70

🇧🇷 16.5.0.242

🇩🇪 185.73.23.162

🇨🇳 115.190.184.184

🇲🇦 81.192.46.45

🇺🇸 72.241.202.104

🇺🇸 64.23.239.193