JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

47.128.120.239

Recent Activity

Abuse confidence score ?

19% Caution

291 reports

45 reporters · latest 1 day ago

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-120-239.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 47.128.120.239

This IP address has been reported a total of 291 times from 45 distinct sources. 47.128.120.239 was first reported on December 24th 2023, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: Indonesia with 10 reports; Malaysia with 3 reports; Spain with 1 report. The most common categories in these recent reports were: Hacking 11 times; Email Spam 10 times; Brute-Force 4 times; Web App Attack 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-09-25 02:03:59 (1 day ago)	Captured JA4H: ge11n_63cf1041adb5 \| Log: 47.128.120.239 - - [25/Sep/2026:09:02:21 +0700] "GET /index ... show more Captured JA4H: ge11n_63cf1041adb5 \| Log: 47.128.120.239 - - [25/Sep/2026:09:02:21 +0700] "GET /index.php/profil/meteorologi/list-of-all-tags/monitoring-hari-tanpa-hujan-berturut-turut-indonesia HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected])" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry... ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-24 02:54:57 (2 days ago)	Captured JA4H: ge11n_63cf1041adb5 \| Log: 47.128.120.239 - - [24/Sep/2026:09:51:42 +0700] "GET / HTTP ... show more Captured JA4H: ge11n_63cf1041adb5 \| Log: 47.128.120.239 - - [24/Sep/2026:09:51:42 +0700] "GET / HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected])" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry... ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-24 01:32:51 (2 days ago)	[Thu Sep 24 08:32:46.611298 2026] [security2:error] [pid 2345:tid 139821402003136] [client 47.128.12 ... show more [Thu Sep 24 08:32:46.611298 2026] [security2:error] [pid 2345:tid 139821402003136] [client 47.128.120.239:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/90-klimatologi/analisis-klimatologi/artikel-perubahan-iklim/126-artikel-perubahan-iklim HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/90-klimatologi/analisis-klimatologi/artikel-perubahan-iklim/126-artikel-perubahan-iklim"] [unique_id "arR9vgB-j0BXfKoO3nKClQAAAIo"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[2637] [Obi1k3CBc+Y] ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-23 04:57:45 (3 days ago)	[Wed Sep 23 11:57:41.835724 2026] [security2:error] [pid 29327:tid 139977656616640] [client 47.128.1 ... show more [Wed Sep 23 11:57:41.835724 2026] [security2:error] [pid 29327:tid 139977656616640] [client 47.128.120.239:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan"] [unique_id "arNcRQn4rDVFOZZkZHJTkgAAAIo"] [staklim-jatim.bmkg.go.id] [stakl ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-23 01:22:28 (3 days ago)	[Wed Sep 23 08:22:06.973323 2026] [security2:error] [pid 2438:tid 140588219365056] [client 47.128.12 ... show more [Wed Sep 23 08:22:06.973323 2026] [security2:error] [pid 2438:tid 140588219365056] [client 47.128.120.239:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "arMpvh1Sg6QnZAv8o_0feQAAAFc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[2516] [NDW+T5wd/q8] [arMpvh1Sg6QnZAv8o_0feQAAAFc] keep_alive=[0] [2026-09-23 08:22:06.973330] [R:arMpvh1Sg6QnZAv8o_0feQAAAFc] UA:'Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-22 07:20:53 (4 days ago)	Captured JA4H: ge11n_63cf1041adb5 \| Log: 47.128.120.239 - - [22/Sep/2026:10:07:31 +0700] "GET /index ... show more Captured JA4H: ge11n_63cf1041adb5 \| Log: 47.128.120.239 - - [22/Sep/2026:10:07:31 +0700] "GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561495-infografis-waspada-cuaca-ekstrem-di-masa-pancaroba HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected])" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry... ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-22 05:10:40 (4 days ago)	[Tue Sep 22 12:10:35.771890 2026] [security2:error] [pid 77245:tid 140304611002048] [client 47.128.1 ... show more [Tue Sep 22 12:10:35.771890 2026] [security2:error] [pid 77245:tid 140304611002048] [client 47.128.120.239:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "arINy1G5fsTVUdoFouZwWQAAAEg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[77282] [0ogCY8syElM] [arINy1G5fsTVUdoFouZwWQAAAEg] keep_alive=[0] [2026-09-22 12:10:35.771894] [R:arINy1G5fsTVUdoFouZwWQAAAEg] UA:'Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Sa ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-22 04:48:37 (4 days ago)	[Tue Sep 22 11:48:33.931022 2026] [security2:error] [pid 69738:tid 140304342566592] [client 47.128.1 ... show more [Tue Sep 22 11:48:33.931022 2026] [security2:error] [pid 69738:tid 140304342566592] [client 47.128.120.239:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan"] [unique_id "arIIoaJdgm7a2XCB3S2o4gAAAMg"] [staklim-jatim.bmkg.go.id] [stakl ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-22 01:35:29 (4 days ago)	[Tue Sep 22 08:35:24.271358 2026] [security2:error] [pid 39856:tid 139780448843456] [client 47.128.1 ... show more [Tue Sep 22 08:35:24.271358 2026] [security2:error] [pid 39856:tid 139780448843456] [client 47.128.120.239:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "273"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa"] [unique_id "arHbXFDyBUaMsT0S7cCbEgAAAIk"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[39898] [9qpsYQiIK2c] [arHbXFDyBUaMsT0S7cCbEgAAAIk] keep_alive=[0] [2 ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-19 17:19:15 (1 week ago)	[Sun Sep 20 00:19:07.704644 2026] [security2:error] [pid 40585:tid 140496617854656] [client 47.128.1 ... show more [Sun Sep 20 00:19:07.704644 2026] [security2:error] [pid 40585:tid 140496617854656] [client 47.128.120.239:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "273"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected]) request_line = GET /index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewasp ... show less	Email Spam Hacking
🇫🇷 claude CALVET	2026-08-21 21:55:33 (1 month ago)	gee-88 : Bloc AI bots=>/index.php?id=2&modjemcal_id=113&modjemcal_month=1&modjemcal_year ... show more gee-88 : Bloc AI bots=>/index.php?id=2&modjemcal_id=113&modjemcal_month=1&modjemcal_year=3476&start=4&view=category(TikTokSpider) show less	Hacking
🇲🇾 Rizzy	2026-08-19 01:22:34 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-08-10 17:44:39 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇪🇸 librebit	2026-08-02 11:31:06 (1 month ago)	Brute force	Brute-Force
🇲🇾 Rizzy	2026-07-31 15:15:32 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack

Showing 1 to 15 of 291 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 111.231.1.253

🇺🇸 66.132.172.104

🇷🇴 2.57.122.238

🇩🇪 209.38.255.32

🇸🇬 188.166.183.84

🇩🇪 167.94.146.55

🇵🇱 109.205.211.27

🇧🇩 103.60.205.73

🇲🇦 81.192.46.32

🇺🇸 76.32.186.37

🇵🇱 54.38.52.18

🇺🇸 205.210.31.100

🇨🇳 182.54.23.147

🇨🇳 111.230.233.46

🇮🇪 93.107.79.43

🇺🇸 70.184.111.178

🇹🇼 220.133.95.63

🇰🇷 220.86.0.219

🇧🇪 198.235.24.248

🇺🇸 157.230.218.106