JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.126.44

47.128.126.44 was found in our database!

This IP was reported 244 times. Confidence of Abuse is 11%: ?

11%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-126-44.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.126.44

Whois 47.128.126.44

IP Abuse Reports for 47.128.126.44:

This IP address has been reported a total of 244 times from 41 distinct sources. 47.128.126.44 was first reported on December 19th 2023, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hazzard	2026-10-17 00:56:06 (1 hour ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇩🇪 palzer.IT	2026-09-04 06:53:04 (1 month ago)	Fail2ban automatic report for plesk-apache-badbot: 47.128.126.44 - - [04/Sep/2026:08:52:48 +0200] GE ... show more Fail2ban automatic report for plesk-apache-badbot: 47.128.126.44 - - [04/Sep/2026:08:52:48 +0200] GET /oberflaechenschutz/ [DOMAIN_REMOVED] 200 40909 - Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@[DOMAIN_REMOVED]) show less	Bad Web Bot
🇵🇱 sefinek.net	2026-07-15 16:38:10 (3 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint: /documentation/roles \| UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇮 YF	2026-07-14 19:30:49 (3 months ago)	WordPress content enumeration	Web App Attack
🇵🇱 sefinek.net	2026-07-09 19:56:08 (3 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint: /documentation/roles \| UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Hazzard	2026-07-08 13:38:54 (3 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇫🇷 bigorre.org	2026-03-05 11:22:54 (7 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇨🇭 backslash	2026-03-02 07:27:20 (7 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇪🇸 librebit	2026-02-26 03:03:11 (7 months ago)	Brute force	Brute-Force
🇪🇸 masterguru	2026-02-16 01:01:13 (8 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-123) show less	Bad Web Bot
🇵🇱 IROK	2026-02-05 17:51:02 (8 months ago)	Firewall Blocked - Unauthorized Port Scanning ...	Port Scan
🇫🇷 bigorre.org	2026-01-01 13:22:31 (9 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇩🇪 Reinhard	2025-12-17 00:51:43 (10 months ago)	Unknown activity, but too many attacks with too many users.	Hacking
🇮🇩 hermawan	2025-12-12 11:54:10 (10 months ago)	[Fri Dec 12 18:53:24.970286 2025] [security2:error] [pid 479384:tid 139917911832256] [client 47.128. ... show more [Fri Dec 12 18:53:24.970286 2025] [security2:error] [pid 479384:tid 139917911832256] [client 47.128.126.44:43008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "253"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aTwCNNOLiU_upopjpCu9mAACQBQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[479422] [9n6o6H8qR00] [aTwCNNOLiU_upopjpCu9mAACQBQ] keep_alive=[1] [2025-12-12 18:53:24.970296] [R:aTwCNNOLiU_upopjpCu9mAACQBQ] UA:'Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobil ... show less	Hacking Web App Attack
Anonymous	2025-11-12 21:05:37 (11 months ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 244 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.241.225.51

🇺🇸 205.210.31.73

🇫🇷 185.177.72.56

🇺🇸 162.216.149.121

🇫🇮 147.185.133.39

🇺🇸 146.70.168.171

🇬🇧 129.121.94.183

🇹🇼 49.158.138.165

🇳🇱 45.148.10.151

🇩🇪 45.90.120.141

🇻🇪 38.121.208.23

🇧🇪 34.156.249.47

🇱🇰 2402:4000:2381:80d6:c5a7:6caf:b474:5147

🇧🇷 205.210.31.240

🇧🇷 205.210.31.174

🇧🇷 205.210.31.172

🇺🇸 201.25.167.212

🇬🇧 193.163.125.99

🇺🇸 185.180.141.55

🇿🇲 165.56.14.158