JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.18.21

47.128.18.21 was found in our database!

This IP was reported 291 times. Confidence of Abuse is 20%: ?

20%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-18-21.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.18.21

Whois 47.128.18.21

IP Abuse Reports for 47.128.18.21:

This IP address has been reported a total of 291 times from 43 distinct sources. 47.128.18.21 was first reported on August 13th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 clapper	2026-08-22 23:32:13 (1 day ago)	(mod_security) mod_security (id:980001) triggered by 47.128.18.21 (SG/Singapore/ec2-47-128-18-21.ap- ... show more (mod_security) mod_security (id:980001) triggered by 47.128.18.21 (SG/Singapore/ec2-47-128-18-21.ap-southeast-1.compute.amazonaws.com): 5 in the last 600 secs; ID: rub show less	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-21 19:37:09 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 47.128.18.21 (ec2-47-128-18-21.ap-southeast-1.c ... show more (mod_security) mod_security (id:210730) triggered by 47.128.18.21 (ec2-47-128-18-21.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 15:37:02.195966 2026] [security2:error] [pid 15449:tid 15471] [client 47.128.18.21:58006] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|newtrendmag.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "newtrendmag.org"] [uri "/[email protected]"] [unique_id "aoio3sGs3Eyx2S1l5jzREwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 clapper	2026-08-04 17:17:23 (2 weeks ago)	(mod_security) mod_security (id:980001) triggered by 47.128.18.21 (SG/Singapore/ec2-47-128-18-21.ap- ... show more (mod_security) mod_security (id:980001) triggered by 47.128.18.21 (SG/Singapore/ec2-47-128-18-21.ap-southeast-1.compute.amazonaws.com): 5 in the last 600 secs; ID: rub show less	Brute-Force Bad Web Bot
🇫🇮 YF	2026-07-17 22:30:31 (1 month ago)	WordPress content enumeration	Web App Attack
🇦🇺 clapper	2026-07-15 22:36:32 (1 month ago)	(mod_security) mod_security (id:980001) triggered by 47.128.18.21 (SG/Singapore/ec2-47-128-18-21.ap- ... show more (mod_security) mod_security (id:980001) triggered by 47.128.18.21 (SG/Singapore/ec2-47-128-18-21.ap-southeast-1.compute.amazonaws.com): 5 in the last 600 secs; ID: rub show less	Brute-Force Bad Web Bot
🇦🇺 clapper	2026-06-07 13:04:12 (2 months ago)	(mod_security) mod_security (id:980001) triggered by 47.128.18.21 (SG/Singapore/ec2-47-128-18-21.ap- ... show more (mod_security) mod_security (id:980001) triggered by 47.128.18.21 (SG/Singapore/ec2-47-128-18-21.ap-southeast-1.compute.amazonaws.com): 5 in the last 600 secs; ID: rub show less	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-23 19:23:04 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.18.21 (ec2-47-128-18-21.ap-southeast-1.c ... show more (mod_security) mod_security (id:210730) triggered by 47.128.18.21 (ec2-47-128-18-21.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 15:22:57.464949 2026] [security2:error] [pid 12230:tid 12241] [client 47.128.18.21:23734] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|newtrendmag.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "newtrendmag.org"] [uri "/[email protected]"] [unique_id "ahH-kf4NoTZEN3-o29FZhQAAAck"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 ✨	2026-05-20 01:37:09 (3 months ago)	Domain : exmouthpropertyrentals.co.uk Rule : UserAgent 2026-05-20 01:35:20 *hidden-privacy* GET ... show more Domain : exmouthpropertyrentals.co.uk Rule : UserAgent 2026-05-20 01:35:20 *hidden-privacy* GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css ver=8.4.5 443 - 47.128.18.21 HTTP/2 Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36 https://exmouthpropertyrentals.co.uk/property/shelly-reach-shelly-road-exmouth/ exmouthpropertyrentals.co.uk 200 0 0 6433 629 180 - - show less	Port Scan
🇦🇺 clapper	2026-05-17 02:25:30 (3 months ago)	(mod_security) mod_security (id:980001) triggered by 47.128.18.21 (SG/Singapore/ec2-47-128-18-21.ap- ... show more (mod_security) mod_security (id:980001) triggered by 47.128.18.21 (SG/Singapore/ec2-47-128-18-21.ap-southeast-1.compute.amazonaws.com): 5 in the last 600 secs; ID: rub show less	Brute-Force Bad Web Bot
🇦🇺 clapper	2026-05-05 19:03:07 (3 months ago)	(mod_security) mod_security (id:980001) triggered by 47.128.18.21 (SG/Singapore/ec2-47-128-18-21.ap- ... show more (mod_security) mod_security (id:980001) triggered by 47.128.18.21 (SG/Singapore/ec2-47-128-18-21.ap-southeast-1.compute.amazonaws.com): 5 in the last 600 secs; ID: rub show less	Brute-Force Bad Web Bot
🇦🇺 clapper	2026-04-16 19:17:30 (4 months ago)	(mod_security) mod_security (id:980001) triggered by 47.128.18.21 (SG/Singapore/ec2-47-128-18-21.ap- ... show more (mod_security) mod_security (id:980001) triggered by 47.128.18.21 (SG/Singapore/ec2-47-128-18-21.ap-southeast-1.compute.amazonaws.com): 5 in the last 600 secs; ID: rub show less	Brute-Force Bad Web Bot
🇦🇺 clapper	2026-04-05 17:04:06 (4 months ago)	(mod_security) mod_security (id:980001) triggered by 47.128.18.21 (SG/Singapore/ec2-47-128-18-21.ap- ... show more (mod_security) mod_security (id:980001) triggered by 47.128.18.21 (SG/Singapore/ec2-47-128-18-21.ap-southeast-1.compute.amazonaws.com): 5 in the last 3600 secs; ID: rub show less	Brute-Force Bad Web Bot
🇦🇺 clapper	2026-03-24 16:57:06 (4 months ago)	(mod_security) mod_security (id:980001) triggered by 47.128.18.21 (SG/Singapore/ec2-47-128-18-21.ap- ... show more (mod_security) mod_security (id:980001) triggered by 47.128.18.21 (SG/Singapore/ec2-47-128-18-21.ap-southeast-1.compute.amazonaws.com): 5 in the last 3600 secs; ID: rub show less	Brute-Force Bad Web Bot
🇫🇷 claude CALVET	2026-03-04 16:05:35 (5 months ago)	gew-Joomla User : try to access forms...	Hacking
🇨🇭 backslash	2026-02-28 10:36:05 (5 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot

Showing 1 to 15 of 291 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 91.191.209.118

🇳🇱 204.76.203.231

🇺🇸 162.216.150.127

🇺🇸 103.168.67.159

🇨🇳 218.207.1.117

🇷🇺 212.124.22.255

🇺🇸 147.185.132.134

🇮🇩 125.162.244.72

🇨🇳 120.48.112.221

🇱🇹 77.90.185.79

🇺🇸 20.150.194.114

🇨🇳 220.250.52.111

🇧🇷 196.18.165.89

🇧🇷 191.13.61.71

🇭🇳 170.231.54.190

🇳🇱 45.153.34.165

🇫🇷 2400:cb00:727:1000:c186:ef3d:27fc:f16d

🇨🇳 222.71.205.34

🇩🇪 165.232.73.237

🇧🇩 103.183.62.1