JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.19.252

47.128.19.252 was found in our database!

This IP was reported 297 times. Confidence of Abuse is 13%: ?

13%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-19-252.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.19.252

Whois 47.128.19.252

IP Abuse Reports for 47.128.19.252:

This IP address has been reported a total of 297 times from 44 distinct sources. 47.128.19.252 was first reported on August 11th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Mangelot Hosting	2026-06-11 23:24:55 (1 day ago)	(modsecurity) srv101 ModSecurity 47.128.19.252 (SG/Singapore/ec2-47-128-19-252.ap-southeast-1.comput ... show more (modsecurity) srv101 ModSecurity 47.128.19.252 (SG/Singapore/ec2-47-128-19-252.ap-southeast-1.compute.amazonaws.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 Hazzard	2026-06-02 07:47:07 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇪🇸 librebit	2026-03-11 06:13:59 (3 months ago)	Brute force	Brute-Force
🇫🇷 bigorre.org	2026-03-04 15:24:03 (3 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇨🇭 backslash	2026-03-02 06:33:16 (3 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇪🇸 librebit	2026-02-24 03:28:27 (3 months ago)	Brute force	Brute-Force
🇦🇺 MAGIC	2026-02-24 00:18:02 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇷 bigorre.org	2026-02-18 13:41:15 (3 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇪🇸 librebit	2026-02-07 09:03:24 (4 months ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-01-27 19:20:50 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.19.252 (ec2-47-128-19-252.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.19.252 (ec2-47-128-19-252.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 27 14:20:19.747401 2026] [security2:error] [pid 856:tid 856] [client 47.128.19.252:30770] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gilesvolvocarselpaso.com.acadianahero.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gilesvolvocarselpaso.com.acadianahero.com"] [uri "/youtube.com"] [unique_id "aXkP83l0mXEE1_ZJJfFKFwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-13 12:31:38 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.19.252 (ec2-47-128-19-252.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.19.252 (ec2-47-128-19-252.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 07:31:33.689500 2026] [security2:error] [pid 17217:tid 17217] [client 47.128.19.252:51668] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|informativearticles.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "informativearticles.com"] [uri "/marriage-wedding/momentsofelegance.com"] [unique_id "aWY7JbLd9WbMRwbdICUp2QAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Reinhard	2026-01-01 20:41:27 (5 months ago)	Unknown activity, but too many attacks with too many users.	Hacking
🇩🇪 dbmwebdesign	2025-12-30 23:35:32 (5 months ago)	Bot detected and blocked by Fail2Ban in bytespider jail	Bad Web Bot
🇦🇷 RocketEmi	2025-12-20 17:35:51 (5 months ago)	Repeated access attempts from blocked IP after being denied. Behavior consistent with brute-force or ... show more Repeated access attempts from blocked IP after being denied. Behavior consistent with brute-force or persistent unauthorized probing. show less	Hacking
🇨🇦 1gz	2025-12-17 00:36:03 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 297 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 103.183.62.0

🇪🇸 82.223.101.158

🇮🇪 52.212.214.53

🇫🇷 51.75.16.206

🇬🇧 45.148.14.177

🇺🇸 45.132.115.239

🇧🇪 34.14.122.221

🇫🇷 207.180.226.58

🇲🇽 201.111.228.90

🇫🇷 194.163.139.224

🇩🇪 185.176.94.38

🇨🇳 183.6.72.120

🇧🇷 177.104.171.149

🇧🇷 177.7.30.146

🇺🇸 172.67.195.214

🇩🇪 139.59.150.41

🇺🇸 66.132.172.126

🇨🇳 58.19.232.223

🇧🇷 43.164.192.40

🇮🇳 34.131.100.141