JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.24.238

47.128.24.238 was found in our database!

This IP was reported 320 times. Confidence of Abuse is 22%: ?

22%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-24-238.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.24.238

Whois 47.128.24.238

IP Abuse Reports for 47.128.24.238:

This IP address has been reported a total of 320 times from 45 distinct sources. 47.128.24.238 was first reported on August 3rd 2023, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Tilellit.PRO	2026-07-14 03:40:06 (5 hours ago)	Malicious web traffic detected by CrowdSec	Hacking
🇫🇷 Tilellit.PRO	2026-07-05 01:22:46 (1 week ago)	Malicious web traffic detected by CrowdSec	Hacking
🇺🇸 TPI-Abuse	2026-07-04 18:59:28 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 47.128.24.238 (ec2-47-128-24-238.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.24.238 (ec2-47-128-24-238.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 14:59:20.745875 2026] [security2:error] [pid 20982:tid 21001] [client 47.128.24.238:56306] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gafm.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gafm.org"] [uri "/http/charteredfinancialmanager.com"] [unique_id "aklYCJWXeqx-mQbiutr_RQAAAFE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Carsten	2026-06-18 19:54:51 (3 weeks ago)	Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/5 ... show more Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])] show less	Bad Web Bot
🇩🇪 Carsten	2026-05-22 20:04:06 (1 month ago)	Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/5 ... show more Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])] show less	Bad Web Bot
🇩🇪 Carsten	2026-05-20 08:37:39 (1 month ago)	Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/5 ... show more Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])] show less	Bad Web Bot
🇪🇸 masterguru	2026-05-15 04:48:36 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-04 19:30:52 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.24.238 (ec2-47-128-24-238.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.24.238 (ec2-47-128-24-238.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 04 15:30:44.656247 2026] [security2:error] [pid 15529:tid 15554] [client 47.128.24.238:21376] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gafm.org\|F\|2"] [data ".gafm.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gafm.org"] [uri "/www.GAFM.com"] [unique_id "afjz5CFcUsqQoBdC0Kt7_gAAAVM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-03 19:22:25 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.24.238 (ec2-47-128-24-238.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.24.238 (ec2-47-128-24-238.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 15:22:19.448350 2026] [security2:error] [pid 1642:tid 1642] [client 47.128.24.238:55108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|phantomquailkennel.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "phantomquailkennel.com"] [uri "/puppysale.com"] [unique_id "afega0QSDaUI_4eumwKZpQAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-04-28 02:40:57 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇪🇸 masterguru	2026-04-18 22:28:28 (2 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇩🇪 Carsten	2026-04-16 16:25:05 (2 months ago)	Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/5 ... show more Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])] show less	Bad Web Bot
🇩🇪 Carsten	2026-04-11 09:10:33 (3 months ago)	Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/5 ... show more Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])] show less	Bad Web Bot
🇵🇱 IROK	2026-03-30 00:47:04 (3 months ago)	Firewall Blocked - Unauthorized Port Scanning ...	Port Scan
🇩🇪 Carsten	2026-03-19 19:12:54 (3 months ago)	Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/5 ... show more Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])] show less	Bad Web Bot

Showing 1 to 15 of 320 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 220.240.107.211

🇪🇬 197.121.31.185

🇹🇳 197.2.156.191

🇺🇸 195.184.76.247

🇮🇳 182.95.63.126

🇹🇷 176.88.116.116

🇨🇳 115.56.238.174

🇦🇺 114.30.104.218

🇺🇸 103.234.62.80

🇺🇸 91.230.168.90

🇺🇸 85.254.76.175

🇦🇷 45.236.40.32

🇬🇦 41.158.157.198

🇳🇵 27.34.70.6

🇹🇼 211.22.131.70

🇵🇱 194.180.49.217

🇳🇱 185.242.226.126

🇺🇸 172.236.111.98

🇺🇸 162.216.150.137

🇺🇸 161.35.183.111