JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.24.90

47.128.24.90 was found in our database!

This IP was reported 267 times. Confidence of Abuse is 21%: ?

21%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-24-90.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.24.90

Whois 47.128.24.90

IP Abuse Reports for 47.128.24.90:

This IP address has been reported a total of 267 times from 44 distinct sources. 47.128.24.90 was first reported on August 13th 2023, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-19 19:47:27 (21 hours ago)	(mod_security) mod_security (id:210730) triggered by 47.128.24.90 (ec2-47-128-24-90.ap-southeast-1.c ... show more (mod_security) mod_security (id:210730) triggered by 47.128.24.90 (ec2-47-128-24-90.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 15:47:24.083506 2026] [security2:error] [pid 659680:tid 659906] [client 47.128.24.90:62146] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gafm.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gafm.org"] [uri "/http/charteredfinancialmanager.com"] [unique_id "al0pzC4YjPkFYeQxAp_iJgAAApA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Tilellit.PRO	2026-07-19 06:51:30 (1 day ago)	Malicious web traffic detected by CrowdSec	Hacking
🇫🇷 Tilellit.PRO	2026-07-14 01:14:52 (6 days ago)	Malicious web traffic detected by CrowdSec	Hacking
🇫🇷 Tilellit.PRO	2026-07-08 13:16:32 (1 week ago)	Malicious web traffic detected by CrowdSec	Hacking
🇩🇪 Carsten	2026-06-23 16:36:32 (3 weeks ago)	Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/5 ... show more Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])] show less	Bad Web Bot
🇩🇪 Carsten	2026-05-22 06:05:32 (1 month ago)	Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/5 ... show more Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])] show less	Bad Web Bot
🇩🇪 Carsten	2026-04-28 08:45:41 (2 months ago)	Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/5 ... show more Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])] show less	Bad Web Bot
🇩🇪 Carsten	2026-04-01 15:54:25 (3 months ago)	Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/5 ... show more Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])] show less	Bad Web Bot
🇬🇧 NotCool	2026-03-10 11:52:21 (4 months ago)	(CRAWLDELAY) Generic Bot Crawl-delay Violation 47.128.24.90 (SG/Singapore/ec2-47-128-24-90.ap-southe ... show more (CRAWLDELAY) Generic Bot Crawl-delay Violation 47.128.24.90 (SG/Singapore/ec2-47-128-24-90.ap-southeast-1.compute.amazonaws.com): 50 in the last 3600 secs show less	Bad Web Bot
🇺🇸 xmission.com	2026-03-07 04:25:32 (4 months ago)	47.128.24.90 - - [06/Mar/2026:21:25:30 -0700] "GET /related/listening/page/117/?page=85 HTTP/2.0" 20 ... show more 47.128.24.90 - - [06/Mar/2026:21:25:30 -0700] "GET /related/listening/page/117/?page=85 HTTP/2.0" 200 13135 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.24.90 - - [06/Mar/2026:21:25:31 -0700] "GET /wp-content/uploads/2012/07/471.jpg HTTP/2.0" 206 500 "https://dooce.com/related/listening/page/117/?page=85" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.24.90 - - [06/Mar/2026:21:25:31 -0700] "GET /photos/leta/471.jpg HTTP/2.0" 404 548 "https://dooce.com/related/listening/page/117/?page=85" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.24.90 - - [06/Mar/2026:21:25:31 -0700] "GET /photos/leta/473.jpg HTTP/2.0" 404 548 "https://dooce.com/related/listening/page/117/?page=85" "Mozilla/5.0 (comp ... show less	Bad Web Bot
🇪🇸 librebit	2026-02-26 04:27:26 (4 months ago)	Brute force	Brute-Force
🇬🇧 pinguin	2026-01-11 01:42:50 (6 months ago)	Triggered Cloudflare WAF (firewallManaged) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /blog/documentation-for-dsync/ UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 i-turnradio.nl	2025-12-27 16:03:22 (6 months ago)	2025-12-27 @ 17:03:22 (CET) ~ Blocked based on risk assessment and prior abuse reports	Web App Attack
🇮🇹 sssrit	2025-12-26 19:27:17 (6 months ago)	47.128.24.90 - - [26/Dec/2025:20:27:16 +0100] "GET /elenco-documenti-per-dichiarazione-dei-redditi-e ... show more 47.128.24.90 - - [26/Dec/2025:20:27:16 +0100] "GET /elenco-documenti-per-dichiarazione-dei-redditi-e-730-2020/amp/ HTTP/2.0" 404 14361 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" ... show less	Web App Attack
🇮🇩 hermawan	2025-12-12 06:23:30 (7 months ago)	[Fri Dec 12 13:22:56.209165 2025] [security2:error] [pid 289233:tid 139917991556800] [client 47.128. ... show more [Fri Dec 12 13:22:56.209165 2025] [security2:error] [pid 289233:tid 139917991556800] [client 47.128.24.90:19424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "253"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat"] [unique_id "aTu0wEQq9zYhZi9OV2dtxQACzQw"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmk ... show less	Hacking Web App Attack

Showing 1 to 15 of 267 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.84

🇺🇸 157.230.239.134

🇮🇩 36.92.41.115

🇫🇷 195.177.94.10

🇧🇷 191.253.192.28

🇺🇸 147.185.132.67

🇨🇳 58.20.236.52

🇭🇰 199.45.154.156

🇧🇷 179.191.82.115

🇨🇴 179.33.186.150

🇺🇸 165.22.9.106

🇨🇳 113.225.90.103

🇫🇷 104.156.151.49

🇮🇳 103.91.246.101

🇪🇨 45.224.97.244

🇺🇦 37.221.154.44

🇺🇦 212.79.124.254

🇷🇺 185.94.111.1

🇺🇸 154.17.187.178

🇮🇳 103.107.60.45