JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.33.138

47.128.33.138 was found in our database!

This IP was reported 269 times. Confidence of Abuse is 10%: ?

10%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-33-138.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.33.138

Whois 47.128.33.138

IP Abuse Reports for 47.128.33.138:

This IP address has been reported a total of 269 times from 53 distinct sources. 47.128.33.138 was first reported on September 15th 2023, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 mail.avx.gr	2026-07-17 13:18:23 (4 hours ago)	Plesk Fail2Ban jail: plesk-apache-badbot. Evidence: 47.128.33.138 - - [16/Jul/2026:01:52:27 +0300] " ... show more Plesk Fail2Ban jail: plesk-apache-badbot. Evidence: 47.128.33.138 - - [16/Jul/2026:01:52:27 +0300] "GET /%CE%BA%CE%B1%CF%84%CE%B7%CE%B3%CE%BF%CF%81%CE%AF%CE%B5%CF%82-%CF%80%CF%81%CE%BF%CF%8A%CF%8C%CE%BD%CF%84%CF%89%CE%BD/%CF%83%CF%86%CE%BF%CE%BB%CE%B9%CE%B1%CF%84%CE%BF%CE%B5%CE%B9%CE%B4%CE%AE-%CE%BA%CE%B1%CE%BB%CE%B9%CF%84%CF%83%CE%BF%CF%8D%CE%BD%CE%B9%CE%B1-%CF%80%CE%AF%CF%84%CF%83%CE%B5%CF%82 HTTP/1.1" 404 80153 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 19:29:16 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 47.128.33.138 (ec2-47-128-33-138.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.33.138 (ec2-47-128-33-138.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 15:29:12.766252 2026] [security2:error] [pid 13412:tid 13412] [client 47.128.33.138:26368] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bahamascruisersguide.com\|F\|2"] [data ".greatmysterious.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bahamascruisersguide.com"] [uri "/Blogs-Websites/www.greatmysterious.com"] [unique_id "ajwwCBkdq49s130_VuuYnwAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 03:27:40 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 47.128.33.138 (ec2-47-128-33-138.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.33.138 (ec2-47-128-33-138.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 23:27:34.999968 2026] [security2:error] [pid 17104:tid 17104] [client 47.128.33.138:23494] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.pages4you.com\|F\|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pages4you.com"] [uri "/default.old"] [unique_id "ajtOphBCaxfSfDBHZhahTgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-02 19:42:52 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 47.128.33.138 (ec2-47-128-33-138.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.33.138 (ec2-47-128-33-138.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 15:42:44.715601 2026] [security2:error] [pid 30678:tid 30678] [client 47.128.33.138:38440] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bahamascruisersguide.com\|F\|2"] [data ".blogspot.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bahamascruisersguide.com"] [uri "/Blogs-Websites/snowbirdscompassrose.blogspot.com"] [unique_id "ah8yNBC7ZuXOoGdSgxa0JQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-15 00:01:07 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.33.138 (ec2-47-128-33-138.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.33.138 (ec2-47-128-33-138.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 20:00:59.694474 2026] [security2:error] [pid 10564:tid 10564] [client 47.128.33.138:25378] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.pages4you.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pages4you.com"] [uri "/Graphics2/WS_FTP.LOG"] [unique_id "agZiOz4f6zRj5PbjTRebMQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-07 05:43:41 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.33.138 (ec2-47-128-33-138.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.33.138 (ec2-47-128-33-138.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 01:43:37.114006 2026] [security2:error] [pid 1219651:tid 1219651] [client 47.128.33.138:52884] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.pages4you.com\|F\|2"] [data ".ini.ea3.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pages4you.com"] [uri "/php.ini.ea3.bak"] [unique_id "adSZiaMfYzxXWPxapZcqUwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2026-03-05 16:29:36 (4 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇨🇭 backslash	2026-03-02 13:48:04 (4 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇫🇷 bigorre.org	2026-02-26 15:30:40 (4 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇪🇸 librebit	2026-02-25 02:22:13 (4 months ago)	Brute force	Brute-Force
🇫🇷 bigorre.org	2026-02-23 15:25:49 (4 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇪🇸 masterguru	2026-02-21 09:55:29 (4 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇫🇷 bigorre.org	2026-02-11 16:17:10 (5 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇪🇸 masterguru	2026-01-14 19:51:55 (6 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
Anonymous	2026-01-14 19:41:45 (6 months ago)	Automated report (2026-01-14T14:41:45-05:00). Scraper detected.	Bad Web Bot

Showing 1 to 15 of 269 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 183.66.166.30

🇺🇸 91.230.168.78

🇺🇸 81.30.98.193

🇱🇹 77.90.185.129

🇫🇷 216.106.189.192

🇸🇬 172.111.97.53

🇸🇬 172.111.91.53

🇸🇬 172.111.91.33

🇨🇳 123.122.44.150

🇺🇸 66.132.224.227

🇬🇧 45.133.173.154

🇬🇧 193.46.0.25

🇺🇸 172.202.118.21

🇸🇬 172.111.97.33

🇺🇸 157.245.246.126

🇨🇭 104.244.78.33

🇳🇱 91.92.42.61

🇺🇸 66.132.186.197

🇲🇾 47.250.36.126

🇮🇳 38.137.11.14