JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.37.15

47.128.37.15 was found in our database!

This IP was reported 280 times. Confidence of Abuse is 13%: ?

13%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-37-15.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.37.15

Whois 47.128.37.15

IP Abuse Reports for 47.128.37.15:

This IP address has been reported a total of 280 times from 41 distinct sources. 47.128.37.15 was first reported on September 19th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-30 19:13:19 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 47.128.37.15 (ec2-47-128-37-15.ap-southeast-1.c ... show more (mod_security) mod_security (id:210730) triggered by 47.128.37.15 (ec2-47-128-37-15.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 15:13:13.462098 2026] [security2:error] [pid 26597:tid 26597] [client 47.128.37.15:23472] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.iheldt.net\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.iheldt.net"] [uri "/Work/Client Resources/ingrid heldt/Update 6_15_05/Newest/Update 05 05/tanglefootmusic.com"] [unique_id "apSAyQt7W0Ax2kO9n-9KWgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 ✨	2026-08-15 00:36:11 (2 weeks ago)	Domain : dolfmol.com Rule : UserAgent 2026-08-15 00:34:48 *hidden-privacy* GET /wp-content/uploa ... show more Domain : dolfmol.com Rule : UserAgent 2026-08-15 00:34:48 *hidden-privacy* GET /wp-content/uploads/IMG_2884-300x400.jpg - 443 - 47.128.37.15 HTTP/2 Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://bytedance.sg.larkoffice.com/docx/K5bxdypulop3IIxrJb0lOjLVgFe) https://dolfmol.com/blog/ dolfmol.com 200 0 0 500 575 183 - - show less	Port Scan
🇫🇷 ✨	2026-08-01 00:44:19 (1 month ago)	Domain : dolfmol.com Rule : UserAgent 2026-08-01 00:42:17 *hidden-privacy* GET /wp-content/theme ... show more Domain : dolfmol.com Rule : UserAgent 2026-08-01 00:42:17 *hidden-privacy* GET /wp-content/themes/flatsome-child/style.css ver=3.0 443 - 47.128.37.15 HTTP/2 Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://bytedance.sg.larkoffice.com/docx/K5bxdypulop3IIxrJb0lOjLVgFe) https://dolfmol.com/ dolfmol.com 200 0 0 266 520 173 - - show less	Port Scan
🇺🇸 TPI-Abuse	2026-07-02 18:53:49 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 47.128.37.15 (ec2-47-128-37-15.ap-southeast-1.c ... show more (mod_security) mod_security (id:210730) triggered by 47.128.37.15 (ec2-47-128-37-15.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 14:53:45.447990 2026] [security2:error] [pid 16614:tid 16614] [client 47.128.37.15:64400] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.iheldt.net\|F\|2"] [data ".davidmassengill.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.iheldt.net"] [uri "/http:/www.davidmassengill.com"] [unique_id "akazuQxFLnu3kILgqAHPlgAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-05-18 23:18:47 (3 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-123) show less	Bad Web Bot
🇪🇸 masterguru	2026-05-03 07:04:10 (3 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-123) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-03 05:20:12 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.37.15 (ec2-47-128-37-15.ap-southeast-1.c ... show more (mod_security) mod_security (id:210730) triggered by 47.128.37.15 (ec2-47-128-37-15.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 01:20:08.404188 2026] [security2:error] [pid 6128:tid 6128] [client 47.128.37.15:43426] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.remedialconcepts.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.remedialconcepts.com"] [uri "/3300/data/Assembly.dat"] [unique_id "afbbCHRBIoxyGDExSUlC3gAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-28 16:51:43 (4 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 47.128.37.15 (SG/Sin ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 47.128.37.15 (SG/Singapore/ec2-47-128-37-15.ap-southeast-1.compute.amazonaws.com) show less	Bad Web Bot
Anonymous	2026-04-19 10:12:49 (4 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 47.128.37.15 (SG/Sin ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 47.128.37.15 (SG/Singapore/ec2-47-128-37-15.ap-southeast-1.compute.amazonaws.com) show less	Bad Web Bot
🇪🇸 masterguru	2026-04-11 00:01:30 (4 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-123) show less	Bad Web Bot
🇩🇪 dbmwebdesign	2026-03-10 13:24:13 (5 months ago)	Bot detected and blocked by Fail2Ban in bytespider jail	Bad Web Bot
🇫🇷 bigorre.org	2026-02-23 13:28:13 (6 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇫🇷 bigorre.org	2026-02-15 16:56:16 (6 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇨🇦 1gz	2026-01-27 04:15:11 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 BlueWire Hosting	2026-01-03 04:03:06 (7 months ago)	Bad bot ignoring robot.txt	Bad Web Bot

Showing 1 to 15 of 280 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇹 196.189.190.128

🇺🇸 172.98.32.225

🇮🇩 103.159.199.43

🇺🇸 74.82.47.9

🇺🇸 40.119.33.111

🇮🇹 2.32.12.48

🇧🇷 189.59.26.180

🇨🇳 183.164.236.135

🇺🇸 172.191.132.202

🇫🇷 172.71.130.209

🇳🇬 152.32.141.2

🇲🇽 149.232.132.28

🇺🇸 147.185.132.57

🇮🇳 122.160.59.87

🇧🇩 103.134.26.228

🇺🇸 65.98.5.90

🇺🇸 35.255.47.107

🇻🇳 27.79.5.21

🇨🇳 27.44.125.64

🇨🇳 220.181.108.104