JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.46.197

47.128.46.197 was found in our database!

This IP was reported 294 times. Confidence of Abuse is 24%: ?

24%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-46-197.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.46.197

Whois 47.128.46.197

IP Abuse Reports for 47.128.46.197:

This IP address has been reported a total of 294 times from 47 distinct sources. 47.128.46.197 was first reported on September 16th 2023, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-02 19:27:18 (20 hours ago)	(mod_security) mod_security (id:210730) triggered by 47.128.46.197 (ec2-47-128-46-197.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.46.197 (ec2-47-128-46-197.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 15:27:14.190504 2026] [security2:error] [pid 28988:tid 28988] [client 47.128.46.197:28404] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|elcalamo.com\|F\|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "elcalamo.com"] [uri "/pda/esquinca-poemas_txt.PDB"] [unique_id "aka7kjMyE8yZGZ_MN-05xwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 seoxan.es	2026-07-02 02:41:29 (1 day ago)	Escaneo de archivos sensibles o backups antiguos	Bad Web Bot
🇦🇺 MAGIC	2026-06-13 00:26:40 (2 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-09 19:38:10 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 47.128.46.197 (ec2-47-128-46-197.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.46.197 (ec2-47-128-46-197.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 15:38:06.140207 2026] [security2:error] [pid 8752:tid 8752] [client 47.128.46.197:62774] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|elcalamo.com\|F\|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "elcalamo.com"] [uri "/pda/esquinca-poemas_txt.PDB"] [unique_id "aihrnrfwuoYeS0bSsb5X5wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 MarkGGN	2026-05-18 02:30:47 (1 month ago)	Web attack. 47.128.46.197 - - [18/May/2026:04:30:44 +0200] "GET /tag/blog/ HTTP/2.0" 200 44797 "-" " ... show more Web attack. 47.128.46.197 - - [18/May/2026:04:30:44 +0200] "GET /tag/blog/ HTTP/2.0" 200 44797 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; )" 47.128.46.197 - - [18/May/2026:04:30:47 +0200] "GET /tag/blog/?essb_counter_cache=rebuild HTTP/2.0" 200 72 "https://www./tag/blog/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; *)" show less	Web App Attack
🇪🇸 masterguru	2026-05-01 17:07:52 (2 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-22 19:28:37 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.46.197 (ec2-47-128-46-197.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.46.197 (ec2-47-128-46-197.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 15:28:32.670993 2026] [security2:error] [pid 25315:tid 25315] [client 47.128.46.197:11122] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|elcalamo.com\|F\|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "elcalamo.com"] [uri "/pda/esquinca-poemas_txt.PDB"] [unique_id "aekhYFa4RMP3R2HrLWnWgQAAADE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-17 19:15:55 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.46.197 (ec2-47-128-46-197.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.46.197 (ec2-47-128-46-197.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 15:15:50.694246 2026] [security2:error] [pid 8834:tid 8834] [client 47.128.46.197:54214] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|elcalamo.com\|F\|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "elcalamo.com"] [uri "/pda/magana-calendas.PDB"] [unique_id "abmoZnJZ-pWF89jvHmJWNgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2026-02-22 16:37:26 (4 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇫🇷 bigorre.org	2026-02-12 16:50:10 (4 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇬🇧 NotCool	2026-01-23 12:14:12 (5 months ago)	(CRAWLDELAY) Generic Bot Crawl-delay Violation 47.128.46.197 (SG/Singapore/ec2-47-128-46-197.ap-sout ... show more (CRAWLDELAY) Generic Bot Crawl-delay Violation 47.128.46.197 (SG/Singapore/ec2-47-128-46-197.ap-southeast-1.compute.amazonaws.com): 10 in the last 3600 secs show less	Bad Web Bot
🇩🇪 conseilgouz	2026-01-18 03:33:27 (5 months ago)	ece-88 : Bloc AI bots=>/robots.txt(Bytespider)	Hacking
🇩🇪 Didier Lagaert	2026-01-08 10:44:04 (5 months ago)	lie-88 : Bloc AI bots=>/component/jevents/evenementsparjour/2028/4/24/99?Itemid=950(Bytespider)	Hacking
🇩🇪 SCHAPPY	2025-12-25 20:05:25 (6 months ago)	Bad bot identified by user agent	Bad Web Bot
🇬🇧 NotCool	2025-12-18 03:55:51 (6 months ago)	(CRAWLDELAY) Generic Bot Crawl-delay Violation 47.128.46.197 (ec2-47-128-46-197.ap-southeast-1.compu ... show more (CRAWLDELAY) Generic Bot Crawl-delay Violation 47.128.46.197 (ec2-47-128-46-197.ap-southeast-1.compute.amazonaws.com): 10 in the last 3600 secs show less	Bad Web Bot

Showing 1 to 15 of 294 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 188.240.59.59

🇺🇸 152.32.150.26

🇺🇸 43.153.59.240

🇹🇼 211.75.3.37

🇨🇦 208.181.190.139

🇫🇷 195.154.55.188

🇬🇧 185.216.145.178

🇧🇷 177.76.134.52

🇩🇪 165.154.164.79

🇩🇪 151.243.11.245

🇳🇱 129.121.90.153

🇨🇳 119.96.193.7

🇩🇪 92.209.171.112

🇩🇪 69.5.169.187

🇸🇬 43.134.27.142

🇬🇧 5.252.83.197

🇨🇭 209.99.191.19

🇲🇽 189.203.207.170

🇩🇪 167.94.145.26

🇺🇸 154.92.22.131