JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.46.51

47.128.46.51 was found in our database!

This IP was reported 287 times. Confidence of Abuse is 15%: ?

15%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-46-51.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.46.51

Whois 47.128.46.51

IP Abuse Reports for 47.128.46.51:

This IP address has been reported a total of 287 times from 43 distinct sources. 47.128.46.51 was first reported on September 20th 2023, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 MarkGGN	2026-10-15 21:28:54 (6 days ago)	Web attack. 47.128.46.51 - - [15/Oct/2026:23:28:52 +0200] "GET /tag/blog/ HTTP/2.0" 200 43535 "-" "M ... show more Web attack. 47.128.46.51 - - [15/Oct/2026:23:28:52 +0200] "GET /tag/blog/ HTTP/2.0" 200 43535 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; )" 47.128.46.51 - - [15/Oct/2026:23:28:53 +0200] "GET /wp-content/uploads/2014/08/cropped-nerz-200x200.jpg HTTP/2.0" 206 500 "https://www./tag/blog/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; *)" show less	Web App Attack
🇪🇸 seoxan.es	2026-09-21 19:42:43 (1 month ago)	Escaneo de archivos sensibles o backups antiguos	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-28 20:23:33 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 47.128.46.51 (ec2-47-128-46-51.ap-southeast-1.c ... show more (mod_security) mod_security (id:210730) triggered by 47.128.46.51 (ec2-47-128-46-51.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 16:23:27.555798 2026] [security2:error] [pid 4107:tid 4107] [client 47.128.46.51:27438] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|elcalamo.com\|F\|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "elcalamo.com"] [uri "/pda/magana-calendas.PDB"] [unique_id "apHuP40YB-cDu8Xhgy5MFwAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 MarkGGN	2026-07-01 16:11:08 (3 months ago)	Web attack. 47.128.46.51 - - [01/Jul/2026:18:11:04 +0200] "GET /tag/blog/ HTTP/2.0" 200 44786 "-" "M ... show more Web attack. 47.128.46.51 - - [01/Jul/2026:18:11:04 +0200] "GET /tag/blog/ HTTP/2.0" 200 44786 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; )" 47.128.46.51 - - [01/Jul/2026:18:11:07 +0200] "GET /tag/blog/?essb_counter_cache=rebuild HTTP/2.0" 200 72 "https://www./tag/blog/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; *)" show less	Web App Attack
🇩🇪 MarkGGN	2026-06-17 00:22:58 (4 months ago)	Web attack. 47.128.46.51 - - [17/Jun/2026:02:22:56 +0200] "GET /tag/blog/ HTTP/2.0" 200 44679 "-" "M ... show more Web attack. 47.128.46.51 - - [17/Jun/2026:02:22:56 +0200] "GET /tag/blog/ HTTP/2.0" 200 44679 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; )" 47.128.46.51 - - [17/Jun/2026:02:22:58 +0200] "GET /tag/blog/?essb_counter_cache=rebuild HTTP/2.0" 200 72 "https://www./tag/blog/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; *)" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-24 19:09:44 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.46.51 (ec2-47-128-46-51.ap-southeast-1.c ... show more (mod_security) mod_security (id:210730) triggered by 47.128.46.51 (ec2-47-128-46-51.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 15:09:36.570596 2026] [security2:error] [pid 28742:tid 28742] [client 47.128.46.51:12834] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|elcalamo.com\|F\|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "elcalamo.com"] [uri "/pda/esquinca-poemas_txt.PDB"] [unique_id "ahNM8MGIVQtU37KeEmsNowAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-03-09 09:55:09 (7 months ago)	47.128.46.51 - - [09/Mar/2026:03:55:06 -0600] "GET /related/listening/page/230/?page=87 HTTP/2.0" 20 ... show more 47.128.46.51 - - [09/Mar/2026:03:55:06 -0600] "GET /related/listening/page/230/?page=87 HTTP/2.0" 200 11825 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.46.51 - - [09/Mar/2026:03:55:08 -0600] "GET /wp-content/uploads/2012/07/154.jpg HTTP/2.0" 206 500 "https://dooce.com/related/listening/page/230/?page=87" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.46.51 - - [09/Mar/2026:03:55:08 -0600] "GET /photos/leta/154.jpg HTTP/2.0" 404 548 "https://dooce.com/related/listening/page/230/?page=87" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.46.51 - - [09/Mar/2026:03:55:09 -0600] "GET /photos/leta/155.jpg HTTP/2.0" 404 548 "https://dooce.com/related/listening/page/230/?page=87" "Mozilla/5.0 (comp ... show less	Bad Web Bot
🇨🇭 backslash	2026-02-26 09:51:06 (7 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇪🇸 librebit	2026-02-15 01:59:18 (8 months ago)	Brute force	Brute-Force
🇫🇷 conseilgouz	2026-01-24 08:04:22 (8 months ago)	sie-88 : Bloc AI bots=>/(Bytespider)	Hacking
🇮🇳 dineshskt4all	2026-01-15 17:11:22 (9 months ago)	47.128.46.51 - - [15/Jan/2026:17:11:18 +0000] "GET /index.php?limit=75&order=ASC&path=80_84&product_ ... show more 47.128.46.51 - - [15/Jan/2026:17:11:18 +0000] "GET /index.php?limit=75&order=ASC&path=80_84&product_id=96&route=product%2Fproduct&sort=p.sort_order HTTP/1.0" 403 6766 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" ... show less	IoT Targeted
Anonymous	2025-12-17 00:50:32 (10 months ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇫🇷 bigorre.org	2025-12-13 15:44:16 (10 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇫🇷 mrcrassi	2025-12-12 10:45:36 (10 months ago)	Triggered Cloudflare WAF (botFight) from SG. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET m ... show more Triggered Cloudflare WAF (botFight) from SG. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: /blog/ UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-12 10:03:50 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.46.51 (ec2-47-128-46-51.ap-southeast-1.c ... show more (mod_security) mod_security (id:210730) triggered by 47.128.46.51 (ec2-47-128-46-51.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 12 05:03:43.453028 2025] [security2:error] [pid 20778:tid 20778] [client 47.128.46.51:26024] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|med-engineering.com\|F\|2"] [data ".tepd.med-engineering.com.spq.vb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "med-engineering.com"] [uri "/mas.tepd.med-engineering.com.spq.vb"] [unique_id "aTvof8zx-Nicjc7q6GgG2QAAABg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 287 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 124.74.97.18

🇻🇳 113.161.149.20

🇦🇹 109.70.100.13

🇱🇹 62.60.130.242

🇮🇪 54.217.167.194

🇮🇪 34.240.42.1

🇬🇧 2.57.17.204

🇵🇰 203.99.191.162

🇬🇧 194.50.235.151

🇬🇧 185.230.216.5

🇺🇸 172.200.195.165

🇩🇪 172.70.248.77

🇩🇪 164.92.236.135

🇺🇸 162.216.149.115

🇨🇳 118.145.131.27

🇷🇴 80.94.95.245

🇷🇴 80.94.95.226

🇮🇪 54.246.33.90

🇺🇸 15.204.122.122

🇮🇪 3.250.124.95