JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.47.118

47.128.47.118 was found in our database!

This IP was reported 273 times. Confidence of Abuse is 4%: ?

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-47-118.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.47.118

Whois 47.128.47.118

IP Abuse Reports for 47.128.47.118:

This IP address has been reported a total of 273 times from 45 distinct sources. 47.128.47.118 was first reported on September 15th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-07-18 13:44:14 (1 day ago)	Bad Web Bot	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-04 16:31:02 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.47.118 (ec2-47-128-47-118.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.47.118 (ec2-47-128-47-118.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 11:30:56.019503 2026] [security2:error] [pid 20880:tid 20880] [client 47.128.47.118:26186] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.elcalamo.com\|F\|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.elcalamo.com"] [uri "/pda/medina-azucarlimpio.PDB"] [unique_id "aaheQPzXJRqAYxBFCaUWuwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2026-03-04 16:27:54 (4 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇫🇷 bigorre.org	2026-02-25 13:32:34 (4 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇨🇦 1gz	2026-01-24 17:29:58 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/ky-eshte-35-vjecari-qe-humbi-jeten-ne-aksidentin-e-trefishte-ne-vore-arrestohen-dy-shoferet-e-tjere/824018/ UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 conseilgouz	2026-01-15 19:40:06 (6 months ago)	ave-88 : Bloc AI bots=>/component/weblinks/?Itemid=101&catid=17%3Aparticulier&id=12%3Aanil&a ... show more ave-88 : Bloc AI bots=>/component/weblinks/?Itemid=101&catid=17%3Aparticulier&id=12%3Aanil&task=weblink.go(Bytespider) show less	Hacking
🇪🇸 librebit	2025-12-30 09:38:06 (6 months ago)	Brute force	Brute-Force
🇩🇪 Didier Lagaert	2025-12-24 23:51:10 (6 months ago)	lie-88 : Bloc AI bots=>/component/jevents/evenementsparsemaine/2027/12/6/43%7C66?Itemid=0(Bytespider ... show more lie-88 : Bloc AI bots=>/component/jevents/evenementsparsemaine/2027/12/6/43%7C66?Itemid=0(Bytespider) show less	Hacking
🇩🇪 conseilgouz	2025-12-19 19:04:29 (7 months ago)	ave-88 : Bloc AI bots=>/(Bytespider)	Hacking
🇺🇸 xmission.com	2025-12-14 11:42:45 (7 months ago)	47.128.47.118 - - [14/Dec/2025:04:42:44 -0700] "GET /category/photos/daily-photo/page/1998/?page=165 ... show more 47.128.47.118 - - [14/Dec/2025:04:42:44 -0700] "GET /category/photos/daily-photo/page/1998/?page=165 HTTP/2.0" 200 9331 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.47.118 - - [14/Dec/2025:04:42:44 -0700] "GET /wp-content/uploads/2012/07/10_03_2005.jpg HTTP/2.0" 206 500 "https://dooce.com/category/photos/daily-photo/page/1998/?page=165" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.47.118 - - [14/Dec/2025:04:42:44 -0700] "GET /photos/dailyphoto/10_03_2005.jpg HTTP/2.0" 206 500 "https://dooce.com/category/photos/daily-photo/page/1998/?page=165" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.47.118 - - [14/Dec/2025:04:42:44 -0700] "GET /photos/dailyphoto/10_03_2005_02.jpg HTTP/2.0" 404 548 ... show less	Bad Web Bot
🇫🇷 conseilgouz	2025-12-12 00:24:55 (7 months ago)	sae-88 : Bloc AI bots=>/robots.txt(Bytespider)	Hacking
🇺🇸 TPI-Abuse	2025-12-11 19:22:16 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.47.118 (ec2-47-128-47-118.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.47.118 (ec2-47-128-47-118.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 11 14:22:10.300314 2025] [security2:error] [pid 11638:tid 11638] [client 47.128.47.118:34126] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|med-engineering.com\|F\|2"] [data ".igvm.med-engineering.com.cox.vb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "med-engineering.com"] [uri "/uwx.igvm.med-engineering.com.cox.vb"] [unique_id "aTsZ4o4nMDPaLpa-Mj_GKwAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2025-12-10 12:55:14 (7 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-123) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-13 13:38:31 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 47.128.47.118 (ec2-47-128-47-118.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 47.128.47.118 (ec2-47-128-47-118.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 08:38:25.328703 2025] [security2:error] [pid 4376:tid 4376] [client 47.128.47.118:50082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deathofaspy.com"] [uri "/.htpasswds/"] [unique_id "aRXfUTjb4vfGpxpTT_B89QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-30 00:07:35 (8 months ago)	Excessive crawling/scraping	Hacking Brute-Force

Showing 1 to 15 of 273 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:fa59:10:8d8::1

🇺🇸 195.184.76.48

🇺🇸 174.167.98.106

🇺🇸 173.201.44.130

🇧🇷 168.197.105.138

🇦🇷 168.90.74.231

🇸🇪 155.4.244.107

🇺🇸 109.105.210.52

🇸🇬 104.28.161.28

🇺🇸 95.173.221.52

🇺🇸 64.112.57.160

🇯🇵 8.216.47.73

🇺🇸 2607:f8b0:400c:c16::12b

🇪🇬 197.37.76.121

🇪🇬 196.139.240.184

🇺🇸 173.10.13.20

🇨🇳 124.193.81.23

🇷🇴 92.118.39.78

🇺🇸 43.166.142.76

🇩🇪 8.211.19.53