JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.47.239

47.128.47.239 was found in our database!

This IP was reported 268 times. Confidence of Abuse is 20%: ?

20%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-47-239.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.47.239

Whois 47.128.47.239

IP Abuse Reports for 47.128.47.239:

This IP address has been reported a total of 268 times from 48 distinct sources. 47.128.47.239 was first reported on September 15th 2023, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇻🇳 trung.fun	2026-08-28 11:22:48 (8 hours ago)	DDoS, Hack, Brute Force, Web Attack ...	DDoS Attack Web Spam Hacking Brute-Force Web App Attack
🇬🇧 Mendip_Defender	2026-08-23 20:31:06 (4 days ago)	47.128.47.239 - - [23/Aug/2026:21:31:16 +0100] "GET /favicon.ico HTTP/1.1" 200 5527 "https://www.ash ... show more 47.128.47.239 - - [23/Aug/2026:21:31:16 +0100] "GET /favicon.ico HTTP/1.1" 200 5527 "https://www.ashwickparish.org/beacon-hill-society/beacon-hill-history/second-world-war/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://bytedance.sg.larkoffice.com/docx/K5bxdypulop3IIxrJb0lOjLVgFe)" ... show less	Bad Web Bot
🇻🇳 trung.fun	2026-08-22 16:04:59 (6 days ago)	DDoS, Hack, Brute Force, Web Attack ...	DDoS Attack Web Spam Hacking Brute-Force Web App Attack
🇻🇳 trung.fun	2026-08-21 00:12:40 (1 week ago)	DDoS, Hack, Brute Force, Web Attack ...	DDoS Attack Web Spam Hacking Brute-Force Web App Attack
🇻🇳 trung.fun	2026-08-17 04:52:45 (1 week ago)	DDoS, Hack, Brute Force, Web Attack ...	DDoS Attack Web Spam Hacking Brute-Force Web App Attack
🇬🇧 Mendip_Defender	2026-07-31 04:35:49 (4 weeks ago)	47.128.47.239 - - [31/Jul/2026:05:35:52 +0100] "GET /wp-content/uploads/2021/09/The-Beacon-Oct-2021. ... show more 47.128.47.239 - - [31/Jul/2026:05:35:52 +0100] "GET /wp-content/uploads/2021/09/The-Beacon-Oct-2021.pdf HTTP/1.1" 200 5557 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" ... show less	Bad Web Bot
🇬🇧 Mendip_Defender	2026-07-25 12:24:33 (1 month ago)	47.128.47.239 - - [25/Jul/2026:13:24:34 +0100] "GET /wp-content/uploads/2024/08/Phoenix-Issue-14-Aug ... show more 47.128.47.239 - - [25/Jul/2026:13:24:34 +0100] "GET /wp-content/uploads/2024/08/Phoenix-Issue-14-Aug-24.pdf HTTP/1.1" 200 5561 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-24 19:45:38 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 47.128.47.239 (ec2-47-128-47-239.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.47.239 (ec2-47-128-47-239.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 15:45:32.298864 2026] [security2:error] [pid 1107948:tid 1107948] [client 47.128.47.239:53208] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|phantomkennels.com\|F\|2"] [data "[email protected]"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "phantomkennels.com"] [uri "/[email protected]"] [unique_id "amPA3NcKFKdYAtvGJoIu2QAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2026-07-08 08:47:20 (1 month ago)	47.128.47.239 - - [08/Jul/2026:09:47:12 +0100] "GET /wp-content/uploads/2021/05/15-Legal-Proceedings ... show more 47.128.47.239 - - [08/Jul/2026:09:47:12 +0100] "GET /wp-content/uploads/2021/05/15-Legal-Proceedings-revised-July-2015-copy.pdf HTTP/1.1" 200 4093 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" ... show less	Bad Web Bot
🇫🇷 tecnicorioja	2026-05-30 22:01:12 (2 months ago)	(Mod_security)	Web App Attack Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-28 19:46:40 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.47.239 (ec2-47-128-47-239.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.47.239 (ec2-47-128-47-239.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 15:46:36.739215 2026] [security2:error] [pid 15057:tid 15057] [client 47.128.47.239:45992] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|phantomkennels.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "phantomkennels.com"] [uri "/speeddial.com"] [unique_id "ahibnBLQ3e0EJS9fYm4MXwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2026-04-28 23:59:21 (3 months ago)	47.128.47.239 - - [29/Apr/2026:00:59:14 +0100] "GET /robots.txt HTTP/1.0" 200 4224 "-" "Mozilla/5.0 ... show more 47.128.47.239 - - [29/Apr/2026:00:59:14 +0100] "GET /robots.txt HTTP/1.0" 200 4224 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" ... show less	Bad Web Bot
🇺🇸 masterguru	2026-04-23 13:36:34 (4 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000-128) show less	Bad Web Bot
🇬🇧 Mendip_Defender	2026-04-07 04:51:51 (4 months ago)	47.128.47.239 - - [07/Apr/2026:05:51:47 +0100] "GET /robots.txt HTTP/1.0" 200 4224 "-" "Mozilla/5.0 ... show more 47.128.47.239 - - [07/Apr/2026:05:51:47 +0100] "GET /robots.txt HTTP/1.0" 200 4224 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" ... show less	Bad Web Bot
🇬🇧 Mendip_Defender	2026-03-29 05:34:57 (4 months ago)	47.128.47.239 - - [29/Mar/2026:06:34:55 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 ( ... show more 47.128.47.239 - - [29/Mar/2026:06:34:55 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" ... show less	Bad Web Bot

Showing 1 to 15 of 268 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 51.158.24.150

🇫🇷 2400:cb00:537:1000:bd3f:8a86:9319:1ae6

🇮🇩 182.8.226.150

🇲🇽 158.23.147.79

🇨🇿 78.44.192.210

🇩🇪 46.101.180.162

🇬🇧 35.203.211.183

🇨🇦 20.48.250.41

🇻🇳 14.225.217.73

🇫🇷 2400:cb00:537:1000:e034:fcf4:2b93:24bf

🇸🇪 158.174.211.17

🇺🇸 136.66.208.75

🇨🇳 124.237.211.30

🇦🇺 103.16.131.136

🇺🇸 75.127.6.2

🇺🇸 54.153.56.177

🇺🇸 34.24.37.112

🇺🇸 20.55.45.217

🇫🇷 2400:cb00:534:1000:704c:2b71:95ba:229

🇳🇱 192.42.116.56