AbuseIPDB » 47.128.48.254

47.128.48.254 was found in our database!

This IP was reported 258 times. Confidence of Abuse is 33%: ?

33%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-48-254.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 47.128.48.254

Whois 47.128.48.254

IP Abuse Reports for 47.128.48.254:

This IP address has been reported a total of 258 times from 36 distinct sources. 47.128.48.254 was first reported on September 16th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
MAGIC	2025-07-01 06:09:39 (1 week ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
hostseries	2025-06-27 19:34:06 (2 weeks ago)	Trigger: LF_MODSEC	Brute-Force
MAGIC	2025-06-19 11:01:48 (3 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
TPI-Abuse	2025-06-18 12:09:05 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 47.128.48.254 (ec2-47-128-48-254.ap-southeast-1 ... show more(mod_security) mod_security (id:210730) triggered by 47.128.48.254 (ec2-47-128-48-254.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 18 08:09:00.651707 2025] [security2:error] [pid 2639970:tid 2639970] [client 47.128.48.254:19056] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||med-engineering.com|F|2"] [data ".mqco.med-engineering.com.mgh.cs"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "med-engineering.com"] [uri "/fby.mqco.med-engineering.com.mgh.cs"] [unique_id "aFKsXGde_nPOUdZ14BJIOwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
VHosting	2025-06-15 23:50:07 (3 weeks ago)	Detected attack by Imunify360	Brute-Force Web App Attack
Anonymous	2025-06-12 12:16:24 (4 weeks ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
glaserceramics	2025-06-06 17:57:10 (1 month ago)	Automated report (2025-06-06T12:57:10-05:00). Misbehaving bot detected.	Bad Web Bot
Anonymous	2025-06-06 13:47:48 (1 month ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
MAGIC	2025-06-03 15:15:27 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-06-02 00:48:36 (1 month ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-05-31 21:34:03 (1 month ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-05-17 21:17:59 (1 month ago)	Action: Block, Reason: DDOS attack detected	DDoS Attack
MAGIC	2025-05-11 02:05:14 (2 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-05-10 19:31:20 (2 months ago)	Action: Block, Reason: DDOS attack detected	DDoS Attack
Anonymous	2025-05-09 15:14:56 (2 months ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩