AbuseIPDB » 47.128.52.117

47.128.52.117 was found in our database!

This IP was reported 182 times. Confidence of Abuse is 35%: ?

35%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	ec2-47-128-52-117.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	Singapore
City	Singapore, Singapore

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 47.128.52.117

Whois 47.128.52.117

IP Abuse Reports for 47.128.52.117:

This IP address has been reported a total of 182 times from 25 distinct sources. 47.128.52.117 was first reported on September 15th 2023, and the most recent report was 20 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-10-05 02:53:10 (20 minutes ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-10-03 06:41:24 (1 day ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-10-02 02:27:22 (3 days ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-09-30 07:59:38 (4 days ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-09-29 07:49:12 (5 days ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-09-26 01:24:39 (1 week ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
hermawan	2024-09-22 09:44:09 (1 week ago)	[Sun Sep 22 04:33:42.265702 2024] [security2:error] [pid 314604:tid 137049988400832] [client 47.128. ... show more[Sun Sep 22 04:33:42.265702 2024] [security2:error] [pid 314604:tid 137049988400832] [client 47.128.52.117:32400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.5.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "39"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) request_line = GET /index.php/profil/arsip-artikel?catid=474&id=517%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-28-april-4-mei-2015&start=70 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "Zu87tgh_yh1Fj_bYcx1-wAAAgg0"] [staklim-malang.info] [staklim-malang.info] top=[314618] [eaJF6CcpqRI] [Zu87tgh_yh1Fj_bYcx1-wA ... show less	Hacking Web App Attack
bigorre.org	2024-09-17 01:19:14 (2 weeks ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
clapper	2024-09-13 05:01:05 (3 weeks ago)	(mod_security) mod_security (id:980001) triggered by 47.128.52.117 (SG/Singapore/ec2-47-128-52-117.a ... show more(mod_security) mod_security (id:980001) triggered by 47.128.52.117 (SG/Singapore/ec2-47-128-52-117.ap-southeast-1.compute.amazonaws.com): 5 in the last 3600 secs; ID: Dan show less	Brute-Force Bad Web Bot
hermawan	2024-09-11 23:18:48 (3 weeks ago)	[Thu Sep 12 06:14:01.378820 2024] [security2:error] [pid 135124:tid 136162670806720] [client 47.128. ... show more[Thu Sep 12 06:14:01.378820 2024] [security2:error] [pid 135124:tid 136162670806720] [client 47.128.52.117:18176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.5.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "39"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) request_line = GET /index.php/profil/meteorologi/list-all-categories/4078-klimatologi/analisis-klimatologi/analisis-dasarian/distribusi-curah-hujan-dasarian-propinsi-jawa-timur/analisis-dasarian-distribusi-curah-hujan-propinsi-jawa-timur-tahun-2021/555559011-analisis-dasarian-distribusi-curah-hujan-..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-cat ... show less	Hacking Web App Attack
Anonymous	2024-09-03 06:25:29 (1 month ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Melle	2024-09-02 22:37:44 (1 month ago)	Unauthorized connection attempt detected from IP address 47.128.52.117	Bad Web Bot
hermawan	2024-09-02 22:15:58 (1 month ago)	[Tue Sep 03 05:15:57.533515 2024] [security2:error] [pid 187896:tid 124613489067712] [client 47.128. ... show more[Tue Sep 03 05:15:57.533515 2024] [security2:error] [pid 187896:tid 124613489067712] [client 47.128.52.117:23684] [client 47.128.52.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.5.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "39"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) request_line = GET /index.php/profil/meteorologi/list-all-categories/3962-klimatologi/infografis/infografis-klimatologi/infografis-dasarian/infografis-dasarian-tahun-2019/1128-infografis-dasarian-informasi-iklim-jatim-update-20-oktober-2019 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/3962-klimatologi/infogr ... show less	Hacking Web App Attack
Melle	2024-08-29 05:25:26 (1 month ago)	Unauthorized connection attempt detected from IP address 47.128.52.117	Bad Web Bot
bigorre.org	2024-08-24 01:29:01 (1 month ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot