JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.52.95

47.128.52.95 was found in our database!

This IP was reported 310 times. Confidence of Abuse is 84%: ?

84%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-52-95.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.52.95

Whois 47.128.52.95

IP Abuse Reports for 47.128.52.95:

This IP address has been reported a total of 310 times from 61 distinct sources. 47.128.52.95 was first reported on September 15th 2023, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-01 19:47:08 (10 hours ago)	(mod_security) mod_security (id:210730) triggered by 47.128.52.95 (ec2-47-128-52-95.ap-southeast-1.c ... show more (mod_security) mod_security (id:210730) triggered by 47.128.52.95 (ec2-47-128-52-95.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 15:47:02.031292 2026] [security2:error] [pid 22631:tid 22631] [client 47.128.52.95:63846] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gamepart.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "apcrtqNkIuyIxyj69A5kJgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-09-01 05:22:37 (1 day ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (iPhone; CPU iPhone OS 7_1_2 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Version/7.0 Mobile Safari/537.36 (compatible; Bytespider; https://bytedance.sg.larkoffice.com/docx/K5bxdypulop3IIxrJb0lOjLVgFe) show less	Bad Web Bot Web App Attack
🇩🇪 cloudmax	2026-08-31 15:27:44 (1 day ago)	Cloudmax Protect [BOT BLOCK] - Suspicious User-Agent. Possible resource abuse, excessive requests, o ... show more Cloudmax Protect [BOT BLOCK] - Suspicious User-Agent. Possible resource abuse, excessive requests, or hacking attempt show less	Bad Web Bot
🇳🇴 tmiland	2026-08-29 17:05:50 (3 days ago)	(nginx_444) Nginx 444 47.128.52.95 (SG/Singapore/ec2-47-128-52-95.ap-southeast-1.compute.amazonaws.c ... show more (nginx_444) Nginx 444 47.128.52.95 (SG/Singapore/ec2-47-128-52-95.ap-southeast-1.compute.amazonaws.com): 5 in the last 3600 secs; IP: 47.128.52.95; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 47.128.52.95 - - [29/Aug/2026:19:05:39 +0200] "GET /robots.txt HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 7_1_2 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Version/7.0 Mobile Safari/537.36 (compatible; Bytespider; https://bytedance.sg.larkoffice.com/docx/K5bxdypulop3IIxrJb0lOjLVgFe)" 47.128.52.95 - - [29/Aug/2026:19:05:42 +0200] "GET /robots.txt HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 7_1_2 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Version/7.0 Mobile Safari/537.36 (compatible; Bytespider; https://bytedance.sg.larkoffice.com/docx/K5bxdypulop3IIxrJb0lOjLVgFe)" 47.128.52.95 - - [29/Aug/2026:19:05:44 +0200] "GET /robots.txt HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 7_1_2 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Version/7.0 Mobile S show less	Brute-Force
🇺🇸 SX Communications	2026-08-29 01:33:33 (4 days ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 47.128.52.95: traffic from this add ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 47.128.52.95: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇩🇪 conseilgouz	2026-08-29 01:05:27 (4 days ago)	vee-88 : Bloc AI bots=>/robots.txt(Bytespider)	Hacking
🇫🇷 conseilgouz	2026-08-28 20:05:19 (4 days ago)	sce-88 : Bloc AI bots=>/robots.txt(Bytespider)	Hacking
🇸🇬 anotherwatcher	2026-08-28 02:37:24 (5 days ago)	bad bot	Bad Web Bot
🇫🇷 claude CALVET	2026-08-25 16:17:22 (1 week ago)	gee-88 : Bloc AI bots=>/robots.txt(Bytespider)	Hacking
🇳🇴 tmiland	2026-08-25 06:43:34 (1 week ago)	(nginx_444) Nginx 444 47.128.52.95 (SG/Singapore/ec2-47-128-52-95.ap-southeast-1.compute.amazonaws.c ... show more (nginx_444) Nginx 444 47.128.52.95 (SG/Singapore/ec2-47-128-52-95.ap-southeast-1.compute.amazonaws.com): 5 in the last 3600 secs; IP: 47.128.52.95; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 47.128.52.95 - - [25/Aug/2026:08:43:20 +0200] "GET /robots.txt HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 7_1_2 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Version/7.0 Mobile Safari/537.36 (compatible; Bytespider; https://bytedance.sg.larkoffice.com/docx/K5bxdypulop3IIxrJb0lOjLVgFe)" 47.128.52.95 - - [25/Aug/2026:08:43:22 +0200] "GET /robots.txt HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 7_1_2 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Version/7.0 Mobile Safari/537.36 (compatible; Bytespider; https://bytedance.sg.larkoffice.com/docx/K5bxdypulop3IIxrJb0lOjLVgFe)" 47.128.52.95 - - [25/Aug/2026:08:43:24 +0200] "GET /robots.txt HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 7_1_2 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Version/7.0 Mobile S show less	Brute-Force
🇩🇪 Vegascosmetics	2026-08-25 05:35:08 (1 week ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local blo ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (64, Abuse: 58) show less	Hacking Exploited Host Web App Attack
🇩🇪 cloudmax	2026-08-24 16:43:39 (1 week ago)	Cloudmax Protect [BOT BLOCK] - Suspicious User-Agent. Possible resource abuse, excessive requests, o ... show more Cloudmax Protect [BOT BLOCK] - Suspicious User-Agent. Possible resource abuse, excessive requests, or hacking attempt show less	Bad Web Bot
🇺🇸 Victor López	2026-08-21 09:00:32 (1 week ago)	ads.buscaempresas.co 47.128.52.95 - - [21/Aug/2026:04:00:29 -0500] "GET /robots.txt HTTP/1.1" 444 0 ... show more ads.buscaempresas.co 47.128.52.95 - - [21/Aug/2026:04:00:29 -0500] "GET /robots.txt HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 7_1_2 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Version/7.0 Mobile Safari/537.36 (compatible; Bytespider; https://bytedance.sg.larkoffice.com/docx/K5bxdypulop3IIxrJb0lOjLVgFe)" - ads.buscaempresas.co 47.128.52.95 - - [21/Aug/2026:04:00:30 -0500] "GET /robots.txt HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 7_1_2 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Version/7.0 Mobile Safari/537.36 (compatible; Bytespider; https://bytedance.sg.larkoffice.com/docx/K5bxdypulop3IIxrJb0lOjLVgFe)" - ads.buscaempresas.co 47.128.52.95 - - [21/Aug/2026:04:00:31 -0500] "GET /robots.txt HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 7_1_2 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Version/7.0 Mobile Safari/537.36 (compatible; Bytespider; https://bytedance.sg.larkoffice.com/docx/K5bxdypulop3IIxrJb0lOjLVgFe)" - ... show less	Hacking Web App Attack
🇭🇳 unph	2026-08-21 08:42:45 (1 week ago)	Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin	Brute-Force
🇩🇪 psauxit	2026-08-18 00:51:59 (2 weeks ago)	Fail2Ban - NGINX heavily bad-bot, possible vulnerability scanning and excessive crawling/scraping	Bad Web Bot Web App Attack Hacking Web Spam

Showing 1 to 15 of 310 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.203

🇩🇪 194.88.98.86

🇺🇸 66.132.186.222

🇬🇧 35.203.211.150

🇨🇦 15.235.117.43

🇳🇱 185.223.235.60

🇩🇪 167.94.145.25

🇺🇸 147.185.132.168

🇵🇭 136.239.186.34

🇺🇸 128.61.164.18

🇨🇳 101.71.39.174

🇫🇷 91.231.89.154

🇫🇷 91.231.89.75

🇺🇸 91.230.168.132

🇫🇷 91.196.152.25

🇬🇧 82.12.143.171

🇺🇸 64.16.131.95

🇩🇪 23.158.56.120

🇷🇴 2.57.122.53

🇦🇷 216.244.224.174