JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.53.209

47.128.53.209 was found in our database!

This IP was reported 295 times. Confidence of Abuse is 2%: ?

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-53-209.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.53.209

Whois 47.128.53.209

IP Abuse Reports for 47.128.53.209:

This IP address has been reported a total of 295 times from 44 distinct sources. 47.128.53.209 was first reported on September 17th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 palzer.IT	2026-10-15 04:41:25 (1 week ago)	Fail2ban automatic report for plesk-apache-badbot: 47.128.53.209 - - [13/Oct/2026:19:34:23 +0200] GE ... show more Fail2ban automatic report for plesk-apache-badbot: 47.128.53.209 - - [13/Oct/2026:19:34:23 +0200] GET / [DOMAIN_REMOVED] 200 42751 - Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@[DOMAIN_REMOVED]) show less	Bad Web Bot
🇩🇪 palzer.IT	2026-10-13 17:34:59 (1 week ago)	Fail2ban automatic report for plesk-apache-badbot: 47.128.53.209 - - [13/Oct/2026:19:34:23 +0200] GE ... show more Fail2ban automatic report for plesk-apache-badbot: 47.128.53.209 - - [13/Oct/2026:19:34:23 +0200] GET / [DOMAIN_REMOVED] 200 42751 - Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@[DOMAIN_REMOVED]) show less	Bad Web Bot
🇩🇪 palzer.IT	2026-09-05 01:01:42 (1 month ago)	Fail2ban automatic report for plesk-apache-badbot: 47.128.53.209 - - [05/Sep/2026:03:01:27 +0200] GE ... show more Fail2ban automatic report for plesk-apache-badbot: 47.128.53.209 - - [05/Sep/2026:03:01:27 +0200] GET / [DOMAIN_REMOVED] 200 37462 - Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@[DOMAIN_REMOVED]) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-19 19:55:56 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.53.209 (ec2-47-128-53-209.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.53.209 (ec2-47-128-53-209.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 15:55:49.403802 2026] [security2:error] [pid 30571:tid 30571] [client 47.128.53.209:61310] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|robertbanis.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "robertbanis.com"] [uri "/250/data/Assembly.dat"] [unique_id "agzARdl5PODgT-qb_EhVuwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-03-01 18:48:12 (7 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇫🇷 bigorre.org	2026-02-26 15:32:55 (8 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇫🇷 bigorre.org	2026-02-24 15:22:40 (8 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇪🇸 librebit	2026-02-18 02:38:35 (8 months ago)	Brute force	Brute-Force
🇬🇧 NotCool	2026-02-15 04:11:58 (8 months ago)	(CRAWLDELAY) Generic Bot Crawl-delay Violation 47.128.53.209 (SG/Singapore/ec2-47-128-53-209.ap-sout ... show more (CRAWLDELAY) Generic Bot Crawl-delay Violation 47.128.53.209 (SG/Singapore/ec2-47-128-53-209.ap-southeast-1.compute.amazonaws.com): 50 in the last 3600 secs show less	Bad Web Bot
🇮🇳 dineshskt4all	2026-02-11 08:44:05 (8 months ago)	47.128.53.209 - - [11/Feb/2026:08:44:01 +0000] "GET /index.php?limit=50&order=ASC&path=80_82_83&prod ... show more 47.128.53.209 - - [11/Feb/2026:08:44:01 +0000] "GET /index.php?limit=50&order=ASC&path=80_82_83&product_id=148&route=product%2Fproduct&sort=p.sort_order HTTP/1.0" 301 696 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" ... show less	IoT Targeted
🇪🇸 librebit	2026-01-18 09:02:02 (9 months ago)	Brute force	Brute-Force
🇪🇸 masterguru	2026-01-10 02:02:38 (9 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇫🇷 claude CALVET	2025-12-31 13:57:51 (9 months ago)	gew-Joomla User : try to access forms...	Hacking
🇺🇸 TPI-Abuse	2025-12-30 16:54:27 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 47.128.53.209 (ec2-47-128-53-209.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 47.128.53.209 (ec2-47-128-53-209.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 11:54:20.023759 2025] [security2:error] [pid 25348:tid 25348] [client 47.128.53.209:50880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.heuristicbooks.com"] [uri "/Heuristic%20Books%20--%20Algorithms%20for%20Better%20Living_files/ccx/"] [unique_id "aVQDvPT9vNCDQVHmxEjuVQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-12-11 20:25:17 (10 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /genshin-stella-mod/docs UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 295 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 209.99.190.186

🇲🇽 189.135.142.45

🇩🇪 146.70.160.238

🇳🇱 77.67.26.72

🇺🇸 66.117.5.228

🇮🇳 20.244.17.248

🇩🇪 2a00:1450:4001:c17::8a

🇺🇿 213.230.86.36

🇫🇷 193.70.55.51

🇨🇱 181.160.173.30

🇧🇷 177.155.142.109

🇩🇪 167.99.253.10

🇮🇳 157.37.143.144

🇺🇸 152.163.101.254

🇺🇸 109.105.209.57

🇩🇪 104.164.106.138

🇫🇷 87.98.184.199

🇩🇪 35.246.203.137

🇺🇸 20.83.59.243

🇧🇷 186.249.136.47