JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

47.128.57.65

Neutral Activity

Abuse confidence score ?

0% Low Risk

267 reports

40 reporters · latest 8 months ago

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-57-65.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

47.128.57.65 has been reported 267 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 47.128.57.65

This IP address has been reported a total of 267 times from 40 distinct sources. 47.128.57.65 was first reported on September 17th 2023, and the most recent report was 8 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-01-15 02:17:37 (8 months ago)	Brute force	Brute-Force
🇩🇪 Reinhard	2026-01-01 08:33:44 (8 months ago)	Unknown activity, but too many attacks with too many users.	Hacking
🇺🇸 TPI-Abuse	2025-12-25 15:25:34 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.57.65 (ec2-47-128-57-65.ap-southeast-1.c ... show more (mod_security) mod_security (id:210730) triggered by 47.128.57.65 (ec2-47-128-57-65.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 25 10:25:27.777823 2025] [security2:error] [pid 22960:tid 22960] [client 47.128.57.65:64956] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|med-engineering.com\|F\|2"] [data ".lrle.med-engineering.com.lzn.vb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "med-engineering.com"] [uri "/jgl.lrle.med-engineering.com.lzn.vb"] [unique_id "aU1XZye2nrIA12pXGn3cBQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2025-12-25 06:51:13 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 xmission.com	2025-12-23 16:42:38 (9 months ago)	47.128.57.65 - - [23/Dec/2025:09:42:36 -0700] "GET /category/photos/daily-photo/page/1964/?page=187 ... show more 47.128.57.65 - - [23/Dec/2025:09:42:36 -0700] "GET /category/photos/daily-photo/page/1964/?page=187 HTTP/2.0" 200 9373 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.57.65 - - [23/Dec/2025:09:42:37 -0700] "GET /wp-content/uploads/2012/07/11_11_2005.jpg HTTP/2.0" 206 500 "https://dooce.com/category/photos/daily-photo/page/1964/?page=187" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.57.65 - - [23/Dec/2025:09:42:37 -0700] "GET /photos/dailyphoto/11_11_2005.jpg HTTP/2.0" 206 500 "https://dooce.com/category/photos/daily-photo/page/1964/?page=187" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.57.65 - - [23/Dec/2025:09:42:37 -0700] "GET /photos/dailyphoto/11_11_2005_02.jpg HTTP/2.0" 404 548 "ht ... show less	Bad Web Bot
🇮🇳 dineshskt4all	2025-12-12 17:16:31 (9 months ago)	[Fri Dec 12 17:16:29.012708 2025] [proxy_fcgi:error] [pid 596045:tid 127878263916224] [client 47.128 ... show more [Fri Dec 12 17:16:29.012708 2025] [proxy_fcgi:error] [pid 596045:tid 127878263916224] [client 47.128.57.65:0] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇮🇩 hermawan	2025-12-12 12:07:09 (9 months ago)	[Fri Dec 12 19:05:16.130829 2025] [security2:error] [pid 493380:tid 139918301365952] [client 47.128. ... show more [Fri Dec 12 19:05:16.130829 2025] [security2:error] [pid 493380:tid 139918301365952] [client 47.128.57.65:37982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "253"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-tahunan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-tahunan"] [unique_id "aTwE-xbvwiejwfrlkQFQ8AAAQQA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[493433] [R2wDEwBw+lc] [aTwE-xbvwiejwfrlkQFQ8AAAQQA] keep_alive=[1] [2025-12-12 19:05:16. ... show less	Hacking Web App Attack
🇪🇸 masterguru	2025-12-09 00:03:47 (9 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
Anonymous	2025-11-22 23:07:40 (10 months ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇫🇷 bigorre.org	2025-09-19 16:35:14 (1 year ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
Anonymous	2025-09-19 15:41:21 (1 year ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇵🇱 sefinek.net	2025-09-18 23:51:03 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /genshin-stella-mod/docs UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-09-01 04:38:07 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 47.128.57.65 (ec2-47-128-57-65.ap-southeast-1.c ... show more (mod_security) mod_security (id:210730) triggered by 47.128.57.65 (ec2-47-128-57-65.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 01 00:38:00.109417 2025] [security2:error] [pid 26384:tid 26384] [client 47.128.57.65:23356] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|curriergallery.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "curriergallery.com"] [uri "/[email protected]"] [unique_id "aLUjKGnVVruH2WrVTO4jHQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 exxos	2025-08-21 06:03:01 (1 year ago)	Attacks with Bad user agents	Hacking
🇫🇷 bigorre.org	2025-08-18 14:17:05 (1 year ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot

Showing 1 to 15 of 267 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.250

🇺🇸 195.184.76.226

🇺🇸 195.88.57.232

🇭🇰 177.4.10.204

🇺🇸 162.35.175.206

🇧🇷 160.19.242.126

🇧🇷 138.204.27.4

🇨🇳 103.203.140.40

🇻🇳 103.159.54.61

🇨🇮 102.210.16.40

🇰🇷 49.247.37.22

🇺🇸 205.210.31.82

🇵🇰 203.215.174.191

🇪🇬 196.202.42.151

🇧🇷 191.235.99.165

🇺🇸 173.207.70.42

🇭🇰 165.154.2.151

🇿🇦 102.66.132.156

🇵🇪 38.25.18.55

🇺🇸 34.45.63.104