JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.59.166

47.128.59.166 was found in our database!

This IP was reported 301 times. Confidence of Abuse is 19%: ?

19%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-59-166.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.59.166

Whois 47.128.59.166

IP Abuse Reports for 47.128.59.166:

This IP address has been reported a total of 301 times from 45 distinct sources. 47.128.59.166 was first reported on September 20th 2023, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 YF	2026-07-16 21:00:54 (18 hours ago)	WordPress content enumeration	Web App Attack
🇪🇸 masterguru	2026-07-07 02:49:29 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇪🇸 masterguru	2026-06-30 15:30:59 (2 weeks ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-10 10:12:55 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 47.128.59.166 (ec2-47-128-59-166.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.59.166 (ec2-47-128-59-166.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 06:12:48.179872 2026] [security2:error] [pid 23041:tid 23041] [client 47.128.59.166:34624] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|informativearticles.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "informativearticles.com"] [uri "/nutrition/[email protected]"] [unique_id "aik4oMhRKKqZ4sgNstc4GQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-05-21 03:03:28 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇪🇸 masterguru	2026-05-14 02:23:17 (2 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇪🇸 masterguru	2026-05-03 16:06:19 (2 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇪🇸 masterguru	2026-04-21 21:03:40 (2 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇱🇺 conseilgouz	2026-04-18 18:43:01 (2 months ago)	are-88 : Bloc AI bots=>/component/icagenda/13-toussaints?iccaldate=2023-02-1(Bytespider)	Hacking
🇪🇸 masterguru	2026-04-13 07:18:02 (3 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇪🇸 masterguru	2026-04-06 08:09:09 (3 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-01 09:43:49 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.59.166 (ec2-47-128-59-166.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.59.166 (ec2-47-128-59-166.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 05:43:41.169901 2026] [security2:error] [pid 2246:tid 2246] [client 47.128.59.166:28054] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.informativearticles.com\|F\|2"] [data ".tripod.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.informativearticles.com"] [uri "/relationships/dennissiluk.tripod.com"] [unique_id "aczozXDranF7Bq02Fe6CfwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇳 dineshskt4all	2026-03-23 18:30:56 (3 months ago)	47.128.59.166 - - [23/Mar/2026:18:30:51 +0000] "GET /trip/pleasant-dharamshala-by-volvo/ HTTP/1.0" 2 ... show more 47.128.59.166 - - [23/Mar/2026:18:30:51 +0000] "GET /trip/pleasant-dharamshala-by-volvo/ HTTP/1.0" 200 46025 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" ... show less	IoT Targeted
🇱🇺 conseilgouz	2026-03-23 17:35:33 (3 months ago)	are-88 : Bloc AI bots=>/evenements/113-74-2015-10-02-11-04-19?iccaldate=2060-08-1(Bytespider)	Hacking
🇺🇸 TPI-Abuse	2026-03-14 02:47:57 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.59.166 (ec2-47-128-59-166.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.59.166 (ec2-47-128-59-166.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 13 22:47:52.143426 2026] [security2:error] [pid 23415:tid 23415] [client 47.128.59.166:48008] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.informativearticles.com\|F\|2"] [data ".tripod.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.informativearticles.com"] [uri "/poetry/at http:/dennissiluk.tripod.com"] [unique_id "abTMWJxNwXTYB0ay5cuJ3QAAABs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 301 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.105

🇻🇳 171.231.192.231

🇺🇸 147.185.132.85

🇯🇵 118.194.229.94

🇨🇳 116.178.156.58

🇳🇱 103.161.34.59

🇮🇩 103.154.77.48

🇳🇱 45.148.10.147

🇮🇳 20.193.141.133

🇨🇳 8.134.157.132

🇳🇱 213.177.179.80

🇬🇧 195.96.139.16

🇬🇧 193.163.125.239

🇧🇷 189.36.245.75

🇧🇷 187.21.16.174

🇭🇰 185.227.152.135

🇨🇳 171.12.10.130

🇬🇭 154.160.3.9

🇨🇳 153.0.50.255

🇻🇳 116.99.174.232