JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.97.70

47.128.97.70 was found in our database!

This IP was reported 223 times. Confidence of Abuse is 3%: ?

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-97-70.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.97.70

Whois 47.128.97.70

IP Abuse Reports for 47.128.97.70:

This IP address has been reported a total of 223 times from 39 distinct sources. 47.128.97.70 was first reported on January 1st 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Tilellit.PRO	2026-07-07 05:26:13 (1 day ago)	Malicious web traffic detected by CrowdSec	Hacking
🇫🇷 bigorre.org	2026-03-04 15:24:05 (4 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇫🇷 conseilgouz	2026-02-16 00:22:29 (4 months ago)	sae-88 : Bloc AI bots=>/votre-mairie/conseil-municipal-des-jeunes/charte-du-conseil-municipal-des-je ... show more sae-88 : Bloc AI bots=>/votre-mairie/conseil-municipal-des-jeunes/charte-du-conseil-municipal-des-jeunes(Bytespider) show less	Hacking
🇬🇧 NotCool	2026-01-16 01:11:10 (5 months ago)	(CRAWLDELAY) Generic Bot Crawl-delay Violation 47.128.97.70 (SG/Singapore/ec2-47-128-97-70.ap-southe ... show more (CRAWLDELAY) Generic Bot Crawl-delay Violation 47.128.97.70 (SG/Singapore/ec2-47-128-97-70.ap-southeast-1.compute.amazonaws.com): 10 in the last 3600 secs show less	Bad Web Bot
🇫🇷 conseilgouz	2026-01-12 20:22:45 (5 months ago)	sae-88 : Bloc AI bots=>/votre-mairie/seances-du-cm/proces-verbal-2024(Bytespider)	Hacking
🇺🇸 TPI-Abuse	2026-01-06 14:29:19 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 47.128.97.70 (ec2-47-128-97-70.ap-southeast-1.c ... show more (mod_security) mod_security (id:210492) triggered by 47.128.97.70 (ec2-47-128-97-70.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 06 09:29:12.420356 2026] [security2:error] [pid 30568:tid 30568] [client 47.128.97.70:60672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heuristicbooks.com"] [uri "/Heuristic%20Books%20--%20Algorithms%20for%20Better%20Living_files/ccx/"] [unique_id "aV0cOArYnUlEjPMtEYD1OwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Didier Lagaert	2026-01-06 04:29:02 (6 months ago)	lie-88 : Bloc AI bots=>/component/jevents/evenementsparjour/2026/10/28/43%7C66?Itemid=950(Bytespider ... show more lie-88 : Bloc AI bots=>/component/jevents/evenementsparjour/2026/10/28/43%7C66?Itemid=950(Bytespider) show less	Hacking
🇺🇸 TPI-Abuse	2025-12-25 09:28:55 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.97.70 (ec2-47-128-97-70.ap-southeast-1.c ... show more (mod_security) mod_security (id:210730) triggered by 47.128.97.70 (ec2-47-128-97-70.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 25 04:28:50.188028 2025] [security2:error] [pid 26274:tid 26274] [client 47.128.97.70:50328] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.med-engineering.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.med-engineering.com"] [uri "/clofert.com"] [unique_id "aU0D0p51pQzBqkqQFnHuigAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 NotCool	2025-12-17 03:43:04 (6 months ago)	(CRAWLDELAY) Generic Bot Crawl-delay Violation 47.128.97.70 (ec2-47-128-97-70.ap-southeast-1.compute ... show more (CRAWLDELAY) Generic Bot Crawl-delay Violation 47.128.97.70 (ec2-47-128-97-70.ap-southeast-1.compute.amazonaws.com): 10 in the last 3600 secs show less	Bad Web Bot
🇨🇦 1gz	2025-12-12 19:09:35 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇩 hermawan	2025-12-10 21:55:50 (6 months ago)	[Thu Dec 11 04:55:05.155355 2025] [security2:error] [pid 200778:tid 140653832193728] [client 47.128. ... show more [Thu Dec 11 04:55:05.155355 2025] [security2:error] [pid 200778:tid 140653832193728] [client 47.128.97.70:27244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "253"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) request_line = GET /index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya"] [unique_id "aTnsOUXJ0KtQ7Ywd2_VSMwAAQQA"] [staklim-jatim.bmkg.go.id] [staklim-jat ... show less	Hacking Web App Attack
🇦🇺 MAGIC	2025-12-04 03:07:09 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-12-01 08:10:21 (7 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 conseilgouz	2025-11-16 17:53:19 (7 months ago)	ece-24 : CGSECURE_MSG_24=>/calendrier/detailevenement/596/-/confidentialite(Bytespider)	Hacking
🇸🇬 Charles	2025-10-21 03:12:47 (8 months ago)	47.128.97.70 - - [21/Oct/2025:11:12:44 +0800] "GET /robots.txt HTTP/1.1" 200 4071 "-" "Mozilla/5.0 ( ... show more 47.128.97.70 - - [21/Oct/2025:11:12:44 +0800] "GET /robots.txt HTTP/1.1" 200 4071 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" ... show less	Web Spam Email Spam Brute-Force Bad Web Bot Web App Attack SSH

Showing 1 to 15 of 223 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇶 185.21.138.164

🇨🇦 205.250.25.62

🇺🇸 132.148.164.18

🇵🇰 110.93.224.226

🇧🇪 34.79.115.40

🇺🇸 209.50.162.17

🇰🇷 183.104.220.195

🇸🇬 104.28.156.107

🇩🇪 87.149.133.136

🇪🇸 85.86.57.139

🇱🇹 77.90.185.87

🇺🇸 54.81.128.62

🇺🇸 49.51.193.121

🇺🇸 35.239.203.86

🇦🇪 5.107.192.120

🇲🇽 2806:230:6052:416e:14fc:3caf:eab2:241c

🇨🇳 117.50.51.119

🇮🇩 103.97.101.25

🇳🇱 91.92.40.12

🇺🇸 75.75.145.247