JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.98.70

47.128.98.70 was found in our database!

This IP was reported 241 times. Confidence of Abuse is 12%: ?

12%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-98-70.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.98.70

Whois 47.128.98.70

IP Abuse Reports for 47.128.98.70:

This IP address has been reported a total of 241 times from 42 distinct sources. 47.128.98.70 was first reported on December 20th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Carsten	2026-08-24 03:34:54 (1 week ago)	Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/5 ... show more Bad web bot [Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://bytedance.sg.larkoffice.com/docx/K5bxdypulop3IIxrJb0lOjLVgFe) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-18 00:16:10 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 47.128.98.70 (ec2-47-128-98-70.ap-southeast-1.c ... show more (mod_security) mod_security (id:210730) triggered by 47.128.98.70 (ec2-47-128-98-70.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 20:16:05.965934 2026] [security2:error] [pid 27876:tid 27876] [client 47.128.98.70:30534] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vitalitywebb.com"] [uri "/backstore/graphics/Thumbs.db"] [unique_id "aoOkRUYQubbI9TRyyotsVwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-06-17 09:29:44 (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-02 15:55:22 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.98.70 (ec2-47-128-98-70.ap-southeast-1.c ... show more (mod_security) mod_security (id:210730) triggered by 47.128.98.70 (ec2-47-128-98-70.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 11:55:15.653192 2026] [security2:error] [pid 1394:tid 1394] [client 47.128.98.70:22814] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.christiansmobilemedic.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.christiansmobilemedic.com"] [uri "/services/module-programming/christiansmobilemedic.com"] [unique_id "afYeY4xgKzwo9pl66zHh8wAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-02-26 09:36:02 (6 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇺🇸 xmission.com	2026-01-03 22:27:31 (7 months ago)	47.128.98.70 - - [03/Jan/2026:15:27:30 -0700] "GET /related/listening/page/197/?page=128 HTTP/2.0" 2 ... show more 47.128.98.70 - - [03/Jan/2026:15:27:30 -0700] "GET /related/listening/page/197/?page=128 HTTP/2.0" 200 12869 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" 47.128.98.70 - - [03/Jan/2026:15:27:31 -0700] "GET /photos/leta/257.jpg HTTP/2.0" 404 146 "https://dooce.com/related/listening/page/197/?page=128" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" 47.128.98.70 - - [03/Jan/2026:15:27:31 -0700] "GET /photos/leta/251.jpg HTTP/2.0" 404 146 "https://dooce.com/related/listening/page/197/?page=128" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" 47.128.98.70 - - [03/Jan/2026:15:27:31 -0700] "GET /photos/leta/252.jpg HTTP/2.0" 404 146 "https://dooce.com/related/listening/page/197/?pag ... show less	Bad Web Bot
🇸🇬 anotherwatcher	2026-01-03 07:49:09 (7 months ago)	bad bot	Bad Web Bot
🇩🇪 Didier Lagaert	2025-12-30 04:47:26 (8 months ago)	lie-88 : Bloc AI bots=>/component/jevents/evenementsparjour/2022/3/18/43%7C66?Itemid=950(Bytespider)	Hacking
🇸🇬 anotherwatcher	2025-12-25 07:41:34 (8 months ago)	bad bot	Bad Web Bot
🇨🇦 1gz	2025-12-16 19:37:45 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2025-12-15 04:37:05 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/grida/ UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 bigorre.org	2025-12-14 14:35:37 (8 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇬🇧 Mendip_Defender	2025-11-17 12:52:38 (9 months ago)	47.128.98.70 - - [17/Nov/2025:12:52:30 +0000] "GET /robots.txt HTTP/1.0" 404 1073 "-" "Mozilla/5.0 ( ... show more 47.128.98.70 - - [17/Nov/2025:12:52:30 +0000] "GET /robots.txt HTTP/1.0" 404 1073 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" ... show less	Bad Web Bot
🇸🇬 anotherwatcher	2025-11-06 21:15:33 (9 months ago)	bad bot	Bad Web Bot
🇩🇪 conseilgouz	2025-11-06 15:27:47 (9 months ago)	vee-88 : Bloc AI bots=>/component/weblinks/weblink/35-sellerie-champenoise?Itemid=1029&catid=13& ... show more vee-88 : Bloc AI bots=>/component/weblinks/weblink/35-sellerie-champenoise?Itemid=1029&catid=13&task=weblink.go(Bytespider) show less	Hacking

Showing 1 to 15 of 241 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.230

192.168.90.159

🇺🇸 147.185.132.54

🇺🇸 136.108.13.177

🇺🇸 104.220.35.174

🇸🇬 103.250.11.116

100.98.177.196

🇺🇸 99.6.241.110

🇱🇹 62.60.130.201

🇧🇷 43.157.174.69

10.167.16.7

🇧🇷 181.233.18.22

🇨🇳 123.165.86.211

🇹🇭 101.108.70.46

🇺🇸 66.132.186.252

🇺🇸 34.73.91.3

🇺🇸 2607:f8b0:400c:c16::12b

🇦🇷 190.220.172.154

172.27.92.211

172.16.226.180