JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.22.211

47.128.22.211 was found in our database!

This IP was reported 292 times. Confidence of Abuse is 0%: ?

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-22-211.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.22.211

Whois 47.128.22.211

IP Abuse Reports for 47.128.22.211:

This IP address has been reported a total of 292 times from 56 distinct sources. 47.128.22.211 was first reported on August 17th 2023, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 dbmwebdesign	2026-03-10 22:18:19 (4 months ago)	Bot detected and blocked by Fail2Ban in bytespider jail	Bad Web Bot
🇫🇷 bigorre.org	2026-03-08 15:24:52 (4 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇫🇷 bigorre.org	2026-03-01 13:49:37 (4 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇨🇭 backslash	2026-02-27 21:57:00 (4 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇫🇷 bigorre.org	2026-02-24 14:37:50 (4 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇫🇷 bigorre.org	2026-02-15 16:58:51 (4 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇫🇷 bigorre.org	2026-02-12 14:53:49 (5 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇺🇸 xmission.com	2026-02-09 23:42:17 (5 months ago)	47.128.22.211 - - [09/Feb/2026:16:42:15 -0700] "GET /related/parenthood/page/482/?page=76 HTTP/2.0" ... show more 47.128.22.211 - - [09/Feb/2026:16:42:15 -0700] "GET /related/parenthood/page/482/?page=76 HTTP/2.0" 200 12234 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.22.211 - - [09/Feb/2026:16:42:16 -0700] "GET /wp-content/uploads/2012/07/407.jpg HTTP/2.0" 206 500 "https://dooce.com/related/parenthood/page/482/?page=76" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.22.211 - - [09/Feb/2026:16:42:16 -0700] "GET /photos/leta/407.jpg HTTP/2.0" 404 548 "https://dooce.com/related/parenthood/page/482/?page=76" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.22.211 - - [09/Feb/2026:16:42:16 -0700] "GET /photos/leta/402.jpg HTTP/2.0" 404 548 "https://dooce.com/related/parenthood/page/482/?page=76" "Mozilla/5 ... show less	Bad Web Bot
🇩🇪 dbmwebdesign	2026-02-09 04:10:19 (5 months ago)	Bot detected and blocked by Fail2Ban in bytespider jail	Bad Web Bot
🇺🇸 S.O.B.A. Dev.	2026-02-03 15:17:28 (5 months ago)	Threat Blocked by BeeHive from (ASN:16509) (Network:AMAZON-02 - Amazon.com, Inc.) (Host:soba.dev) (M ... show more Threat Blocked by BeeHive from (ASN:16509) (Network:AMAZON-02 - Amazon.com, Inc.) (Host:soba.dev) (Method:GET) (Protocol:HTTP/2) (Timestamp:2026-02-03T15:17:28Z) show less	Web Spam Brute-Force Web App Attack
🇩🇪 Reinhard	2026-01-12 02:44:20 (6 months ago)	Unknown activity, but too many attacks with too many users.	Hacking
🇺🇸 xmission.com	2026-01-08 04:24:27 (6 months ago)	47.128.22.211 - - [07/Jan/2026:21:24:25 -0700] "GET /category/photos/daily-photo/page/1971/?page=176 ... show more 47.128.22.211 - - [07/Jan/2026:21:24:25 -0700] "GET /category/photos/daily-photo/page/1971/?page=176 HTTP/2.0" 200 9336 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.22.211 - - [07/Jan/2026:21:24:26 -0700] "GET /wp-content/uploads/2012/07/11_02_2005.jpg HTTP/2.0" 206 500 "https://dooce.com/category/photos/daily-photo/page/1971/?page=176" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.22.211 - - [07/Jan/2026:21:24:27 -0700] "GET /photos/dailyphoto/11_02_2005.jpg HTTP/2.0" 206 500 "https://dooce.com/category/photos/daily-photo/page/1971/?page=176" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.22.211 - - [07/Jan/2026:21:24:27 -0700] "GET /photos/dailyphoto/11_02_2005_02.jpg HTTP/2.0" 404 548 ... show less	Bad Web Bot
🇩🇪 conseilgouz	2026-01-07 10:01:07 (6 months ago)	lae-88 : Bloc AI bots=>/images/gpxtracks/promenade_45minutes.gpx(Bytespider)	Hacking
🇺🇸 TPI-Abuse	2026-01-04 04:17:49 (6 months ago)	(mod_security) mod_security (id:211190) triggered by 47.128.22.211 (ec2-47-128-22-211.ap-southeast-1 ... show more (mod_security) mod_security (id:211190) triggered by 47.128.22.211 (ec2-47-128-22-211.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 03 23:17:41.797932 2026] [security2:error] [pid 5579:tid 5579] [client 47.128.22.211:18234] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|heuristicbooks.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /Heuristic Books -- Algorithms for Better Living_files/ccx/?dir=%2Fhome%2Frbanis%2Fetc%2Fautism.disabilitiesdespair.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heuristicbooks.com"] [uri "/Heuristic Books -- Algorithms for Better Living_files/ccx/"] [unique_id "aVnp5ePlTAbJ_oEpu3-pBAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-31 00:08:10 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.22.211 (ec2-47-128-22-211.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.22.211 (ec2-47-128-22-211.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 19:08:03.632341 2025] [security2:error] [pid 955239:tid 955243] [client 47.128.22.211:57338] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.aafmorg.aafm.us\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.aafmorg.aafm.us"] [uri "/http/charteredfinancialmanager.com"] [unique_id "aVRpY4ef0VhWqgbMncW4SQAAAME"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 292 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 190.5.200.98

🇧🇷 179.176.210.17

🇺🇸 141.11.88.236

🇧🇷 82.47.106.14

🇱🇹 81.30.98.44

🇺🇸 65.60.38.74

🇺🇸 44.236.134.34

🇧🇷 20.226.66.230

🇧🇴 181.188.176.242

🇭🇰 103.43.191.43

🇭🇰 101.36.106.75

🇺🇸 44.175.16.65

🇫🇷 185.177.72.68

🇮🇩 103.82.180.7

🇮🇷 95.80.170.239

🇺🇸 79.127.217.51

🇺🇸 44.126.41.59

🇰🇷 1.250.67.190

🇺🇸 2607:f8b0:4004:c27::12c

🇩🇪 194.88.98.121