JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.27.91

47.128.27.91 was found in our database!

This IP was reported 296 times. Confidence of Abuse is 10%: ?

10%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-27-91.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.27.91

Whois 47.128.27.91

IP Abuse Reports for 47.128.27.91:

This IP address has been reported a total of 296 times from 52 distinct sources. 47.128.27.91 was first reported on August 20th 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 elcruzado.es	2026-07-21 03:00:34 (2 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 47.128.27.91 (SG/Sin ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 47.128.27.91 (SG/Singapore/ec2-47-128-27-91.ap-southeast-1.compute.amazonaws.com) show less	Bad Web Bot
🇷🇴 StarTech Team	2026-05-30 22:58:12 (1 month ago)	Web App Atack	Web App Attack
🇺🇸 S.O.B.A. Dev.	2026-05-23 11:53:04 (2 months ago)	Threat Blocked by BeeHive from (ASN:16509) (Network:Amazon.com, Inc.) (Host:soba.dev) (Method:GET) ( ... show more Threat Blocked by BeeHive from (ASN:16509) (Network:Amazon.com, Inc.) (Host:soba.dev) (Method:GET) (Protocol:HTTP/2) (Timestamp:2026-05-23T11:53:04Z) show less	Brute-Force Web Spam Web App Attack
🇨🇳 ThreatBook.io	2026-05-07 23:49:12 (2 months ago)	2026-05-07 03:02:19 /docs/elapi/index.html	Web App Attack
🇪🇸 masterguru	2026-05-06 19:42:54 (2 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-123) show less	Bad Web Bot
🇷🇴 StarTech Team	2026-04-25 02:24:00 (2 months ago)	Web App Atack	Web App Attack
🇨🇳 ThreatBook.io	2026-04-12 23:31:38 (3 months ago)	2026-04-12 16:02:39 /robots.txt	Web App Attack
🇨🇭 backslash	2026-03-04 11:12:02 (4 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇺🇸 xmission.com	2026-02-12 11:27:14 (5 months ago)	47.128.27.91 - - [12/Feb/2026:04:27:12 -0700] "GET /related/listening/page/242/?page=100 HTTP/2.0" 2 ... show more 47.128.27.91 - - [12/Feb/2026:04:27:12 -0700] "GET /related/listening/page/242/?page=100 HTTP/2.0" 200 13753 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.27.91 - - [12/Feb/2026:04:27:13 -0700] "GET /wp-content/uploads/2012/07/twelve1.jpg HTTP/2.0" 206 500 "https://dooce.com/related/listening/page/242/?page=100" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.27.91 - - [12/Feb/2026:04:27:13 -0700] "GET /photos/leta/twelve1.jpg HTTP/2.0" 404 548 "https://dooce.com/related/listening/page/242/?page=100" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36" 47.128.27.91 - - [12/Feb/2026:04:27:13 -0700] "GET /photos/leta/twelve2.jpg HTTP/2.0" 404 548 "https://dooce.com/related/listening/page/242/?page=100" "M ... show less	Bad Web Bot
🇩🇪 conseilgouz	2026-01-18 16:47:33 (6 months ago)	vee-88 : Bloc AI bots=>/component/weblinks/?Itemid=1029&catid=12%3Apartenaires&id=33%3Abrm&a ... show more vee-88 : Bloc AI bots=>/component/weblinks/?Itemid=1029&catid=12%3Apartenaires&id=33%3Abrm&task=weblink.go(Bytespider) show less	Hacking
🇩🇪 Didier Lagaert	2026-01-14 13:55:23 (6 months ago)	lie-88 : Bloc AI bots=>/component/jevents/evenementsparjour/2023/8/16/-?Itemid=0(Bytespider)	Hacking
🇸🇬 anotherwatcher	2026-01-05 22:22:24 (6 months ago)	bad bot	Bad Web Bot
🇫🇷 bigorre.org	2026-01-01 10:40:17 (6 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-26 12:46:58 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.27.91 (ec2-47-128-27-91.ap-southeast-1.c ... show more (mod_security) mod_security (id:210730) triggered by 47.128.27.91 (ec2-47-128-27-91.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 26 07:46:51.634507 2025] [security2:error] [pid 30294:tid 30294] [client 47.128.27.91:37308] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|informativearticles.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "informativearticles.com"] [uri "/nutrition/[email protected]"] [unique_id "aU6Du6bfybRKHq8Q_62MUwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-26 05:16:59 (6 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack

Showing 1 to 15 of 296 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.183.89.32

🇮🇳 49.36.200.41

🇩🇪 2a05:d014:fb0:c800:3840:54b0:8a81:c34d

🇨🇳 116.181.11.14

🇨🇳 47.92.227.2

🇮🇩 38.253.224.40

🇺🇸 20.64.113.40

🇺🇸 147.185.132.103

🇲🇩 92.115.163.162

🇺🇸 54.201.95.86

🇨🇳 47.103.98.159

🇨🇳 47.101.72.8

🇰🇷 218.150.184.241

🇳🇱 195.178.110.217

🇺🇸 192.3.251.33

🇷🇺 185.39.116.136

🇰🇷 183.104.211.192

🇬🇧 172.71.26.56

🇺🇸 146.19.78.177

🇹🇼 111.70.38.53