JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.28.1

47.128.28.1 was found in our database!

This IP was reported 304 times. Confidence of Abuse is 11%: ?

11%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-28-1.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.28.1

Whois 47.128.28.1

IP Abuse Reports for 47.128.28.1:

This IP address has been reported a total of 304 times from 44 distinct sources. 47.128.28.1 was first reported on August 12th 2023, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-28 19:24:11 (3 days ago)	(mod_security) mod_security (id:210730) triggered by 47.128.28.1 (ec2-47-128-28-1.ap-southeast-1.com ... show more (mod_security) mod_security (id:210730) triggered by 47.128.28.1 (ec2-47-128-28-1.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 15:24:08.461736 2026] [security2:error] [pid 29130:tid 29130] [client 47.128.28.1:54266] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|henrietteg.com\|F\|2"] [data ".linguistes.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "henrietteg.com"] [uri "/archives-UTM/fre378/http;/www.linguistes.com"] [unique_id "apHgWPCr5Uqu6n7aPdYKsAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 librebit	2026-07-11 16:51:49 (1 month ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-06-30 19:27:48 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.28.1 (ec2-47-128-28-1.ap-southeast-1.com ... show more (mod_security) mod_security (id:210730) triggered by 47.128.28.1 (ec2-47-128-28-1.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 15:27:42.526734 2026] [security2:error] [pid 4927:tid 4927] [client 47.128.28.1:65484] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|henrietteg.com\|F\|2"] [data ".linguistes.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "henrietteg.com"] [uri "/archives-UTM/fre378/http;/www.linguistes.com"] [unique_id "akQYroD9Rgf8hkljkTSf-QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 StarTech Team	2026-06-13 08:54:29 (2 months ago)	Web App Atack	Web App Attack
🇺🇸 S.O.B.A. Dev.	2026-05-24 05:57:51 (3 months ago)	Threat Blocked by BeeHive from (ASN:16509) (Network:Amazon.com, Inc.) (Host:soba.dev) (Method:GET) ( ... show more Threat Blocked by BeeHive from (ASN:16509) (Network:Amazon.com, Inc.) (Host:soba.dev) (Method:GET) (Protocol:HTTP/2) (Timestamp:2026-05-24T05:57:51Z) show less	Brute-Force Web Spam Web App Attack
🇺🇸 S.O.B.A. Dev.	2026-05-23 20:10:10 (3 months ago)	Threat Blocked by BeeHive from (ASN:16509) (Network:Amazon.com, Inc.) (Host:soba.dev) (Method:GET) ( ... show more Threat Blocked by BeeHive from (ASN:16509) (Network:Amazon.com, Inc.) (Host:soba.dev) (Method:GET) (Protocol:HTTP/2) (Timestamp:2026-05-23T20:10:10Z) show less	Brute-Force Web Spam Web App Attack
🇷🇴 StarTech Team	2026-04-30 02:15:51 (4 months ago)	Web App Atack	Web App Attack
🇷🇴 StarTech Team	2026-04-28 07:22:06 (4 months ago)	Web App Atack	Web App Attack
🇪🇸 masterguru	2026-04-26 08:00:56 (4 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-123) show less	Bad Web Bot
🇦🇺 MAGIC	2026-04-11 00:38:56 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇪🇸 masterguru	2026-04-09 10:57:44 (4 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-123) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-10 19:30:39 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.28.1 (ec2-47-128-28-1.ap-southeast-1.com ... show more (mod_security) mod_security (id:210730) triggered by 47.128.28.1 (ec2-47-128-28-1.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 15:30:10.938010 2026] [security2:error] [pid 24374:tid 24374] [client 47.128.28.1:63520] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.ourodyssey.us\|F\|2"] [data ".blogspot.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ourodyssey.us"] [uri "/ourodyssey.blogspot.com"] [unique_id "abBxQoqFiBCYueWYyJhxGQAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2026-03-05 15:51:34 (5 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇩🇪 dbmwebdesign	2026-02-04 12:35:03 (6 months ago)	Bot detected and blocked by Fail2Ban in bytespider jail	Bad Web Bot
Anonymous	2026-01-31 04:11:16 (7 months ago)	Web app attack and vulnerability scan detected from IIS logs	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 304 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 200.86.41.76

🇳🇱 45.148.10.141

🇺🇸 45.135.1.42

🇺🇸 34.220.58.210

🇧🇷 205.210.31.223

🇬🇧 193.163.125.127

🇲🇲 116.206.193.18

🇰🇿 95.58.255.251

🇺🇸 35.172.121.231

🇸🇬 8.219.158.135

🇺🇸 162.216.150.78

🇷🇴 2.57.122.96

🇩🇪 185.242.3.226

🇨🇳 116.205.130.169

🇺🇸 107.85.14.222

🇩🇪 94.26.106.199

🇬🇧 35.203.211.251

🇹🇼 211.75.198.60

🇵🇾 200.3.255.90

🇹🇷 176.235.241.130