JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.28.119

47.128.28.119 was found in our database!

This IP was reported 358 times. Confidence of Abuse is 44%: ?

44%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-28-119.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.28.119

Whois 47.128.28.119

IP Abuse Reports for 47.128.28.119:

This IP address has been reported a total of 358 times from 66 distinct sources. 47.128.28.119 was first reported on August 5th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-08 19:27:55 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 47.128.28.119 (ec2-47-128-28-119.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.28.119 (ec2-47-128-28-119.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 15:27:48.472814 2026] [security2:error] [pid 14525:tid 14525] [client 47.128.28.119:12360] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|henrietteg.com\|F\|2"] [data ".linguistes.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "henrietteg.com"] [uri "/archives-UTM/fre378/http;/www.linguistes.com"] [unique_id "ak6ktN_T-nvyrsmoekTBZgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 Jim Keir	2026-06-21 19:05:50 (2 weeks ago)	2026-06-21 19:05:48 47.128.28.119 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇪🇸 librebit	2026-06-21 02:08:22 (2 weeks ago)	Brute force	Brute-Force
🇫🇷 mrcrassi	2026-06-20 15:45:12 (2 weeks ago)	Triggered Cloudflare WAF (botFight) from SG. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET m ... show more Triggered Cloudflare WAF (botFight) from SG. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇷🇺 DZBOT	2026-06-12 02:45:29 (4 weeks ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇮🇩 hermawan	2026-06-11 07:50:34 (4 weeks ago)	1781164212.631393 47.128.28.119 103.166.156.58 35844_2-4-8-1-3_1460_10 2026-06-11 14:50:12 WIB ...	Email Spam Hacking
🇫🇷 ✨	2026-06-10 00:26:12 (1 month ago)	Domain : restatec.com Rule : UserAgent 2026-06-10 00:24:40 *hidden-privacy* GET /Scripts/cookies ... show more Domain : restatec.com Rule : UserAgent 2026-06-10 00:24:40 *hidden-privacy* GET /Scripts/cookiesconsentjs/cookieconsent-config.js - 443 - 47.128.28.119 HTTP/2 Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) https://www.restatec.com/es/articulo/cal-cal-para-construccion-hidroxido-calcico-12kg-id-288 www.restatec.com 200 0 0 2874 795 171 - - show less	Port Scan
🇮🇪 Jim Keir	2026-06-09 22:50:07 (1 month ago)	2026-06-09 22:50:06 47.128.28.119 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇮🇩 hermawan	2026-06-09 16:38:04 (1 month ago)	1781023065.579495 47.128.28.119 103.166.156.58 35844_2-4-8-1-3_1460_10 2026-06-09 23:37:45 WIB ...	Email Spam Hacking
🇨🇦 1gz	2026-06-03 04:30:31 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/tea-trifoni-perputhen/ UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 xmission.com	2026-06-02 11:28:43 (1 month ago)	47.128.28.119 - - [02/Jun/2026:05:28:42 -0600] "GET /2014/07/23/fixin-to/ HTTP/2.0" 200 10730 "-" "M ... show more 47.128.28.119 - - [02/Jun/2026:05:28:42 -0600] "GET /2014/07/23/fixin-to/ HTTP/2.0" 200 10730 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" 47.128.28.119 - - [02/Jun/2026:05:28:42 -0600] "GET /wp-content/plugins/simple-lightbox/client/css/app.css?ver=2.9.5 HTTP/2.0" 200 231 "https://dooce.com/2014/07/23/fixin-to/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" 47.128.28.119 - - [02/Jun/2026:05:28:43 -0600] "GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/2.0" 200 13577 "https://dooce.com/2014/07/23/fixin-to/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" 47.128.28.119 - - [02/Jun/2026:05:28:43 -0600] "GET /wp-content/uploads/2014/07/07_24_2014__2style-700x46 ... show less	Bad Web Bot
🇨🇦 1gz	2026-06-02 06:22:10 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/bashkim-fino/ UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇷🇴 StarTech Team	2026-06-02 03:31:18 (1 month ago)	Web App Atack	Web App Attack
🇺🇸 kosada.com	2026-05-28 08:41:21 (1 month ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇪🇸 masterguru	2026-05-28 03:28:28 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-123) show less	Bad Web Bot

Showing 1 to 15 of 358 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇳 168.228.194.242

🇺🇸 107.150.101.57

🇮🇳 106.51.92.114

🇱🇹 77.90.185.20

🇩🇪 69.5.169.170

🇮🇳 66.116.196.243

🇮🇪 52.101.66.110

🇺🇸 20.64.104.114

🇸🇬 8.219.57.208

🇹🇷 195.46.130.101

🇩🇪 165.227.153.132

🇮🇳 163.61.39.40

🇺🇸 161.35.232.196

🇺🇸 134.122.124.74

🇨🇳 120.244.160.122

🇨🇳 115.56.238.174

🇨🇳 113.206.178.71

🇫🇷 104.28.211.186

🇧🇬 93.94.141.115

🇷🇴 92.118.39.62