JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.28.166

47.128.28.166 was found in our database!

This IP was reported 310 times. Confidence of Abuse is 4%: ?

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-28-166.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.28.166

Whois 47.128.28.166

IP Abuse Reports for 47.128.28.166:

This IP address has been reported a total of 310 times from 43 distinct sources. 47.128.28.166 was first reported on August 15th 2023, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 masterguru	2026-08-30 17:19:10 (22 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇪🇸 librebit	2026-03-15 00:46:17 (5 months ago)	Brute force	Brute-Force
🇨🇭 backslash	2026-02-27 21:51:01 (6 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇪🇸 librebit	2026-02-23 00:38:52 (6 months ago)	Brute force	Brute-Force
🇫🇷 bigorre.org	2026-02-22 16:45:18 (6 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇪🇸 masterguru	2026-01-10 20:31:04 (7 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-123) show less	Bad Web Bot
🇩🇪 BlueWire Hosting	2026-01-10 00:43:07 (7 months ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇺🇸 xmission.com	2026-01-06 19:31:12 (7 months ago)	47.128.28.166 - - [06/Jan/2026:12:31:11 -0700] "GET /category/photos/daily-photo/page/1905/?page=194 ... show more 47.128.28.166 - - [06/Jan/2026:12:31:11 -0700] "GET /category/photos/daily-photo/page/1905/?page=194 HTTP/2.0" 200 9365 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" 47.128.28.166 - - [06/Jan/2026:12:31:12 -0700] "GET /wp-content/uploads/2012/07/02_03_2006.jpg HTTP/2.0" 206 500 "https://dooce.com/category/photos/daily-photo/page/1905/?page=194" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" 47.128.28.166 - - [06/Jan/2026:12:31:12 -0700] "GET /photos/dailyphoto/02_03_2006.jpg HTTP/2.0" 206 500 "https://dooce.com/category/photos/daily-photo/page/1905/?page=194" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" 47.128.28.166 - - [06/Jan/2026:12:31:12 -0700] "GET /photos/dailyphoto ... show less	Bad Web Bot
🇩🇪 Didier Lagaert	2025-12-28 18:41:59 (8 months ago)	lie-88 : Bloc AI bots=>/component/jevents/calendriermensuel/2027/10/99?Itemid=950(Bytespider)	Hacking
🇦🇷 RocketEmi	2025-12-24 11:58:02 (8 months ago)	Automated web crawling detected: high request rate, scraping multiple pages. Behavior consistent wit ... show more Automated web crawling detected: high request rate, scraping multiple pages. Behavior consistent with Bad Web Bot. show less	Bad Web Bot
🇨🇦 1gz	2025-12-23 08:48:21 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/arra-per-mengjes/ UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-12-04 16:12:21 (8 months ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-11-26 12:21:50 (9 months ago)	(mod_security) mod_security (id:211190) triggered by 47.128.28.166 (ec2-47-128-28-166.ap-southeast-1 ... show more (mod_security) mod_security (id:211190) triggered by 47.128.28.166 (ec2-47-128-28-166.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 07:21:44.028852 2025] [security2:error] [pid 5390:tid 5390] [client 47.128.28.166:44318] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|heuristicbooks.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /Heuristic Books -- Algorithms for Better Living_files/ccx/?dir=%2F%2Fetc%2FImageMagick-6"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heuristicbooks.com"] [uri "/Heuristic Books -- Algorithms for Better Living_files/ccx/"] [unique_id "aSbw2C_oJ0xuKp9kqZVrAAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 NotCool	2025-11-05 10:28:44 (9 months ago)	(CRAWLDELAY) Generic Bot Crawl-delay Violation 47.128.28.166 (ec2-47-128-28-166.ap-southeast-1.compu ... show more (CRAWLDELAY) Generic Bot Crawl-delay Violation 47.128.28.166 (ec2-47-128-28-166.ap-southeast-1.compute.amazonaws.com): 10 in the last 3600 secs show less	Bad Web Bot
Anonymous	2025-10-26 10:56:19 (10 months ago)	Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 310 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.183

🇦🇷 186.38.26.5

🇺🇸 131.226.2.214

🇭🇰 103.229.125.106

🇵🇱 54.37.235.85

🇻🇳 42.1.112.36

🇰🇷 222.239.251.12

🇺🇸 205.210.31.83

🇬🇧 193.163.125.190

🇮🇩 182.253.207.242

🇸🇬 168.107.88.38

🇨🇦 85.217.149.49

🇱🇹 62.60.130.253

🇳🇱 45.148.10.157

🇬🇧 2.57.17.109

🇩🇪 195.90.201.250

🇮🇹 194.21.40.159

🇬🇹 190.148.161.22

🇧🇷 167.126.6.183

🇺🇸 130.131.161.245