JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.128.47.27

47.128.47.27 was found in our database!

This IP was reported 304 times. Confidence of Abuse is 26%: ?

26%

ISP	Amazon Data Services Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-47-128-47-27.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.128.47.27

Whois 47.128.47.27

IP Abuse Reports for 47.128.47.27:

This IP address has been reported a total of 304 times from 43 distinct sources. 47.128.47.27 was first reported on September 14th 2023, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hazzard	2026-08-01 19:35:12 (1 hour ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇬🇧 Mendip_Defender	2026-08-01 15:35:45 (5 hours ago)	47.128.47.27 - - [01/Aug/2026:16:35:48 +0100] "GET /wp-content/uploads/2021/05/14E-Byelaws-England-r ... show more 47.128.47.27 - - [01/Aug/2026:16:35:48 +0100] "GET /wp-content/uploads/2021/05/14E-Byelaws-England-revised-August-2016-123.pdf HTTP/1.1" 200 5581 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://bytedance.sg.larkoffice.com/docx/K5bxdypulop3IIxrJb0lOjLVgFe)" ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-25 12:03:30 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 47.128.47.27 (ec2-47-128-47-27.ap-southeast-1.c ... show more (mod_security) mod_security (id:210730) triggered by 47.128.47.27 (ec2-47-128-47-27.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 08:03:27.440725 2026] [security2:error] [pid 5274:tid 5274] [client 47.128.47.27:52168] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.phantomkennels.com\|F\|2"] [data "[email protected]"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.phantomkennels.com"] [uri "/[email protected]"] [unique_id "aj0ZD0U0DDP_dJRoYvnmRAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 masterguru	2026-06-21 12:44:01 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000-128) show less	Bad Web Bot
🇪🇸 librebit	2026-06-10 04:32:02 (1 month ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-05-18 19:18:08 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.47.27 (ec2-47-128-47-27.ap-southeast-1.c ... show more (mod_security) mod_security (id:210730) triggered by 47.128.47.27 (ec2-47-128-47-27.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 15:18:03.388844 2026] [security2:error] [pid 4085:tid 4085] [client 47.128.47.27:55824] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|phantomkennels.com\|F\|2"] [data "[email protected]"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "phantomkennels.com"] [uri "/[email protected]"] [unique_id "agtl64bbnIHMhm2kX7iEyQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-06 10:54:41 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 47.128.47.27 (ec2-47-128-47-27.ap-southeast-1.c ... show more (mod_security) mod_security (id:210730) triggered by 47.128.47.27 (ec2-47-128-47-27.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 06:54:37.899418 2026] [security2:error] [pid 22219:tid 22219] [client 47.128.47.27:21790] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|phantomkennels.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "phantomkennels.com"] [uri "/phantomsnovella.com"] [unique_id "afsd7cg8i3YEe5i61uSZXQAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2026-04-23 01:21:37 (3 months ago)	47.128.47.27 - - [23/Apr/2026:02:21:31 +0100] "GET /favicon.ico HTTP/1.0" 200 4039 "https://www.ashw ... show more 47.128.47.27 - - [23/Apr/2026:02:21:31 +0100] "GET /favicon.ico HTTP/1.0" 200 4039 "https://www.ashwickparish.org/clubs-and-societies/oakhill-and-ashwick-local-history-group/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" ... show less	Bad Web Bot
🇺🇸 masterguru	2026-04-10 22:29:09 (3 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000-128) show less	Bad Web Bot
🇬🇧 Mendip_Defender	2026-04-05 19:26:43 (3 months ago)	47.128.47.27 - - [05/Apr/2026:20:26:40 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (L ... show more 47.128.47.27 - - [05/Apr/2026:20:26:40 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected])" ... show less	Bad Web Bot
🇫🇷 bigorre.org	2026-02-12 21:10:33 (5 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇪🇸 librebit	2026-02-09 04:05:09 (5 months ago)	Brute force	Brute-Force
🇩🇪 conseilgouz	2026-01-17 11:19:36 (6 months ago)	lae-88 : Bloc AI bots=>/(Bytespider)	Hacking
🇨🇦 1gz	2025-12-29 17:26:36 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /sport/gjesti-prekes-truproja-e-mesit-de-pol-largon-rojen-e-sigurise-dhe-ndihmon-djalin-e-ri-te-beje-fotografi-me-kampionin-e-botes-video/844640/ UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 mrcrassi	2025-12-26 17:17:11 (7 months ago)	Triggered Cloudflare WAF (botFight) from SG. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET m ... show more Triggered Cloudflare WAF (botFight) from SG. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: /produto/g-shocker-pro/ UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 304 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 195.78.101.215

🇧🇷 187.58.66.231

🇧🇷 187.51.219.26

🇹🇭 171.97.49.11

🇫🇮 147.185.133.244

🇩🇪 130.12.180.126

🇦🇺 118.208.253.159

🇬🇧 23.230.54.98

🇶🇦 2600:1900:4260:40e::e9

🇧🇪 198.235.24.182

🇧🇷 187.51.84.86

🇧🇷 187.16.96.250

🇺🇸 170.253.147.12

🇺🇸 166.169.210.84

🇫🇷 62.210.142.171

🇭🇰 47.86.33.52

🇳🇱 195.178.110.30

🇫🇷 185.194.219.201

🇲🇽 177.245.230.99

🇵🇱 176.53.159.197