JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.79.11.77

47.79.11.77 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 53%: ?

53%

ISP	Alibaba Cloud LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibaba-inc.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.79.11.77

Whois 47.79.11.77

IP Abuse Reports for 47.79.11.77:

This IP address has been reported a total of 43 times from 16 distinct sources. 47.79.11.77 was first reported on April 1st 2026, and the most recent report was 53 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-09 11:17:37 (53 minutes ago)	(mod_security) mod_security (id:210730) triggered by 47.79.11.77 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 47.79.11.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:17:29.682895 2026] [security2:error] [pid 5776:tid 5776] [client 47.79.11.77:41620] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.flavornet.org\|F\|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.flavornet.org"] [uri "/info/jmol/pdb/112-17-4.pdb"] [unique_id "aif2SQOx-mdaUsr4LixK7wAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 A000Z	2026-06-09 07:03:29 (5 hours ago)	Fail2Ban: 47.79.11.77 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 47.79.11.77 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇮🇹 A000Z	2026-06-07 08:28:38 (2 days ago)	Fail2Ban: 47.79.11.77 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 47.79.11.77 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Sklurk	2026-06-07 04:23:13 (2 days ago)	Web App Attack	Web App Attack
🇮🇹 A000Z	2026-06-05 00:40:32 (4 days ago)	Fail2Ban: 47.79.11.77 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 47.79.11.77 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 show less	Bad Web Bot
🇨🇿 vitex	2026-05-26 04:00:00 (2 weeks ago)	Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically cr ... show more Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically crawled git blame endpoints (/*/blame/commit/<hash>/file) across all commits of public repositories, causing server load of 17+ (normal: <2). Over 71,000 unique IPs involved. Attack window: 2026-05-26 03:30-06:37 UTC. Primary target: PureHTML/purezencart (9933 commits, 5065 files). Each blame request triggers expensive git operations; 30,000+ slow requests per hour. show less	DDoS Attack Bad Web Bot
🇷🇺 Mga Admin	2026-05-24 02:20:33 (2 weeks ago)	47.79.11.77 - - [24/May/2026:09:20:28 +0700] "GET /feed.xml HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Wind ... show more 47.79.11.77 - - [24/May/2026:09:20:28 +0700] "GET /feed.xml HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 kosada.com	2026-05-23 07:06:59 (2 weeks ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 ersei.net	2026-05-16 04:28:32 (3 weeks ago)	Nonstop scanning with no cooldown or respect for 429.	Bad Web Bot
🇩🇪 milcraft.nl	2026-05-14 18:30:46 (3 weeks ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇩🇪 milcraft.nl	2026-05-13 17:41:45 (3 weeks ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇩🇪 pltcldvlpr	2026-05-03 17:23:54 (1 month ago)	Unidentified crawler ignoring robots.txt: 47.79.11.77 - - [03/May/2026:19:22:25 +0200] "GET /protoco ... show more Unidentified crawler ignoring robots.txt: 47.79.11.77 - - [03/May/2026:19:22:25 +0200] "GET /protocol?id=sl_16_30&offset=350&seq=522 HTTP/2.0" 200 349828 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" asn=45102 org="Alibaba (US) Technology Co., Ltd." 47.79.11.77 - - [03/May/2026:19:23:28 +0200] "GET /protocol?id=by_14_71&offset=300&seq=255 HTTP/2.0" 200 342113 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" asn=45102 org="Alibaba (US) Technology Co., Ltd." 47.79.11.77 - - [03/May/2026:19:23:54 +0200] "GET /protocol?id=bw_15_86&offset=350&seq=408 HTTP/2.0" 200 333334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" asn=45102 org="Alibaba (US) Technology Co., Ltd." ... show less	Bad Web Bot
🇳🇱 jjnxpct	2026-05-03 04:07:09 (1 month ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /en/news/2023/full-acquittal-syrian-terror-suspect (Rule ID: 920171) - GET or HEAD Request with Transfer-Encoding show less	Web App Attack
🇦🇺 MAGIC	2026-05-02 02:18:52 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2026-04-30 23:35:21 (1 month ago)	Malicious activity detected	Hacking Web App Attack

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.167

🇫🇮 193.23.200.187

🇺🇸 159.223.169.110

🇮🇳 103.158.40.65

🇳🇱 45.148.10.157

🇺🇸 20.228.220.118

🇸🇬 8.219.222.66

🇧🇷 191.5.199.192

🇨🇳 111.26.63.83

🇨🇭 107.189.5.121

🇩🇪 94.31.118.207

🇺🇸 64.62.156.24

🇳🇱 34.91.0.68

🇷🇴 2.57.122.177

🇳🇱 193.176.31.223

🇺🇸 172.202.104.154

🇨🇳 121.197.0.214

🇨🇳 113.141.171.139

🇳🇱 93.123.72.166

🇫🇷 91.160.136.230