JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.79.11.99

47.79.11.99 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 47%: ?

47%

ISP	Alibaba Cloud LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibaba-inc.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.79.11.99

Whois 47.79.11.99

IP Abuse Reports for 47.79.11.99:

This IP address has been reported a total of 39 times from 15 distinct sources. 47.79.11.99 was first reported on April 2nd 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ersei.net	2026-06-12 16:20:57 (9 hours ago)	Nonstop scanning with no cooldown or respect for 429.	Bad Web Bot
🇮🇹 A000Z	2026-06-11 23:06:56 (1 day ago)	Fail2Ban: 47.79.11.99 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 47.79.11.99 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Sklurk	2026-06-07 05:21:22 (5 days ago)	Web App Attack	Web App Attack
🇩🇪 Vegascosmetics	2026-06-01 04:44:11 (1 week ago)	Kingcopy(AI-IDS) Report: IP 47.79.11.99 wurde nach 3 Angriffsversuchen automatisch geblockt. Pattern ... show more Kingcopy(AI-IDS) Report: IP 47.79.11.99 wurde nach 3 Angriffsversuchen automatisch geblockt. Pattern: High Priority: ChangeCountry - Vegas Cosmetics Security System show less	DDoS Attack Hacking Bad Web Bot
🇵🇹 Information Security	2026-05-27 02:56:46 (2 weeks ago)	Web App Attack	Web App Attack
🇺🇸 ersei.net	2026-05-16 08:02:28 (3 weeks ago)	Nonstop scanning with no cooldown or respect for 429.	Bad Web Bot
🇩🇪 milcraft.nl	2026-05-14 00:01:18 (4 weeks ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-05-11 23:31:35 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 47.79.11.99 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 47.79.11.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 19:31:31.781145 2026] [security2:error] [pid 28946:tid 28946] [client 47.79.11.99:56438] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.med-engineering.com\|F\|2"] [data ".cialis.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.med-engineering.com"] [uri "/www.cialis.com"] [unique_id "agJm0-obRGLyx_lEuWn6oAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 Mga Admin	2026-05-09 03:16:17 (1 month ago)	47.79.11.99 - - [09/May/2026:10:16:15 +0700] "GET /sumFREGAT/bychr/chr12/PITPNM2.RData HTTP/1.1" 403 ... show more 47.79.11.99 - - [09/May/2026:10:16:15 +0700] "GET /sumFREGAT/bychr/chr12/PITPNM2.RData HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 ersei.net	2026-05-09 01:58:05 (1 month ago)	Nonstop scanning with no cooldown or respect for 429.	Bad Web Bot
🇩🇪 pltcldvlpr	2026-05-03 13:36:11 (1 month ago)	Unidentified crawler ignoring robots.txt: 47.79.11.99 - - [03/May/2026:15:35:07 +0200] "GET /protoco ... show more Unidentified crawler ignoring robots.txt: 47.79.11.99 - - [03/May/2026:15:35:07 +0200] "GET /protocol?id=bw_15_98&paragraph=9104542&seq=772 HTTP/2.0" 302 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" asn=45102 org="Alibaba (US) Technology Co., Ltd." 47.79.11.99 - - [03/May/2026:15:35:07 +0200] "GET /protocol?id=bw_15_98&offset=750&seq=772 HTTP/2.0" 200 342421 "https://en.stateparl.de/protocol?id=bw_15_98&paragraph=9104542&seq=772" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" asn=45102 org="Alibaba (US) Technology Co., Ltd." 47.79.11.99 - - [03/May/2026:15:36:10 +0200] "GET /protocol?id=hb_15_78&offset=250&seq=225 HTTP/2.0" 200 349520 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" asn=45102 org="Alibaba (US) Technology Co., Ltd." ... show less	Bad Web Bot
🇳🇱 jjnxpct	2026-05-03 04:07:56 (1 month ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /nl/nieuws/2017/syrisch-gezin-dat-is-uitgezet-onder-turkijedeal-dient-klacht-in-bij-het-europees-hof (Rule ID: 920171) - GET or HEAD Request with Transfer-Encoding show less	Web App Attack
Anonymous	2026-05-01 02:26:52 (1 month ago)	Malicious activity detected	Hacking Web App Attack
🇪🇸 el-brujo	2026-04-22 09:40:22 (1 month ago)	Cloudflare WAF: Request Path: /geolocalizacion.html Request Query: ?host=181.120.138.81 Host: elhack ... show more Cloudflare WAF: Request Path: /geolocalizacion.html Request Query: ?host=181.120.138.81 Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: ALIBABA-CN-NET Alibaba US Technology Co., Ltd. Country: SG Method: GET Timestamp: 2026-04-22T09:40:22Z ruleId: 3c55069d689d450eb591f3b84da7ce04. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇺🇸 kosada.com	2026-04-21 05:22:34 (1 month ago)	Web bot: DDoS	DDoS Attack Bad Web Bot

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 203.167.14.7

🇧🇪 198.235.24.179

🇳🇿 121.73.162.155

🇻🇳 118.70.182.193

🇺🇸 91.230.168.121

🇨🇦 85.217.149.49

🇩🇪 213.209.159.56

🇺🇸 208.84.100.123

🇲🇺 197.227.8.186

🇺🇸 173.239.211.61

🇩🇪 158.94.208.109

🇺🇸 135.237.125.195

🇨🇦 104.255.152.19

🇸🇬 103.250.11.156

🇸🇦 93.112.227.184

🇷🇴 92.118.39.62

🇳🇱 88.151.32.22

🇮🇹 78.134.49.171

🇬🇧 77.96.178.61

🇺🇸 64.150.165.48