JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

47.79.13.244

Recent Activity

Abuse Confidence Score

53% Elevated

59 reports

22 reporters · latest 1 day ago

ISP: Alibaba Cloud LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS45102
Domain Name: alibaba-inc.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

59 from 22 distinct reporters

First reported

July 31st 2026

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇩🇪 Germany 12 🇺🇸 United States of America 12 🇩🇰 Denmark 5

Most common categories Bad Web Bot 22 Web App Attack 19 Exploited Host 6 Brute-Force 4 Hacking 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-11-06 01:26:15 UTC · (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28	Exploited Host Web App Attack
🇩🇪 fritteli	2026-11-01 17:36:35 UTC · (6 days ago)	[Sun Nov 01 06:24:07.822303 2026] [authz_core:error] [pid 3466694:tid 3466732] [client 47.79.13.244:36406] AH01630: client denied by server configuration: proxy:http://localhost:4000/manuel/converter/src/commit/33bd3c1aef1de3db9ca39c93157751f1c948e4b ... show more [Sun Nov 01 06:24:07.822303 2026] [authz_core:error] [pid 3466694:tid 3466732] [client 47.79.13.244:36406] AH01630: client denied by server configuration: proxy:http://localhost:4000/manuel/converter/src/commit/33bd3c1aef1de3db9ca39c93157751f1c948e4b5/src/app/converter-registry.service.ts, referer: https://gittr.ch/ [Sun Nov 01 12:19:06.618083 2026] [authz_core:error] [pid 3527644:tid 3527694] [client 47.79.13.244:33338] AH01630: client denied by server configuration: proxy:http://localhost:4000/manuel/converter/src/commit/626b3b46558713ebe2328193b764e92288f9e4c3/src/app/converter/uricomponent-encoder.spec.ts, referer: https://gittr.ch/ [Sun Nov 01 13:38:16.634067 2026] [authz_core:error] [pid 3538976:tid 3539026] [client 47.79.13.244:45960] AH01630: client denied by server configuration: proxy:http://localhost:4000/manuel/converter/src/tag/v1.3.1-0/src/app/converter/uriencoder.ts, referer: https://gittr.ch/ [Sun Nov 01 16:17:37.967682 2026] [authz_core:error] [pid 3569040:tid 3569088] ... show less	Brute-Force
🇦🇺 FireGuard Server	2026-11-01 15:10:08 UTC · (6 days ago)	Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=443	Port Scan Hacking
🇩🇰 ScamAware	2026-11-01 08:50:30 UTC · (6 days ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloud ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloudflare source: botFight. show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-11-01 07:19:58 UTC · (6 days ago)	(mod_security) mod_security (id:225080) triggered by 47.79.13.244 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 02:19:51.482487 2026] [security2:error] [pid 22228:tid 22228] [client 47.79.13.244:36552] Mod ... show more (mod_security) mod_security (id:225080) triggered by 47.79.13.244 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 02:19:51.482487 2026] [security2:error] [pid 22228:tid 22228] [client 47.79.13.244:36552] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:C" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)\|\|daveware.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "daveware.net"] [uri "/wp-includes/js/tinymce/plugins/tabfocus/"] [unique_id "auboFwy6kMg5vdOBxXk9QAAAAA8"], referer: http://daveware.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 1gz	2026-11-01 05:01:37 UTC · (6 days ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/jeton-vllasaliu/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537. ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/jeton-vllasaliu/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 FeG Deutschland	2026-11-01 04:28:13 UTC · (6 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28	Exploited Host Web App Attack
🇺🇸 1gz	2026-11-01 00:14:25 UTC · (6 days ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kosove/ikd-paraqet-ne-kuvend-nismen-qytetare-per-ndryshimin-e-kodit-penal-te-perkrahur-nga-12-mije-e-120-qytetare/1074515/amp/ UA: Mozil ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kosove/ikd-paraqet-ne-kuvend-nismen-qytetare-per-ndryshimin-e-kodit-penal-te-perkrahur-nga-12-mije-e-120-qytetare/1074515/amp/ UA: Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-11-01 00:12:02 UTC · (6 days ago)	Web App Attack	Web App Attack
🇩🇪 todix	2026-09-25 15:09:39 UTC · (1 month ago)	Web App Attack Exploid from 47.79.13.244	Web App Attack
🇺🇸 TPI-Abuse	2026-09-25 05:40:54 UTC · (1 month ago)	(mod_security) mod_security (id:210730) triggered by 47.79.13.244 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 01:40:49.241356 2026] [security2:error] [pid 17043:tid 17043] [client 47.79.13.244:44332] Mod ... show more (mod_security) mod_security (id:210730) triggered by 47.79.13.244 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 01:40:49.241356 2026] [security2:error] [pid 17043:tid 17043] [client 47.79.13.244:44332] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.scoutinsignia.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.scoutinsignia.com"] [uri "/WS_FTP.LOG"] [unique_id "arYJYQmAn6lgjvgn4rpIbAAAAAg"], referer: https://www.scoutinsignia.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-09-25 03:20:32 UTC · (1 month ago)	Web App Attack	Web App Attack
🇺🇸 1gz	2026-09-25 02:05:43 UTC · (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/toyota-rav4/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/toyota-rav4/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 jbcrn	2026-09-25 00:52:25 UTC · (1 month ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /fediverse/post/deflagration.lighthouse/venturesomeness-pasteboard/intraschool/. User-Agent: Mozilla/5.0 (Windows NT 10.0; W ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /fediverse/post/deflagration.lighthouse/venturesomeness-pasteboard/intraschool/. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0 show less	Bad Web Bot Web App Attack
🇺🇸 SX Communications	2026-09-24 19:50:38 UTC · (1 month ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 47.79.13.244: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.	DDoS Attack Bad Web Bot Exploited Host

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 212.87.249.76

🇧🇷 187.121.129.28

🇳🇱 77.239.124.36

🇺🇸 45.132.227.118

🇩🇪 2a02:c202:2359:7214::1

🇨🇴 181.54.0.9

🇨🇴 177.255.231.23

🇧🇷 168.227.19.63

🇺🇸 137.184.31.185

🇳🇱 93.123.109.12

🇺🇸 50.6.5.117

🇧🇷 45.226.133.169

🇩🇪 45.135.193.198

🇮🇪 18.201.228.175

🇧🇦 5.152.239.61

🇩🇿 197.204.131.32

🇺🇸 152.32.150.89

🇮🇱 147.235.197.173

🇺🇸 109.105.210.60

🇺🇸 70.183.233.134