JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.79.13.71

47.79.13.71 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 49%: ?

49%

ISP	Alibaba Cloud LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibaba-inc.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.79.13.71

Whois 47.79.13.71

IP Abuse Reports for 47.79.13.71:

This IP address has been reported a total of 26 times from 9 distinct sources. 47.79.13.71 was first reported on July 27th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇰 ScamAware	2026-08-22 12:47:19 (1 day ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloudflare source: botFight. show less	Bad Web Bot
🇩🇪 FeG Deutschland	2026-08-22 09:57:10 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 12:56:13 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 47.79.13.71 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 47.79.13.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 08:56:09.803460 2026] [security2:error] [pid 13941:tid 13941] [client 47.79.13.71:32914] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.nancyscafeandcatering.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nancyscafeandcatering.com"] [uri "/wp-content/themes/eatery/wildhardsex.com"] [unique_id "aohK6TILNNpndIPPBwJmfwAAABo"], referer: http://www.nancyscafeandcatering.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-08-21 06:45:09 (3 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28	Exploited Host Web App Attack
🇩🇰 ScamAware	2026-08-21 06:33:57 (3 days ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloudflare source: botFight. show less	Bad Web Bot
🇩🇪 Phenix Info	2026-08-19 11:12:13 (4 days ago)	SmallGuard.fr/Prestashop Massive 403	Web App Attack
🇩🇪 FeG Deutschland	2026-08-19 10:13:24 (5 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28	Exploited Host Web App Attack
🇩🇪 klaus_ph	2026-08-19 09:28:06 (5 days ago)	47.79.13.71 - - [19/Aug/2026:07:45:45 +0200] "GET /gnd/Record/1062225759 HTTP/1.1" 200 12376 "https: ... show more 47.79.13.71 - - [19/Aug/2026:07:45:45 +0200] "GET /gnd/Record/1062225759 HTTP/1.1" 200 12376 "https://www.gnd.allegronet.de/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15" ... show less	Bad Web Bot
🇩🇪 FeG Deutschland	2026-08-15 14:07:57 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28	Exploited Host Web App Attack
🇩🇰 ScamAware	2026-08-15 14:00:09 (1 week ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloudflare source: botFight. show less	Bad Web Bot
🇺🇸 1gz	2026-08-15 13:47:40 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /english/haxhiu-condemns-clashes-in-the-assembly-and-issues-firm-demand-to-the-opposition/969948/amp/ UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 1gz	2026-08-15 12:07:06 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /showbiz/sulltani-i-bruneit-perjashton-nusen-e-djalit-nga-familja-mbreterore-dhe-i-heq-te-gjithe-titujt/971072/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 todix	2026-08-14 16:16:08 (1 week ago)	Web App Attack Exploid from 47.79.13.71	Web App Attack
🇩🇪 Vegascosmetics	2026-08-07 14:49:10 (2 weeks ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected show less	Hacking Exploited Host Web App Attack
🇩🇪 FeG Deutschland	2026-08-02 18:43:04 (3 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28	Exploited Host Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.81.209.88

🇳🇱 185.190.25.168

🇺🇸 172.68.175.20

🇺🇸 77.91.118.50

🇺🇸 65.49.1.122

🇺🇸 20.65.195.37

🇱🇹 213.176.26.51

🇬🇧 193.163.125.216

🇧🇷 177.135.206.10

🇺🇸 172.68.174.55

🇭🇰 114.111.54.189

🇻🇳 103.82.20.28

🇫🇷 85.217.140.8

🇺🇸 66.132.195.98

🇺🇸 13.217.181.212

🇷🇺 185.14.4.239

🇺🇸 73.12.168.225

🇬🇦 41.158.125.249

🇰🇷 211.105.229.237

🇺🇸 172.217.46.246