JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.79.199.48

47.79.199.48 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 12%: ?

12%

ISP	Alibaba Cloud LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibaba-inc.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.79.199.48

Whois 47.79.199.48

IP Abuse Reports for 47.79.199.48:

This IP address has been reported a total of 57 times from 23 distinct sources. 47.79.199.48 was first reported on May 21st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 jbcrn	2026-09-15 22:05:00 (1 day ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Aggressive maze explorers, ruleset: gen ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Aggressive maze explorers, ruleset: generated-url. Requested honeypot path: /deflagration.crinal-straitlacedness-Gujarati.svg. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 show less	Bad Web Bot Web App Attack
🇩🇪 jbcrn	2026-09-12 17:18:17 (4 days ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Aggressive maze explorers, ruleset: gen ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Aggressive maze explorers, ruleset: generated-url. Requested honeypot path: /deflagration.blurt-Bandusian.png. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 show less	Bad Web Bot Web App Attack
🇩🇪 jbcrn	2026-09-08 16:35:36 (1 week ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Aggressive maze explorers, ruleset: gen ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Aggressive maze explorers, ruleset: generated-url. Requested honeypot path: /deflagration.stablestand-agriological-cookishly.svg. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 show less	Bad Web Bot Web App Attack
🇩🇪 jbcrn	2026-09-04 16:43:55 (1 week ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Aggressive maze explorers, ruleset: gen ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Aggressive maze explorers, ruleset: generated-url. Requested honeypot path: /deflagration.whoof-suppresser-plunging-nullificationist.png. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 show less	Bad Web Bot Web App Attack
🇩🇪 jbcrn	2026-08-29 15:37:14 (2 weeks ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Aggressive maze explorers, ruleset: gen ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Aggressive maze explorers, ruleset: generated-url. Requested honeypot path: /deflagration.womera-stylishly-overprune.png. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 show less	Bad Web Bot Web App Attack
🇳🇴 tmiland	2026-08-26 19:02:44 (3 weeks ago)	Detected 31 connections from 47.79.199.48 last 60 minutes.; 47.79.199.48 is part of network 47.79.0. ... show more Detected 31 connections from 47.79.199.48 last 60 minutes.; 47.79.199.48 is part of network 47.79.0.0 with 9157 distributed connections; Logs: 47.79.199.48 - - [26/Aug/2026:19:05:56 +0200] "GET /vi/hWbzJd9j4zk/mqdefault.jpg HTTP/1.1" 200 16855 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 47.79.199.48 - - [26/Aug/2026:19:06:03 +0200] "GET /ggpht/ytc/AIdro_lFqzk6X_HpzM0w7izeujd-DyYtTgRrlzlVzArVm1VELg=s900-c-k-c0x00ffffff-no-rj HTTP/1.1" 200 187015 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 47.79.199.48 - - [26/Aug/2026:19:06:46 +0200] "GET /vi/ik3-pjucwJE/mqdefault.jpg HTTP/1.1" 200 21130 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 47.79.199.48 - - [26/Aug/2026:19:13:53 +0200] "GET /vi/XPioWbUIais/mqdefault.jpg HTTP/1.1" 200 20670 "-" "Mozilla/5.0 (Maci show less	DDoS Attack Bad Web Bot Web App Attack
🇳🇴 tmiland	2026-08-26 18:33:44 (3 weeks ago)	Detected 31 connections from 47.79.199.48 last 60 minutes.; 47.79.199.48 is part of network 47.79.0. ... show more Detected 31 connections from 47.79.199.48 last 60 minutes.; 47.79.199.48 is part of network 47.79.0.0 with 9060 distributed connections; Logs: 47.79.199.48 - - [26/Aug/2026:19:05:56 +0200] "GET /vi/hWbzJd9j4zk/mqdefault.jpg HTTP/1.1" 200 16855 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 47.79.199.48 - - [26/Aug/2026:19:06:03 +0200] "GET /ggpht/ytc/AIdro_lFqzk6X_HpzM0w7izeujd-DyYtTgRrlzlVzArVm1VELg=s900-c-k-c0x00ffffff-no-rj HTTP/1.1" 200 187015 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 47.79.199.48 - - [26/Aug/2026:19:06:46 +0200] "GET /vi/ik3-pjucwJE/mqdefault.jpg HTTP/1.1" 200 21130 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 47.79.199.48 - - [26/Aug/2026:19:13:53 +0200] "GET /vi/XPioWbUIais/mqdefault.jpg HTTP/1.1" 200 20670 "-" "Mozilla/5.0 (Maci show less	DDoS Attack Bad Web Bot Web App Attack
🇩🇪 jbcrn	2026-08-25 13:04:59 (3 weeks ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Aggressive maze explorers, ruleset: gen ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Aggressive maze explorers, ruleset: generated-url. Requested honeypot path: /deflagration.Cantabrian-netbush-portion-Babhan.svg. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 show less	Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-07-10 07:17:16 (2 months ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-21 01:55:03 (2 months ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 14:21:29 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 47.79.199.48 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 47.79.199.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 10:21:23.542329 2026] [security2:error] [pid 18557:tid 18557] [client 47.79.199.48:55358] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "ai1nY8W0gwGpK1MMHykncQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-04-25 00:03:39 (4 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-04 03:03:25 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 47.79.199.48 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 47.79.199.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 23:03:22.024573 2026] [security2:error] [pid 7522:tid 7522] [client 47.79.199.48:25088] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.beirutbazar.com\|F\|2"] [data ".beirutbazar.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.beirutbazar.com"] [uri "/item/joumana-dagher-beirut-message-wall-usd-275/www.beirutbazar.com"] [unique_id "adB_emiZazRSAe7uznuMdAAAAA4"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-03 16:30:15 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 47.79.199.48 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 47.79.199.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 12:30:09.252423 2026] [security2:error] [pid 11984:tid 12031] [client 47.79.199.48:24202] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.certifiedlifecoach.org\|F\|2"] [data ".icecc.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.certifiedlifecoach.org"] [uri "/www.icecc.com"] [unique_id "ac_rERb9Gwt6wrlJql4-oAAAAJg"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 librebit	2026-04-03 16:20:32 (5 months ago)	Brute force	Brute-Force

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.226.196.12

🇮🇳 152.70.75.102

🇭🇰 152.32.213.86

🇨🇳 120.48.15.138

🇹🇭 118.193.57.218

🇩🇪 104.207.56.69

🇺🇸 104.207.45.162

🇫🇷 91.231.89.29

🇫🇷 91.231.89.27

🇷🇺 82.193.128.198

🇺🇸 69.73.187.130

🇺🇸 65.111.3.111

🇭🇰 20.255.217.76

🇺🇸 193.56.116.241

🇺🇸 193.56.116.212

🇬🇧 185.216.145.183

🇨🇳 180.76.57.66

🇩🇪 165.154.138.3

🇫🇮 147.185.133.25

🇺🇸 147.185.132.93