JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.79.207.196

47.79.207.196 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 24%: ?

24%

ISP	Alibaba Cloud LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibaba-inc.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.79.207.196

Whois 47.79.207.196

IP Abuse Reports for 47.79.207.196:

This IP address has been reported a total of 28 times from 13 distinct sources. 47.79.207.196 was first reported on May 27th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 ki3	2026-06-11 13:23:57 (1 hour ago)	Fail2Ban: Web App Attacks and Forum Spam 47.79.207.196 1781184236.0(JST)	Web Spam Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 05:00:36 (10 hours ago)	(mod_security) mod_security (id:210730) triggered by 47.79.207.196 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 47.79.207.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 01:00:30.204005 2026] [security2:error] [pid 22059:tid 22059] [client 47.79.207.196:9788] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|soviaenterprises.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "soviaenterprises.com"] [uri "/bizzybeejunkremoval.com"] [unique_id "aipA7qCEadT_INWQjx3DDAAAAAM"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-06-11 00:05:35 (14 hours ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 20:15:15 (18 hours ago)	(mod_security) mod_security (id:210730) triggered by 47.79.207.196 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 47.79.207.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 16:15:08.457108 2026] [security2:error] [pid 11458:tid 11458] [client 47.79.207.196:17728] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.anbrusgoldens.com\|F\|2"] [data ".nancygaffney.smugmug.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.anbrusgoldens.com"] [uri "/www.nancygaffney.smugmug.com"] [unique_id "ainFzKn24eishdLb6q9MZAAAABA"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ersei.net	2026-01-15 16:04:19 (4 months ago)	Nonstop scanning with no cooldown or respect for 429.	Bad Web Bot
🇮🇹 VHosting	2026-01-08 11:36:26 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 kosada.com	2026-01-05 11:07:12 (5 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2025-12-26 16:08:19 (5 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 ersei.net	2025-12-14 06:20:08 (5 months ago)	Nonstop scanning with no cooldown or respect for 429.	Bad Web Bot
🇨🇦 1gz	2025-12-13 00:26:28 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/takimi-ne-durres-rama-frike-nga-furnizimi-me-nafte/268437 UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 ersei.net	2025-12-07 18:07:35 (6 months ago)	Nonstop scanning with no cooldown or respect for 429.	Bad Web Bot
🇫🇷 Sklurk	2025-12-07 01:56:19 (6 months ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2025-12-05 15:50:10 (6 months ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2025-12-04 11:37:40 (6 months ago)	Web App Attack	Web App Attack
Anonymous	2025-08-19 10:10:00 (9 months ago)	100 requests from this IP in 30 minutes (~2000 rpm in total) targeting my public Gitea repositories. ... show more 100 requests from this IP in 30 minutes (~2000 rpm in total) targeting my public Gitea repositories. The bot systematically scanned src, commits, raw, blame and rss endpoints across multiple repositories using a fake Chrome User‑Agent, causing high CPU and network load. All IPs originate from 47.79.0.0/16. show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 154.197.56.163

🇸🇬 152.42.225.238

🇺🇸 147.185.132.203

🇷🇴 92.118.39.204

🇺🇸 91.230.168.143

🇳🇱 45.148.10.183

🇺🇸 40.90.234.147

🇷🇴 2.57.121.25

🇧🇷 201.13.51.130

🇺🇸 172.104.10.239

🇫🇷 163.172.128.123

🇺🇸 162.216.149.248

🇺🇸 162.216.149.89

🇺🇸 162.159.106.45

🇭🇰 154.221.20.215

🇺🇸 92.38.176.252

🇮🇹 79.11.39.204

🇺🇸 64.62.156.52

🇱🇹 45.227.254.170

🇳🇱 45.142.193.10