JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.79.51.2

47.79.51.2 was found in our database!

This IP was reported 74 times. Confidence of Abuse is 57%: ?

57%

ISP	Alibaba Cloud LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibaba-inc.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.79.51.2

Whois 47.79.51.2

IP Abuse Reports for 47.79.51.2:

This IP address has been reported a total of 74 times from 22 distinct sources. 47.79.51.2 was first reported on August 31st 2025, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-06-07 08:59:49 (10 hours ago)	Kingcopy(AI-IDS) Report: IP automatically blocked after obfuscated encoding. Vegas Security System	DDoS Attack Hacking Bad Web Bot
🇫🇷 Sklurk	2026-06-07 04:21:01 (14 hours ago)	Web App Attack	Web App Attack
🇮🇹 A000Z	2026-06-05 11:22:45 (2 days ago)	Fail2Ban: 47.79.51.2 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ( ... show more Fail2Ban: 47.79.51.2 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 milcraft.nl	2026-06-03 23:05:10 (3 days ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇩🇪 Vegascosmetics	2026-06-01 05:57:02 (6 days ago)	Kingcopy(AI-IDS) Report: IP 47.79.51.2 wurde nach 3 Angriffsversuchen automatisch geblockt. Pattern: ... show more Kingcopy(AI-IDS) Report: IP 47.79.51.2 wurde nach 3 Angriffsversuchen automatisch geblockt. Pattern: High Priority: ChangeCountry - Vegas Cosmetics Security System show less	DDoS Attack Hacking Bad Web Bot
🇨🇿 vitex	2026-05-26 04:00:00 (1 week ago)	Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically cr ... show more Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically crawled git blame endpoints (/*/blame/commit/<hash>/file) across all commits of public repositories, causing server load of 17+ (normal: <2). Over 71,000 unique IPs involved. Attack window: 2026-05-26 03:30-06:37 UTC. Primary target: PureHTML/purezencart (9933 commits, 5065 files). Each blame request triggers expensive git operations; 30,000+ slow requests per hour. show less	DDoS Attack Bad Web Bot
🇷🇺 Mga Admin	2026-05-24 02:20:28 (2 weeks ago)	47.79.51.2 - - [24/May/2026:09:20:23 +0700] "GET /rss.xml HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macint ... show more 47.79.51.2 - - [24/May/2026:09:20:23 +0700] "GET /rss.xml HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-24 01:40:46 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 47.79.51.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 47.79.51.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 21:40:38.530462 2026] [security2:error] [pid 7432:tid 7432] [client 47.79.51.2:48470] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.flavornet.org\|F\|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.flavornet.org"] [uri "/info/jmol/pdb/123-38-6.pdb"] [unique_id "ahJXFjPQAZgqHbObMX1CKwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-05-22 18:19:10 (2 weeks ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇮🇹 A000Z	2026-05-21 01:35:23 (2 weeks ago)	Fail2Ban: 47.79.51.2 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ( ... show more Fail2Ban: 47.79.51.2 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇮🇩 Burayot	2026-05-09 18:36:15 (4 weeks ago)	LF_MODSEC: (mod_security) mod_security (id:10000003) triggered by 47.79.51.2 (SG/Singapore/-): 2 in ... show more LF_MODSEC: (mod_security) mod_security (id:10000003) triggered by 47.79.51.2 (SG/Singapore/-): 2 in the last 3600 secs show less	Web App Attack
🇷🇺 Mga Admin	2026-05-09 03:08:09 (4 weeks ago)	47.79.51.2 - - [09/May/2026:10:08:08 +0700] "GET /sumFREGAT/bychr/chr19/ICAM1.RData HTTP/1.1" 403 19 ... show more 47.79.51.2 - - [09/May/2026:10:08:08 +0700] "GET /sumFREGAT/bychr/chr19/ICAM1.RData HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 pltcldvlpr	2026-05-03 16:25:40 (1 month ago)	Unidentified crawler ignoring robots.txt: 47.79.51.2 - - [03/May/2026:18:25:36 +0200] "GET /protocol ... show more Unidentified crawler ignoring robots.txt: 47.79.51.2 - - [03/May/2026:18:25:36 +0200] "GET /protocol?id=be_18_60&offset=1700&seq=1650 HTTP/2.0" 200 346647 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" asn=45102 org="Alibaba (US) Technology Co., Ltd." 47.79.51.2 - - [03/May/2026:18:25:36 +0200] "GET /protocol?id=mv_5_127&offset=450&seq=314 HTTP/2.0" 200 340624 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" asn=45102 org="Alibaba (US) Technology Co., Ltd." 47.79.51.2 - - [03/May/2026:18:25:39 +0200] "GET /protocol?id=mv_4_74&offset=2200&seq=2249 HTTP/2.0" 200 340275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" asn=45102 org="Alibaba (US) Technology Co., Ltd." ... show less	Bad Web Bot
Anonymous	2026-05-02 09:37:49 (1 month ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2026-05-01 00:45:41 (1 month ago)	Malicious activity detected	Hacking Web App Attack

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.87

🇵🇰 182.180.79.219

🇳🇱 45.148.10.141

🇺🇸 2604:a880:400:d1:0:4:8c0a:e001

🇺🇸 2604:a880:400:d1:0:4:8bf4:2001

🇰🇷 221.144.207.84

🇳🇱 213.218.243.59

🇹🇼 198.235.24.86

🇹🇼 198.235.24.80

🇦🇲 176.32.193.16

🇺🇸 138.128.139.134

🇮🇩 36.78.107.60

🇬🇧 31.14.254.76

🇺🇸 23.129.64.157

🇹🇼 198.235.24.76

🇹🇼 198.235.24.71

🇹🇼 198.235.24.56

🇧🇷 168.196.132.34

🇬🇧 80.95.194.124

🇹🇼 198.235.24.49