JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.79.51.51

47.79.51.51 was found in our database!

This IP was reported 85 times. Confidence of Abuse is 48%: ?

48%

ISP	Alibaba Cloud LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibaba-inc.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.79.51.51

Whois 47.79.51.51

IP Abuse Reports for 47.79.51.51:

This IP address has been reported a total of 85 times from 29 distinct sources. 47.79.51.51 was first reported on August 30th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 A000Z	2026-07-16 12:42:51 (1 hour ago)	Fail2Ban: 47.79.51.51 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 47.79.51.51 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-07-16 09:18:39 (5 hours ago)	[16/Jul/2026:19:18:38 +1000] "GET /wp-sitemap.xml HTTP/1.1" 404 236 "Mozilla/5.0 (Windows NT 10.0; W ... show more [16/Jul/2026:19:18:38 +1000] "GET /wp-sitemap.xml HTTP/1.1" 404 236 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇩🇪 LRob	2026-07-13 12:19:51 (3 days ago)	CrowdSec: PrestaShop login open-redirect / back= recursion abuse \| req: /connexion?back=https%3A%2F% ... show more CrowdSec: PrestaShop login open-redirect / back= recursion abuse \| req: /connexion?back=https%3A%2F%2Fcycling.fr%2Fconnexion%3Fback%3Dhttps%253A%252F%252Fcycling.fr%252Fconnexion%253Fback%253Dhttps%25253A%25252F%25252Fcycling.fr%25252Fconnexion%25253Fback%25253Dhttps%2525253A%2525252F%2525252Fcycling.fr%2525252Fconnexion \| 2 distinct paths \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Web App Attack
🇮🇹 A000Z	2026-07-07 05:29:15 (1 week ago)	Fail2Ban: 47.79.51.51 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 47.79.51.51 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 demomodule	2026-07-01 23:30:12 (2 weeks ago)	PrestaShop Security Module: nested/encoded redirect parameter abuse on "back" (occurrences=10)	Web App Attack
🇫🇷 demomodule	2026-07-01 06:28:41 (2 weeks ago)	PrestaShop Security Module: nested/encoded redirect parameter abuse on "back" (occurrences=2)	Web App Attack
🇭🇳 unph	2026-06-23 11:27:21 (3 weeks ago)	Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin	Brute-Force
🇺🇸 kosada.com	2026-06-20 23:52:49 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇰🇷 zlhIcd	2026-06-18 01:53:01 (4 weeks ago)	47.79.51.51 - - [16/Jun/2026:01:51:22 +0900] "GET /pcwiki/index.php?days=14&from=20260505035411&hide ... show more 47.79.51.51 - - [16/Jun/2026:01:51:22 +0900] "GET /pcwiki/index.php?days=14&from=20260505035411&hideliu=0&hidemyself=1&target=Retro_Lab&title=%ED%8A%B9%EC%88%98%EA%B8%B0%EB%8A%A5%3A%EB%A7%81%ED%81%AC%EC%B5%9C%EA%B7%BC%EB%B0%94%EB%80%9C HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" ... show less	Web Spam SQL Injection Bad Web Bot Web App Attack
Anonymous	2026-06-16 15:30:22 (4 weeks ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/12231/form_key/xMhYTRwrPdce49sa/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇩🇪 milcraft.nl	2026-06-16 10:04:57 (1 month ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 01:14:34 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 47.79.51.51 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 47.79.51.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 21:14:30.073957 2026] [security2:error] [pid 21415:tid 21415] [client 47.79.51.51:54210] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.pages4you.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pages4you.com"] [uri "/Graphics2/WS_FTP.LOG"] [unique_id "ajCjdomyTXXlDTzuyuu7HAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-06-13 01:29:08 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/bota/pershkallezohet-situata-ne-liban-raportohen-shtate-sulme-brenda-dy-oreve-humbin-jeten-kater-persona-dhe-plagosen-dhjetera-te-tjere/870382/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 kosada.com	2026-06-10 10:23:39 (1 month ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-10 01:56:51 (1 month ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host

Showing 1 to 15 of 85 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.13

🇨🇳 182.92.218.138

🇺🇸 172.210.68.2

🇺🇸 161.35.96.150

🇨🇳 123.178.210.69

🇩🇪 51.195.39.149

🇱🇹 45.227.254.170

🇺🇸 44.220.19.243

🇺🇸 20.80.88.209

🇷🇺 217.151.226.236

🇲🇽 189.203.163.10

🇺🇸 173.239.211.92

🇺🇸 172.212.200.29

🇺🇸 147.185.132.80

🇰🇿 109.248.156.49

🇫🇷 85.217.140.4

🇺🇸 44.36.193.55

🇸🇬 43.163.113.94

🇲🇦 197.153.57.103

🇬🇧 195.206.182.195