JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.82.51.54

47.82.51.54 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 25%: ?

25%

ISP	Alibaba Cloud LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibaba-inc.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.82.51.54

Whois 47.82.51.54

IP Abuse Reports for 47.82.51.54:

This IP address has been reported a total of 17 times from 11 distinct sources. 47.82.51.54 was first reported on June 24th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-05 08:45:33 (2 weeks ago)	Large-scale coordinated botnet (4M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (4M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group \| Magento Session ID Parameter Blocked: /brands/sharp.html?___SID=b171c0ada2c7c44c3b4b1f3b87c8b160U \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇵🇱 Budyn	2026-08-29 23:29:38 (3 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cloud.astropot.tech \| URI: /.env \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-27 14:54:10 (3 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: s3.astropot.store \| URI: /.env \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-08-25 15:36:51 (4 weeks ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: MissingSlash (/de17848da/Geral/ChangeCulture) show less	Hacking Bad Web Bot Web App Attack
🇩🇪 klaus_ph	2026-08-18 22:04:58 (1 month ago)	47.82.51.54 - - [18/Aug/2026:15:36:49 +0200] "GET /gnd/Record/1065477937/Description?lng=zh-cn HTTP/ ... show more 47.82.51.54 - - [18/Aug/2026:15:36:49 +0200] "GET /gnd/Record/1065477937/Description?lng=zh-cn HTTP/1.1" 200 12523 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" ... show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-08 00:46:35 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇷🇺 Mga Admin	2026-07-31 04:25:06 (1 month ago)	47.82.51.54 - - [31/Jul/2026:11:25:05 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs144640038 ... show more 47.82.51.54 - - [31/Jul/2026:11:25:05 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs144640038 HTTP/1.1" 404 67 "https://phelige.com/associations?p=5e-8&r2=0.9&rs-id=rs144640038" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 Sklurk	2026-07-27 05:05:08 (1 month ago)	Web App Attack	Web App Attack
🇩🇪 Vegascosmetics	2026-07-21 14:24:36 (2 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated encoding / deep attack. Vegas ... show more (Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated encoding / deep attack. Vegas Security show less	DDoS Attack Hacking Exploited Host
🇩🇪 Vegascosmetics	2026-07-21 01:38:46 (2 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇷🇺 Mga Admin	2026-07-18 03:17:49 (2 months ago)	47.82.51.54 - - [18/Jul/2026:10:17:49 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs76544141 ... show more 47.82.51.54 - - [18/Jul/2026:10:17:49 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs76544141 HTTP/1.1" 404 67 "https://phelige.com/associations?p=5e-8&r2=0.9&rs-id=rs76544141" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" ... show less	Web App Attack
🇮🇹 A000Z	2026-07-06 14:01:16 (2 months ago)	Fail2Ban: 47.82.51.54 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 47.82.51.54 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 show less	Bad Web Bot
🇨🇭 backslash	2026-07-03 09:21:06 (2 months ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
🇫🇷 demomodule	2026-07-01 05:22:24 (2 months ago)	PrestaShop Security Module: nested/encoded redirect parameter abuse on "back" (occurrences=5)	Web App Attack
🇫🇷 demomodule	2026-06-30 20:09:25 (2 months ago)	PrestaShop Security Module: nested/encoded redirect parameter abuse on "back" (occurrences=10)	Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 84.75.155.116

🇸🇬 84.75.148.16

🇺🇸 64.62.156.140

🇱🇹 62.60.130.242

🇧🇩 27.123.253.227

🇧🇷 200.189.23.255

🇷🇴 185.125.109.192

🇩🇪 91.107.156.120

🇺🇸 66.132.186.242

🇩🇪 31.76.73.24

🇺🇸 20.65.202.190

🇺🇸 15.204.107.168

🇰🇷 222.119.5.40

🇰🇷 211.251.245.88

🇪🇬 197.44.229.34

🇨🇳 171.120.38.96

🇵🇰 118.107.139.224

🇮🇳 118.95.33.69

🇲🇦 102.54.238.169

🇸🇦 81.208.175.87