JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.82.54.152

47.82.54.152 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 34%: ?

34%

ISP	Alibaba Cloud LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibaba-inc.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.82.54.152

Whois 47.82.54.152

IP Abuse Reports for 47.82.54.152:

This IP address has been reported a total of 19 times from 13 distinct sources. 47.82.54.152 was first reported on June 12th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-08-25 15:14:29 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: jira.goblinpot.tech \| URI: /backup.sql \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-08-25 12:31:46 (2 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: MissingSlash (/de17848pt/Geral/ChangeCulture) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 1gz	2026-08-16 05:04:34 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇷🇺 Mga Admin	2026-08-05 18:48:25 (3 weeks ago)	47.82.54.152 - - [06/Aug/2026:01:48:24 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs13926091 ... show more 47.82.54.152 - - [06/Aug/2026:01:48:24 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs139260913 HTTP/1.1" 404 67 "https://phelige.com/associations?p=5e-8&r2=0.9&rs-id=rs139260913" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" ... show less	Web App Attack
🇷🇺 Mga Admin	2026-07-23 12:09:18 (1 month ago)	47.82.54.152 - - [23/Jul/2026:19:09:17 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs947624 H ... show more 47.82.54.152 - - [23/Jul/2026:19:09:17 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs947624 HTTP/1.1" 404 67 "https://phelige.com/associations?p=5e-8&r2=0.9&rs-id=rs947624" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 Vegascosmetics	2026-07-23 01:45:26 (1 month ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated encoding / deep attack. Vegas ... show more (Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated encoding / deep attack. Vegas Security show less	DDoS Attack Hacking Exploited Host
🇩🇪 LRob	2026-07-14 12:30:09 (1 month ago)	CrowdSec: PrestaShop login open-redirect / back= recursion abuse \| req: /connexion?back=https%3A%2F% ... show more CrowdSec: PrestaShop login open-redirect / back= recursion abuse \| req: /connexion?back=https%3A%2F%2Fcycling.fr%2Fconnexion%3Fback%3Dhttps%253A%252F%252Fcycling.fr%252Fconnexion%253Fback%253Dhttps%25253A%25252F%25252Fcycling.fr%25252Fconnexion%25253Fback%25253Dhttps%2525253A%2525252F%2525252Fcycling.fr%2525252Fconnexion \| 2 distinct paths \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Web App Attack
🇷🇺 Mga Admin	2026-07-13 17:48:39 (1 month ago)	47.82.54.152 - - [14/Jul/2026:00:48:39 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs11553717 ... show more 47.82.54.152 - - [14/Jul/2026:00:48:39 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs115537178 HTTP/1.1" 404 67 "https://phelige.com/associations?p=5e-8&r2=0.9&rs-id=rs115537178" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" ... show less	Web App Attack
🇷🇺 Mga Admin	2026-07-08 12:26:10 (1 month ago)	47.82.54.152 - - [08/Jul/2026:19:26:10 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs11610957 ... show more 47.82.54.152 - - [08/Jul/2026:19:26:10 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs116109572 HTTP/1.1" 404 67 "https://phelige.com/associations?p=5e-8&r2=0.9&rs-id=rs116109572" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" ... show less	Web App Attack
🇮🇹 A000Z	2026-07-07 14:01:23 (1 month ago)	Fail2Ban: 47.82.54.152 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 47.82.54.152 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 show less	Bad Web Bot
🇸🇪 KIDOS	2026-07-06 06:57:53 (1 month ago)	IIS malicious activity: sql_injection_attempt	Web App Attack
🇫🇷 demomodule	2026-07-02 07:43:10 (1 month ago)	PrestaShop Security Module: nested/encoded redirect parameter abuse on "back" (occurrences=10)	Web App Attack
🇰🇷 zlhIcd	2026-06-27 02:42:06 (2 months ago)	47.82.54.152 - - [16/Jun/2026:10:55:35 +0900] "GET /pcwiki/index.php?days=7&hideliu=1&target=%EC%97% ... show more 47.82.54.152 - - [16/Jun/2026:10:55:35 +0900] "GET /pcwiki/index.php?days=7&hideliu=1&target=%EC%97%90%ED%8B%B8%EB%A0%8C&title=%ED%8A%B9%EC%88%98%EA%B8%B0%EB%8A%A5%3A%EB%A7%81%ED%81%AC%EC%B5%9C%EA%B7%BC%EB%B0%94%EB%80%9C HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" ... show less	Web Spam SQL Injection Bad Web Bot Web App Attack
🇺🇸 Starburst SysOp Team	2026-06-18 20:07:29 (2 months ago)	GET or HEAD Request with Transfer-Encoding. Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encod ... show more GET or HEAD Request with Transfer-Encoding. Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. (920171-mnz6-7) show less	Hacking
Anonymous	2026-06-16 20:30:23 (2 months ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Rate limit bad session: 3 in 2s \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 \| (Magento Site) show less	DDoS Attack Bad Web Bot

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 185.233.82.69

🇸🇬 172.70.141.218

🇩🇪 167.94.145.18

🇨🇳 140.246.61.93

🇺🇸 128.24.162.145

🇮🇩 69.5.21.194

🇹🇼 35.201.171.105

🇻🇳 27.79.7.114

🇱🇹 213.176.26.123

🇺🇸 207.45.7.182

🇺🇸 205.210.31.71

🇻🇪 201.209.95.120

🇺🇸 195.184.76.217

🇦🇷 186.23.209.47

🇩🇪 185.201.136.176

🇺🇸 147.185.132.106

🇺🇸 146.190.133.46

🇻🇳 116.99.49.208

🇫🇷 85.217.140.24

🇺🇸 13.89.126.71