JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.98.96.52

47.98.96.52 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 23%: ?

23%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.98.96.52

Whois 47.98.96.52

IP Abuse Reports for 47.98.96.52:

This IP address has been reported a total of 32 times from 11 distinct sources. 47.98.96.52 was first reported on July 28th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇷 setupgr	2026-07-19 20:51:40 (2 days ago)	(mod_security) mod_security (id:100011) triggered by 47.98.96.52 (CN/China/Zhejiang/Hangzhou/-/[AS37 ... show more (mod_security) mod_security (id:100011) triggered by 47.98.96.52 (CN/China/Zhejiang/Hangzhou/-/[AS37963 ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Jul 19 23:51:36.951965 2026] [security2:error] [pid 1947671:tid 1947717] [client 47.98.96.52:3933] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CN" at GEO:COUNTRY_CODE. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "100011"] [msg "Traffic from CN/SG blocked for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/2019/01/"] [unique_id "al042HwJ4Eq0Y2xIGaiATgAAABM"] show less	Port Scan
🇩🇪 Phenix Info	2026-07-19 04:07:48 (3 days ago)	SmallGuard.fr/Prestashop Empty User Agent	Web App Attack
Anonymous	2026-07-14 19:16:21 (1 week ago)	PAD: Bad_Web_Bot_D detected	Bad Web Bot
🇩🇪 Phenix Info	2026-07-10 01:44:02 (1 week ago)	SmallGuard.fr/Prestashop Empty User Agent	Web App Attack
🇬🇷 setupgr	2026-07-07 18:02:21 (2 weeks ago)	(mod_security) mod_security (id:100011) triggered by 47.98.96.52 (CN/China/Zhejiang/Hangzhou/-/[AS37 ... show more (mod_security) mod_security (id:100011) triggered by 47.98.96.52 (CN/China/Zhejiang/Hangzhou/-/[AS37963 ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Tue Jul 07 21:02:20.226942 2026] [security2:error] [pid 268238:tid 268337] [client 47.98.96.52:23926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CN" at GEO:COUNTRY_CODE. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "100011"] [msg "Traffic from CN/SG blocked for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/2019/01/"] [unique_id "ak0_LEqY7Bq0hlvAywFZNQAAAlY"] show less	Port Scan
🇬🇷 setupgr	2026-07-07 16:10:56 (2 weeks ago)	(mod_security) mod_security (id:100011) triggered by 47.98.96.52 (CN/China/Zhejiang/Hangzhou/-/[AS37 ... show more (mod_security) mod_security (id:100011) triggered by 47.98.96.52 (CN/China/Zhejiang/Hangzhou/-/[AS37963 ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Tue Jul 07 19:10:52.037773 2026] [security2:error] [pid 1330567:tid 1330615] [client 47.98.96.52:12230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CN" at GEO:COUNTRY_CODE. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "100011"] [msg "Traffic from CN/SG blocked for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/2019/01/"] [unique_id "ak0lDIGWHS4I2SP_bvW2OgAAABU"] show less	Port Scan
🇬🇷 setupgr	2026-06-15 16:54:19 (1 month ago)	(mod_security) mod_security (id:100011) triggered by 47.98.96.52: 1 in the last 86400 secs; Ports: * ... show more (mod_security) mod_security (id:100011) triggered by 47.98.96.52: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 19:54:18.465737 2026] [security2:error] [pid 1917012:tid 1917165] [client 47.98.96.52:12896] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/2019/01/"] [unique_id "ajAuOkCXHuxGK7C8F7orWAAAAFU"] show less	Port Scan
🇩🇪 Phenix Info	2026-06-10 10:27:12 (1 month ago)	SmallGuard.fr/Prestashop Empty User Agent	Web App Attack
🇩🇪 Phenix Info	2026-06-07 01:51:58 (1 month ago)	SmallGuard.fr/Prestashop Empty User Agent	Web App Attack
🇩🇪 Phenix Info	2026-06-06 06:46:34 (1 month ago)	SmallGuard.fr - Empty User Agent	Web App Attack
Anonymous	2026-05-25 16:48:22 (1 month ago)	PAD: Bad_Web_Bot_D detected	Bad Web Bot
🇩🇪 Hazzard	2026-05-23 10:36:56 (1 month ago)	(apache-empty-ua) Failed empty apache-ua trigger with match [redacted]): (CF_ENABLE)	Hacking
🇩🇪 Hazzard	2026-05-21 21:50:10 (2 months ago)	(apache-empty-ua) Failed empty apache-ua trigger with match [redacted]): (CF_ENABLE)	Hacking
🇩🇪 Hazzard	2026-05-19 16:48:40 (2 months ago)	(apache-empty-ua) Failed empty apache-ua trigger with match [redacted]): (CF_ENABLE)	Hacking
🇩🇪 Hazzard	2026-05-16 16:43:52 (2 months ago)	(apache-empty-ua) Failed empty apache-ua trigger with match [redacted]): (CF_ENABLE)	Hacking

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.86

🇸🇬 118.201.199.153

🇨🇳 117.69.255.239

🇵🇰 111.68.98.152

🇫🇷 91.196.152.121

🇦🇿 37.114.144.151

🇰🇷 1.212.225.99

🇧🇷 206.42.8.243

🇧🇷 205.210.31.226

🇩🇪 167.94.146.40

🇨🇳 122.226.38.134

🇮🇳 117.247.47.233

🇨🇳 115.49.201.84

🇮🇩 114.8.234.90

🇹🇼 111.70.49.182

🇹🇭 106.0.165.219

🇮🇳 103.52.36.243

🇨🇦 85.217.149.60

🇬🇧 82.4.2.244

🇨🇿 78.24.15.92