JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.99.211.64

47.99.211.64 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 40%: ?

40%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.99.211.64

Whois 47.99.211.64

IP Abuse Reports for 47.99.211.64:

This IP address has been reported a total of 15 times from 10 distinct sources. 47.99.211.64 was first reported on August 21st 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 RogueAutomata	2026-09-06 22:48:58 (1 week ago)	Detected malicious request: GET /apps/admin/view/default/layui/images/face/11.gif Detections trigge ... show more Detected malicious request: GET /apps/admin/view/default/layui/images/face/11.gif Detections triggered: Environment/config probe show less	Web App Attack
Anonymous	2026-09-06 17:53:54 (1 week ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇺🇸 SX Communications	2026-09-05 15:20:20 (2 weeks ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 47.99.211.64: traffic from this add ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 47.99.211.64: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
Anonymous	2026-09-04 21:38:29 (2 weeks ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇧🇷 Peregrine	2026-09-02 19:07:14 (2 weeks ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 47.99.211.64 104.23.170.48 - - [29/Aug/2026:21:31:24 -030 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 47.99.211.64 104.23.170.48 - - [29/Aug/2026:21:31:24 -0300] "GET /static/warn/close.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-09-01 03:11:31 (2 weeks ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 47.99.211.64 104.23.170.48 - - [29/Aug/2026:21:31:24 -030 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 47.99.211.64 104.23.170.48 - - [29/Aug/2026:21:31:24 -0300] "GET /static/warn/close.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-08-31 03:11:30 (2 weeks ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 47.99.211.64 104.23.170.48 - - [29/Aug/2026:21:31:24 -030 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 47.99.211.64 104.23.170.48 - - [29/Aug/2026:21:31:24 -0300] "GET /static/warn/close.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-08-30 00:31:35 (2 weeks ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 47.99.211.64 104.23.170.48 - - [29/Aug/2026:21:31:24 -030 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 47.99.211.64 104.23.170.48 - - [29/Aug/2026:21:31:24 -0300] "GET /static/warn/close.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇬🇧 pearbright	2026-08-28 06:52:47 (3 weeks ago)	47.99.211.64 - - [28/Aug/2026:06:52:44 +0000] "GET /README.md HTTP/1.1" 404 501 "-" "Mozilla/5.0 (Wi ... show more 47.99.211.64 - - [28/Aug/2026:06:52:44 +0000] "GET /README.md HTTP/1.1" 404 501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 47.99.211.64 - - [28/Aug/2026:06:52:44 +0000] "GET /static/warn/close.php HTTP/1.1" 404 501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 47.99.211.64 - - [28/Aug/2026:06:52:45 +0000] "GET /plus/img/df_dedetitle.gif HTTP/1.1" 404 501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 47.99.211.64 - - [28/Aug/2026:06:52:45 +0000] "GET /include/ckeditor/plugins/smiley/images/angel_smile.gif HTTP/1.1" 404 501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 47.99.211.64 - - [28/Aug/2026:06:52:45 +0000] "GET /apps/admin/view/default/layui/images/face/11.gif HTTP/1.1" 404 501 "-" "Mozilla/5.0 ... show less	Web App Attack
🇫🇷 IRISIO	2026-08-26 08:38:46 (3 weeks ago)	scans/SQL injection/spam posts : 110 queries	Web App Attack SQL Injection
Anonymous	2026-08-26 06:58:53 (3 weeks ago)	47.99.211.64 - - [26/Aug/2026:08:58:51 +0200] "GET /static/warn/close.php HTTP/1.1" 404 548 "-" "Moz ... show more 47.99.211.64 - - [26/Aug/2026:08:58:51 +0200] "GET /static/warn/close.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" "-" 47.99.211.64 - - [26/Aug/2026:08:58:52 +0200] "GET /e/data/images/arrow.gif HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" "-" 47.99.211.64 - - [26/Aug/2026:08:58:52 +0200] "GET /include/ckeditor/plugins/smiley/images/angel_smile.gif HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" "-" ... show less	Bad Web Bot Web App Attack
🇮🇪 Jim Keir	2026-08-26 06:07:09 (3 weeks ago)	2026-08-26 06:07:08 47.99.211.64 File scanning, blocking 47.99.211.64 for 5 minutes	Web App Attack
🇫🇷 IRISIO	2026-08-24 16:31:42 (3 weeks ago)	scans/SQL injection/spam posts : 88 queries	Web App Attack SQL Injection
Anonymous	2026-08-23 16:39:24 (3 weeks ago)	🚫 Repeated automated attempts to access prohibited paths and exploit known web application vulnerabi ... show more 🚫 Repeated automated attempts to access prohibited paths and exploit known web application vulnerabilities. show less	Bad Web Bot Web App Attack
🇺🇸 sailor	2026-08-21 16:37:00 (4 weeks ago)	50+ probes for wide-ranging potential vulnerabilities	Web App Attack Hacking

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.191.219.68

🇮🇳 165.232.182.81

🇯🇵 107.155.15.218

🇮🇩 103.191.171.18

🇷🇺 89.109.175.214

🇺🇸 66.132.172.229

🇷🇸 37.120.193.138

🇧🇪 198.235.24.236

🇷🇺 185.150.12.125

🇩🇰 185.129.61.129

🇷🇺 109.63.176.82

🇧🇩 59.153.30.244

🇧🇪 35.241.202.92

🇺🇸 23.129.64.220

🇺🇸 20.115.209.228

🇹🇷 185.153.231.37

🇧🇷 179.109.2.90

🇺🇸 173.239.224.174

🇺🇸 149.13.8.240

🇩🇪 146.70.160.252