JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 8.217.142.247

8.217.142.247 was found in our database!

This IP was reported 286 times. Confidence of Abuse is 15%: ?

15%

ISP	Aliyun Computing Co.LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibaba-inc.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 8.217.142.247

Whois 8.217.142.247

IP Abuse Reports for 8.217.142.247:

This IP address has been reported a total of 286 times from 37 distinct sources. 8.217.142.247 was first reported on March 21st 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 1gz	2026-10-20 04:14:25 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /shqiperi/a-do-te-kete-koalicion-ps-pd-pas-zgjedhjeve-ja-cfare-thote-meta/308736/ UA: TokenFoundryBot/1.0 ([email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 paulshipley.com.au	2026-10-20 03:47:45 (3 days ago)	[Tue Oct 20 14:47:44.750978 2026] [security2:error] [pid 206284] [client 8.217.142.247:52709] [clien ... show more [Tue Oct 20 14:47:44.750978 2026] [security2:error] [pid 206284] [client 8.217.142.247:52709] [client 8.217.142.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/product/hi-vis-rippa-sub-tee-jb-6hvrt/"] [unique_id "atbkYHHjPdIdHyV1QZ6sywAAAAo"] ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-10-19 13:23:43 (3 days ago)	[Tue Oct 20 00:23:42.711012 2026] [security2:error] [pid 122676] [client 8.217.142.247:38234] [clien ... show more [Tue Oct 20 00:23:42.711012 2026] [security2:error] [pid 122676] [client 8.217.142.247:38234] [client 8.217.142.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/robots.txt"] [unique_id "atYZ3rZOSSmXQsYXtimkMgAAABE"] ... show less	Web App Attack
🇨🇦 1gz	2026-08-11 02:28:53 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /english/zmnv-handled-125-new-cases-during-the-second-half-of-july-2026/952422/ UA: AliyunSecBot/Aliyun ([email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 paulshipley.com.au	2026-08-11 00:34:05 (2 months ago)	[Tue Aug 11 10:34:04.278554 2026] [security2:error] [pid 186993] [client 8.217.142.247:43543] [clien ... show more [Tue Aug 11 10:34:04.278554 2026] [security2:error] [pid 186993] [client 8.217.142.247:43543] [client 8.217.142.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/heart-shape-filled-choc-beans-cc030b/tel:1300701197"] [unique_id "anpt_GGjeZTSLHkTls1higAAABg"] ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-08-10 22:02:25 (2 months ago)	[11/Aug/2026:01:02:25 +0300] -- 8.217.142.247 Ban reason: User-Agent AliyunSecBot	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-08-05 12:39:04 (2 months ago)	Persistent bad bot: repeated automated abuse detected	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-08-04 07:09:03 (2 months ago)	Persistent bad bot: repeated automated abuse detected	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-07-30 14:21:15 (2 months ago)	[30/Jul/2026:17:21:14 +0300] -- 8.217.142.247 Ban reason: User-Agent AliyunSecBot	Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-06-21 16:48:37 (4 months ago)	Web App Attack	Web App Attack
🇫🇷 bigorre.org	2026-06-21 15:45:14 (4 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇨🇭 4server	2026-06-14 19:57:06 (4 months ago)	[SunJun1421:56:59.0537922026][security2:error][pid3694105:tid3694350][client8.217.142.247:0]ModSecur ... show more [SunJun1421:56:59.0537922026][security2:error][pid3694105:tid3694350][client8.217.142.247:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:aliyunsecbot\\|dirbuster\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"75\"][id\"338803\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedmaliciousagent\"][severity\"ERROR\"][hostname\"www.swisservers.com\"][uri\"/robots.txt\"][unique_id\"ai8Hi-35J3Cs7JbWhAqT9wAAAQk\"] show less	Hacking Web App Attack
🇦🇺 paulshipley.com.au	2026-06-10 02:34:45 (4 months ago)	[Wed Jun 10 12:34:44.790935 2026] [security2:error] [pid 336148] [client 8.217.142.247:37569] [clien ... show more [Wed Jun 10 12:34:44.790935 2026] [security2:error] [pid 336148] [client 8.217.142.247:37569] [client 8.217.142.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/product/neoprene-wine-cooler-bag-full-colour-tc-110498/"] [unique_id "aijNRJlxK95XR_vhsM8rJgAAABA"] ... show less	Web App Attack
🇩🇪 filstal.org	2026-06-04 23:30:12 (4 months ago)	Unauthorized web crawling by known aggressive crawler or data harvesting bot detected by Fail2Ban	Bad Web Bot
🇩🇪 filstal.org	2026-06-03 22:24:19 (4 months ago)	Unauthorized web crawling by known aggressive crawler or data harvesting bot detected by Fail2Ban	Bad Web Bot

Showing 1 to 15 of 286 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.47.62.69

🇭🇰 156.225.1.99

🇺🇸 143.42.1.84

🇺🇿 109.94.173.6

🇳🇱 104.23.168.110

🇷🇺 95.179.115.147

🇧🇭 88.201.25.50

🇷🇺 88.147.173.180

🇮🇱 51.4.104.95

🇧🇪 34.62.56.93

🇯🇵 8.216.5.90

🇬🇧 5.226.140.52

🇫🇷 185.177.72.205

🇫🇮 147.185.133.62

🇩🇪 104.248.251.235

🇨🇳 103.212.49.6

🇹🇷 78.135.111.62

🇺🇸 52.201.155.215

🇫🇷 46.105.132.32

🇺🇸 18.119.209.50