JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.116.190.216

47.116.190.216 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 18%: ?

18%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.116.190.216

Whois 47.116.190.216

IP Abuse Reports for 47.116.190.216:

This IP address has been reported a total of 36 times from 26 distinct sources. 47.116.190.216 was first reported on December 25th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Octopuce	2026-07-26 08:57:54 (1 month ago)	Aggressive web search of vulnerable pages: /login8.php /login9.php /logins.php /indexl.php /Index.ph ... show more Aggressive web search of vulnerable pages: /login8.php /login9.php /logins.php /indexl.php /Index.php /wuti.php /dnn.php /admin.php /api.php /i ... show less	Web App Attack
🇩🇪 AetherFox	2026-07-14 01:33:09 (1 month ago)	AetherFox VoidGuard detected: [Tue Jul 14 01:33:06.946027 2026] [authz_core:error] [pid 903350:tid 9 ... show more AetherFox VoidGuard detected: [Tue Jul 14 01:33:06.946027 2026] [authz_core:error] [pid 903350:tid 903369] [client 47.116.190.216:44158] AH01630: client denied by server configuration: proxy:http://[MASKED]/login8.php, referer: http://draconigen.net/login8.php [Tue Jul 14 01:33:06.946240 2026] [authz_core:error] [pid 903350:tid 903369] [client 47.116.190.216:44158] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html, referer: http://draconigen.net/login8.php [Tue Jul 14 01:33:08.187482 2026] [authz_core:error] [pid 903350:tid 903358] [client 47.116.190.216:50682] AH01630: client denied by server configuration: proxy:https://[MASKED]/login8.php, referer: http://draconigen.com/login8.php [Tue Jul 14 01:33:08.140646 2026] [authz_core:error] [pid 903350:tid 903367] [client 47.116.190.216:44158] AH01630: client denied by server configuration: proxy:http://[MASKED]/login9.php, referer: http://draconigen.net/login9.php [Tue Jul 14 01: ... show less	Bad Web Bot Web App Attack
🇺🇸 Lee Daniel	2026-07-07 03:04:42 (1 month ago)	47.116.190.216 - - [06/Jul/2026:23:04:06 -0400] "GET /logins.php HTTP/1.1" 404 112722 "http://www.li ... show more 47.116.190.216 - - [06/Jul/2026:23:04:06 -0400] "GET /logins.php HTTP/1.1" 404 112722 "http://www.littlepinkgift.com/logins.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 47.116.190.216 - - [06/Jul/2026:23:04:15 -0400] "GET /indexl.php HTTP/1.1" 404 112722 "http://www.littlepinkgift.com/indexl.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 47.116.190.216 - - [06/Jul/2026:23:04:26 -0400] "GET /Index.php HTTP/1.1" 404 112722 "http://www.littlepinkgift.com/Index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 47.116.190.216 - - [06/Jul/2026:23:04:34 -0400] "GET /wuti.php HTTP/1.1" 404 112722 "http://www.littlepinkgift.com/wuti.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 47.116.190.216 - - [06 ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇨🇦 Mediashaker	2026-07-07 02:14:31 (1 month ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 47.116.190.216 (CN/China ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 47.116.190.216 (CN/China/-) show less	Port Scan
🇫🇷 masterguru	2026-07-06 04:17:38 (1 month ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-197)	Hacking
🇪🇸 el-brujo	2026-07-05 08:09:40 (1 month ago)	[Sun Jul 05 10:09:38.422383 2026] [proxy_fcgi:error] [pid 3370276:tid 3370310] [remote 47.116.190.21 ... show more [Sun Jul 05 10:09:38.422383 2026] [proxy_fcgi:error] [pid 3370276:tid 3370310] [remote 47.116.190.216:0] AH01071: Got error 'Primary script unknown\n', referer: http://foro.elhacker.net/login8.php [Sun Jul 05 10:09:40.225818 2026] [proxy_fcgi:error] [pid 3370276:tid 3370349] [remote 47.116.190.216:0] AH01071: Got error 'Primary script unknown\n', referer: http://foro.elhacker.net/login9.php ... show less	Hacking Web App Attack
Anonymous	2026-07-01 04:10:06 (1 month ago)	47.116.190.216 - - [01/Jul/2026:06:09:39 +0200] "GET /login8.php HTTP/1.1" 404 567 "http://sanjeevan ... show more 47.116.190.216 - - [01/Jul/2026:06:09:39 +0200] "GET /login8.php HTTP/1.1" 404 567 "http://sanjeevanihcl.com/login8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 47.116.190.216 - - [01/Jul/2026:06:09:40 +0200] "GET /login9.php HTTP/1.1" 404 567 "http://sanjeevanihcl.com/login9.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 47.116.190.216 - - [01/Jul/2026:06:09:42 +0200] "GET /fun.php?ote HTTP/1.1" 404 567 "http://sanjeevanihcl.com/fun.php?ote" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 47.116.190.216 - - [01/Jul/2026:06:09:43 +0200] "GET /logins.php HTTP/1.1" 404 567 "http://sanjeevanihcl.com/logins.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 47.116.190.216 - - [01/Jul/2026:06:09:44 +0200 ... show less	Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-06-24 14:16:10 (2 months ago)	Aggressive web search of vulnerable pages: /login8.php /login9.php /logins.php /indexl.php /Index.ph ... show more Aggressive web search of vulnerable pages: /login8.php /login9.php /logins.php /indexl.php /Index.php /wuti.php /dnn.php /admin.php /api.php /i ... show less	Web App Attack
🇬🇧 consul.to	2026-06-15 15:08:25 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 dtorrer	2026-06-14 15:33:33 (2 months ago)	General vulnerability scan.	Port Scan
🇬🇧 consul.to	2026-06-05 00:08:35 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-02 16:21:58 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-06-01 23:33:27 (2 months ago)	Multiple, malicious web requests detected	Port Scan Hacking
🇺🇸 mnsf	2026-05-18 19:05:09 (3 months ago)	Too many Status 40X (20)	Brute-Force Web App Attack
Anonymous	2026-05-18 08:09:46 (3 months ago)	FUNDATCOM WEBEXPLOIT 47.116.190.216 (47.116.190.216)	Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 178.183.103.196

🇳🇱 154.90.70.16

🇨🇳 120.84.10.132

🇺🇸 107.173.135.36

🇹🇷 94.73.131.243

🇺🇸 91.230.168.136

🇺🇸 76.35.102.235

🇯🇵 34.97.213.190

🇺🇸 2600:1f18:54f:1200:8cce:b208:4e3e:283a

🇷🇺 195.46.110.78

🇺🇸 165.154.206.35

🇺🇸 159.223.205.142

🇺🇸 154.36.78.5

🇮🇳 122.185.101.50

🇭🇰 119.246.15.94

🇨🇳 115.196.17.180

🇫🇷 91.196.152.227

🇺🇸 34.174.169.53

🇵🇹 2.81.250.71

🇪🇪 196.196.253.20