JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.79.201.214

47.79.201.214 was found in our database!

This IP was reported 64 times. Confidence of Abuse is 61%: ?

61%

ISP	Alibaba Cloud LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibaba-inc.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.79.201.214

Whois 47.79.201.214

IP Abuse Reports for 47.79.201.214:

This IP address has been reported a total of 64 times from 22 distinct sources. 47.79.201.214 was first reported on May 24th 2025, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-06-12 21:56:39 (17 hours ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇺🇸 kosada.com	2026-06-12 20:08:18 (19 hours ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇫🇷 Sklurk	2026-06-12 16:17:18 (22 hours ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 10:25:47 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 47.79.201.214 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 47.79.201.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 06:25:38.847384 2026] [security2:error] [pid 1834:tid 1834] [client 47.79.201.214:48552] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.dixieaire.com\|F\|2"] [data ".dixieairetitle.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dixieaire.com"] [uri "/www.dixieairetitle.com"] [unique_id "aiveokdz5qSCNrdnMuYCHwAAABA"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-12 09:21:13 (1 day ago)	FortiWeb WAF: 82 attacks detected. Threat Score: 12800. Types: Client Management(41), GEO IP(41). Or ... show more FortiWeb WAF: 82 attacks detected. Threat Score: 12800. Types: Client Management(41), GEO IP(41). Origin: Singapore. show less	Web App Attack
🇨🇦 1gz	2026-06-12 01:20:41 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/majlinda-cara UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-06-11 20:18:02 (1 day ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 16:32:25 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 47.79.201.214 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 47.79.201.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 12:32:20.069486 2026] [security2:error] [pid 30435:tid 30435] [client 47.79.201.214:3112] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.elcalamo.com\|F\|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.elcalamo.com"] [uri "/pda/medina-azucarlimpio.PDB"] [unique_id "airjFKUHU2U6BusRseCxdgAAAAA"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-06-11 04:17:43 (2 days ago)	[ThuJun1106:17:36.7014922026][security2:error][pid1416997:tid1418061][client47.79.201.214:0]ModSecur ... show more [ThuJun1106:17:36.7014922026][security2:error][pid1416997:tid1418061][client47.79.201.214:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\(10\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|192\\\\\\\\.168\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|172\\\\\\\\.\(1[6-9]\\|2[0-9]\\|3[0-1]\)\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|fe80::\)\"atREQUEST_HEADERS:X-Forwarded-For.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"24\"][id\"990004\"][msg\"SSRFattempttoprivate/internalnetworkdetected\"][hostname\"shakary.com\"][uri\"/band.html\"][unique_id\"aio24F9UsUQN69hmI18alwAAAMg\"]\,referer:https://www.google.com/ show less	Hacking Web App Attack
🇫🇷 Sklurk	2026-06-11 02:27:08 (2 days ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 18:17:58 (2 days ago)	(mod_security) mod_security (id:210381) triggered by 47.79.201.214 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210381) triggered by 47.79.201.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 14:17:51.318852 2026] [security2:error] [pid 15884:tid 16020] [client 47.79.201.214:30670] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt\|\|www.mentzlaw.com\|F\|4"] [data "REQUEST_URI=/louisianaasbestoslawyer/%url%"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mentzlaw.com"] [uri "/louisianaasbestoslawyer/%url%"] [unique_id "aimqT8QvsK96IoNSIhzk6wAAAkk"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 canine.tools	2026-06-10 16:04:30 (2 days ago)	[fail2ban Auto Report] {"time":"2026-06-10T12:04:30.327805822-04:00","level":"INFO","source":{"funct ... show more [fail2ban Auto Report] {"time":"2026-06-10T12:04:30.327805822-04:00","level":"INFO","source":{"function":"github.com/TecharoHQ/anubis/lib.(*Server).checkRules","file":"/Users/cadey/Code/TecharoHQ/botstopper/upstream/anubis/lib/anubis.go","line":309},"msg":"explicit deny","subsystem":"anubis","host":"tent.canine.tools","method":"GET","path":"/release.php","user_agent":"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36","accept_language":"","priority":"","x-forwarded-for":"47.79.201.214","x-real-ip":"47.79.201.214","host":"tent.canine.tools","check_result":{"name":"bot/alibaba-cloud","rule":"DENY","weight":0}} ... show less	Bad Web Bot
🇺🇸 ersei.net	2026-01-30 02:43:05 (4 months ago)	Web app exploiting	Web App Attack
🇺🇸 SSH-Admin	2026-01-19 01:55:19 (4 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇫🇷 Sklurk	2026-01-17 02:00:29 (4 months ago)	Web App Attack	Web App Attack

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 106.49.57.4

🇺🇸 72.14.147.173

🇺🇸 34.23.207.151

🇨🇳 223.83.114.88

🇺🇸 162.216.150.19

🇸🇪 155.4.244.169

🇻🇳 113.188.150.18

🇫🇷 85.217.140.29

🇩🇪 46.225.119.16

🇰🇷 34.50.51.6

🇬🇧 31.14.254.124

🇺🇸 18.223.28.93

🇺🇸 194.110.150.130

🇺🇸 162.216.149.75

🇳🇱 107.189.27.179

🇰🇷 106.245.246.26

🇭🇰 47.239.248.233

🇺🇸 18.226.170.179

🇵🇭 203.177.140.62

🇧🇷 189.108.215.39