JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.79.201.49

47.79.201.49 was found in our database!

This IP was reported 63 times. Confidence of Abuse is 52%: ?

52%

ISP	Alibaba Cloud LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibaba-inc.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.79.201.49

Whois 47.79.201.49

IP Abuse Reports for 47.79.201.49:

This IP address has been reported a total of 63 times from 23 distinct sources. 47.79.201.49 was first reported on May 27th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 1gz	2026-07-10 05:32:57 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/33 UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 ersei.net	2026-07-05 23:41:32 (6 days ago)	Web app exploiting	Web App Attack
Anonymous	2026-07-03 20:39:17 (1 week ago)	Malicious activity detected	Hacking Web App Attack
🇨🇭 flaus	2026-06-28 12:52:55 (1 week ago)	$f2bV_matches	Hacking Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-25 16:32:44 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-18 09:23:27 (3 weeks ago)	FortiWeb WAF: 14 attacks detected. Threat Score: 10200. Types: Client Management(7), GEO IP(7). Orig ... show more FortiWeb WAF: 14 attacks detected. Threat Score: 10200. Types: Client Management(7), GEO IP(7). Origin: Singapore. show less	Web App Attack
🇨🇦 1gz	2026-06-18 05:50:08 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (HEAD meth ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (HEAD method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 4server	2026-06-16 15:11:02 (3 weeks ago)	[TueJun1617:10:59.0078182026][security2:error][pid2006194:tid2006221][client47.79.201.49:0]ModSecuri ... show more [TueJun1617:10:59.0078182026][security2:error][pid2006194:tid2006221][client47.79.201.49:0]ModSecurity:Accessdeniedwithcode403$phase2$.Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".dll\"][severity\"ERROR\"][hostname\"modularss.com\"][uri\"/recordati/authupdate/roslyn/Microsoft.DiaSymReader.Native.x86.dll\"][unique_id\"ajFng6oCoXjCiGs10_xlWgAAABg\"]\,referer:https://www.google.com/ show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-06-16 09:22:57 (3 weeks ago)	FortiWeb WAF: 32 attacks detected. Threat Score: 12800. Types: Client Management(16), GEO IP(16). Or ... show more FortiWeb WAF: 32 attacks detected. Threat Score: 12800. Types: Client Management(16), GEO IP(16). Origin: Singapore. show less	Web App Attack
Anonymous	2026-06-16 04:25:02 (3 weeks ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 20:02:55 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 47.79.201.49 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 47.79.201.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 16:02:50.158671 2026] [security2:error] [pid 17235:tid 17235] [client 47.79.201.49:26196] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|soviaenterprises.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "soviaenterprises.com"] [uri "/bizzybeejunkremoval.com"] [unique_id "ajBaandRFbsEryEHN0E3pAAAAAI"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 11:32:57 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 47.79.201.49 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 47.79.201.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 07:32:52.736632 2026] [security2:error] [pid 9725:tid 9725] [client 47.79.201.49:15578] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.elcalamo.com\|F\|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.elcalamo.com"] [uri "/pda/solorzano-lobo de labio.PDB"] [unique_id "ai_i5MY87daAr-PDYsPCewAAACI"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-15 06:36:19 (3 weeks ago)	Malicious activity	Bad Web Bot Web App Attack
🇺🇸 webgobe	2026-06-15 04:00:34 (3 weeks ago)	jow-Joomla User : try to access forms...	Hacking
🇫🇷 Sklurk	2026-06-14 21:05:38 (3 weeks ago)	Web App Attack	Web App Attack

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.188.224.223

🇺🇸 23.94.200.194

🇩🇪 213.209.159.223

🇻🇪 190.205.82.233

🇻🇪 190.89.29.12

🇲🇽 189.203.193.37

🇧🇷 187.45.95.66

🇺🇸 185.180.141.5

🇨🇳 182.84.128.22

🇷🇺 178.177.31.185

🇷🇺 178.177.19.25

🇮🇶 169.224.65.47

🇺🇸 162.216.150.27

🇫🇷 91.231.89.253

🇱🇹 62.60.130.219

🇸🇬 47.82.10.59

🇸🇬 43.160.208.253

🇨🇳 42.240.164.208

🇫🇷 2001:41d0:203:ddd1::

🇹🇭 223.204.123.132