JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.79.201.93

47.79.201.93 was found in our database!

This IP was reported 163 times. Confidence of Abuse is 45%: ?

45%

ISP	Alibaba Cloud LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibaba-inc.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.79.201.93

Whois 47.79.201.93

IP Abuse Reports for 47.79.201.93:

This IP address has been reported a total of 163 times from 36 distinct sources. 47.79.201.93 was first reported on May 22nd 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 AetherFox	2026-08-26 04:03:33 (3 hours ago)	AetherFox VoidGuard detected: [Wed Aug 26 06:02:32.964629 2026] [authz_core:error] [pid 209788:tid 2 ... show more AetherFox VoidGuard detected: [Wed Aug 26 06:02:32.964629 2026] [authz_core:error] [pid 209788:tid 209806] [client 47.79.201.93:35486] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_all_bug_page.php, referer: https://www.google.com/ [Wed Aug 26 06:02:32.966440 2026] [authz_core:error] [pid 209788:tid 209806] [client 47.79.201.93:35486] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/ [Wed Aug 26 06:02:55.054162 2026] [authz_core:error] [pid 209788:tid 209809] [client 47.79.201.93:33034] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_all_set.php, referer: https://www.google.com/ [Wed Aug 26 06:02:55.054419 2026] [authz_core:error] [pid 209788:tid 209809] [client 47.79.201.93:33034] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/ [Wed Aug 26 06:03:33.102340 2026] [authz_core:err ... show less	Bad Web Bot Web App Attack
🇩🇪 jbcrn	2026-08-26 01:01:56 (6 hours ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /deflagration.really. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0 show less	Bad Web Bot Web App Attack
🇩🇪 AetherFox	2026-08-25 20:01:35 (11 hours ago)	AetherFox VoidGuard detected: [Tue Aug 25 22:01:28.968517 2026] [authz_core:error] [pid 196776:tid 1 ... show more AetherFox VoidGuard detected: [Tue Aug 25 22:01:28.968517 2026] [authz_core:error] [pid 196776:tid 196788] [client 47.79.201.93:61826] AH01630: client denied by server configuration: proxy:https://[MASKED]/excel_xml_export.php, referer: https://www.google.com/ [Tue Aug 25 22:01:28.968734 2026] [authz_core:error] [pid 196776:tid 196788] [client 47.79.201.93:61826] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/ [Tue Aug 25 22:01:29.557362 2026] [authz_core:error] [pid 196776:tid 196796] [client 47.79.201.93:61826] AH01630: client denied by server configuration: proxy:https://[MASKED]/excel_xml_export.php, referer: https://www.google.com/ [Tue Aug 25 22:01:29.557631 2026] [authz_core:error] [pid 196776:tid 196796] [client 47.79.201.93:61826] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/ [Tue Aug 25 22:01:34.827219 2026] [authz_core: ... show less	Bad Web Bot Web App Attack
🇩🇪 AetherFox	2026-08-22 13:00:16 (3 days ago)	AetherFox VoidGuard detected: [Sat Aug 22 15:00:07.401846 2026] [authz_core:error] [pid 161957:tid 1 ... show more AetherFox VoidGuard detected: [Sat Aug 22 15:00:07.401846 2026] [authz_core:error] [pid 161957:tid 161973] [client 47.79.201.93:27996] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_filters_page.php, referer: https://www.google.com/ [Sat Aug 22 15:00:07.403636 2026] [authz_core:error] [pid 161957:tid 161973] [client 47.79.201.93:27996] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/ [Sat Aug 22 15:00:09.814415 2026] [authz_core:error] [pid 161957:tid 161965] [client 47.79.201.93:52640] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_all_set.php, referer: https://www.google.com/ [Sat Aug 22 15:00:09.814687 2026] [authz_core:error] [pid 161957:tid 161965] [client 47.79.201.93:52640] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/ [Sat Aug 22 15:00:16.728965 2026] [authz_core:err ... show less	Bad Web Bot Web App Attack
🇩🇪 AetherFox	2026-08-22 01:03:11 (4 days ago)	AetherFox VoidGuard detected: [Sat Aug 22 03:01:43.053193 2026] [authz_core:error] [pid 161957:tid 1 ... show more AetherFox VoidGuard detected: [Sat Aug 22 03:01:43.053193 2026] [authz_core:error] [pid 161957:tid 161980] [client 47.79.201.93:51364] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/ [Sat Aug 22 03:02:57.741982 2026] [authz_core:error] [pid 161957:tid 161970] [client 47.79.201.93:26038] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_all_set.php, referer: https://www.google.com/ [Sat Aug 22 03:02:57.742241 2026] [authz_core:error] [pid 161957:tid 161970] [client 47.79.201.93:26038] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/ [Sat Aug 22 03:03:11.035448 2026] [authz_core:error] [pid 161956:tid 162010] [client 47.79.201.93:49086] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_all_set.php, referer: https://www.google.com/ [Sat Aug 22 03:03:11.035717 2026] [authz_core:error] [ ... show less	Bad Web Bot Web App Attack
🇩🇪 AetherFox	2026-08-20 16:01:30 (5 days ago)	AetherFox VoidGuard detected: [Thu Aug 20 18:00:08.283179 2026] [authz_core:error] [pid 142528:tid 1 ... show more AetherFox VoidGuard detected: [Thu Aug 20 18:00:08.283179 2026] [authz_core:error] [pid 142528:tid 142567] [client 47.79.201.93:26244] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_all_set.php, referer: https://www.google.com/ [Thu Aug 20 18:00:08.284923 2026] [authz_core:error] [pid 142528:tid 142567] [client 47.79.201.93:26244] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/ [Thu Aug 20 18:01:28.091441 2026] [authz_core:error] [pid 142528:tid 142561] [client 47.79.201.93:38892] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_all_set.php, referer: https://www.google.com/ [Thu Aug 20 18:01:28.091704 2026] [authz_core:error] [pid 142528:tid 142561] [client 47.79.201.93:38892] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/ [Thu Aug 20 18:01:30.260909 2026] [authz_core:error] [ ... show less	Bad Web Bot Web App Attack
🇺🇸 1gz	2026-08-17 13:01:22 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/temperatura UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 1gz	2026-08-16 07:06:02 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /english/malaria UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 1gz	2026-08-15 16:57:40 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kosove/live UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-08-15 16:07:02 (1 week ago)	WEB attack	Brute-Force
🇺🇸 TPI-Abuse	2026-08-13 02:45:06 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 47.79.201.93 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 47.79.201.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 12 22:44:57.107335 2026] [security2:error] [pid 486111:tid 486111] [client 47.79.201.93:59220] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.spacebooger.com\|F\|2"] [data ".spacebooger.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.spacebooger.com"] [uri "/tag/steel/www.spacebooger.com"] [unique_id "an0vqVb7ZXlzFI_H10aZeQAAAAA"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-07 23:07:16 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 47.79.201.93 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 47.79.201.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 19:07:10.169850 2026] [security2:error] [pid 145184:tid 145184] [client 47.79.201.93:24458] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.clayrivers.com\|F\|2"] [data ".clayrivers.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.clayrivers.com"] [uri "/mlif6/www.clayrivers.com"] [unique_id "anZlHj6NQXqxv_8LAPCMpgAAAAY"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-08-07 16:36:23 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/legjendat UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-08-06 22:26:43 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-02 14:19:05 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 47.79.201.93 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 47.79.201.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 02 10:19:00.292823 2026] [security2:error] [pid 2415051:tid 2415051] [client 47.79.201.93:45278] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.aabondwnc.com\|F\|2"] [data ".weebly.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.aabondwnc.com"] [uri "/www.weebly.com"] [unique_id "am9R1L_iWpqo7PAqhvLN0gAAABg"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 163 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.55

🇳🇱 185.107.80.93

🇺🇸 165.154.173.17

🇮🇳 160.238.92.81

🇪🇸 158.158.54.35

🇺🇸 65.49.1.192

🇩🇪 45.13.225.69

🇧🇪 35.187.95.46

🇧🇷 196.18.164.29

🇬🇧 195.140.214.28

🇲🇽 189.217.192.117

🇬🇧 185.216.145.190

🇺🇸 185.198.240.161

🇧🇩 160.202.144.209

🇮🇩 139.255.2.146

🇺🇸 104.22.148.26

🇧🇩 103.153.210.139

🇬🇧 81.19.219.248

🇺🇦 46.201.14.8

🇺🇦 37.55.118.42