101.133.147.20

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
21% Elevated
303 reports
7 reporters · latest 2 days ago
ISP
Aliyun Computing Co., LTD
Usage Type
Data Center/Web Hosting/Transit
ASN
AS37963
Domain Name
alibabacloud.com
Country
🇨🇳 China
City
Shanghai, Shanghai
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
303 from 7 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇭🇰 Hong Kong 20 🇨🇳 China 3
Most common categories Port Scan 19 Brute-Force 3 SSH 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇭🇰 sandra361
Port scan detected: 8 packets across 1 port (7002). | Evidence: REAPER_TARPIT: IN=eth0 SRC=101.133.147.20 LEN=45 TOS=0x14 PREC=0x00 TTL=49 ID=18710 DF PROTO=TCP SPT=38462 DPT=7002 WINDOW=42340 RES=0x00 ACK PSH URGP=0
Port Scan
🇭🇰 sandra361
Port Scan
🇭🇰 sandra361
Port scan detected: 15 packets across 1 port (993). | Evidence: REAPER_TARPIT: IN=eth0 SRC=101.133.147.20 LEN=301 TOS=0x14 PREC=0x00 TTL=49 ID=56433 DF PROTO=TCP SPT=56350 DPT=993 WINDOW=42340 RES=0x00 ACK PSH URGP=0
Port Scan
Anonymous
Blocked by UFW (TCP on 1723) Source port: 52674 TTL: 248 Packet length: 40 TOS: 0x14 This report (for 101.133.147.20) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇭🇰 sandra361
Port scan detected: 11 attempts across 1 port (23). | Evidence: REAPER_TARPIT: IN=eth0 SRC=101.133.147.20 LEN=557 TOS=0x14 PREC=0x00 TTL=49 ID=4599 DF PROTO=TCP SPT=51982 DPT=23 WINDOW=42340 RES=0x00 ACK PSH URGP=0
Port Scan
🇭🇰 sandra361
Port scan detected: 19 attempts across 1 port (514). | Evidence: REAPER_TARPIT: IN=eth0 SRC=101.133.147.20 LEN=557 TOS=0x14 PREC=0x00 TTL=49 ID=26658 DF PROTO=TCP SPT=53560 DPT=514 WINDOW=42340 RES=0x00 ACK PSH URGP=0
Port Scan
🇨🇳 Pumilk
SSH brute-force (5 failed logins), auto-banned by fail2ban
Brute-Force SSH
🇭🇰 sandra361
Port scan detected: 18 attempts across 1 port (873). | Evidence: REAPER_TARPIT: IN=eth0 SRC=101.133.147.20 LEN=40 TOS=0x14 PREC=0x00 TTL=49 ID=34274 DF PROTO=TCP SPT=58928 DPT=873 WINDOW=42340 RES=0x00 ACK FIN URGP=0
Port Scan
🇭🇰 sandra361
Port scan detected: 8 attempts across 1 port (2375). | Evidence: REAPER_TARPIT: IN=eth0 SRC=101.133.147.20 LEN=45 TOS=0x14 PREC=0x00 TTL=49 ID=57431 DF PROTO=TCP SPT=45362 DPT=2375 WINDOW=42340 RES=0x00 ACK PSH URGP=0
Port Scan
🇭🇰 sandra361
Port scan detected: 92 attempts across 1 port (2049). | Evidence: REAPER_TARPIT: IN=eth0 SRC=101.133.147.20 LEN=40 TOS=0x14 PREC=0x00 TTL=50 ID=56055 DF PROTO=TCP SPT=38734 DPT=2049 WINDOW=42340 RES=0x00 ACK URGP=0
Port Scan
🇭🇰 sandra361
Port scan detected: 17 attempts across 1 port (465). | Evidence: REAPER_TARPIT: IN=eth0 SRC=101.133.147.20 LEN=301 TOS=0x14 PREC=0x00 TTL=50 ID=56689 DF PROTO=TCP SPT=44226 DPT=465 WINDOW=42340 RES=0x00 ACK PSH URGP=0
Port Scan
🇨🇳 Pumilk
SSH brute-force (5 failed logins), auto-banned by fail2ban
Brute-Force SSH
🇭🇰 sandra361
Port scan detected: 17 attempts across 1 port (1521). | Evidence: REAPER_TARPIT: IN=eth0 SRC=101.133.147.20 LEN=45 TOS=0x14 PREC=0x00 TTL=50 ID=2427 DF PROTO=TCP SPT=42816 DPT=1521 WINDOW=42340 RES=0x00 ACK PSH URGP=0
Port Scan
🇭🇰 sandra361
Port scan detected: 18 attempts across 1 port (512). | Evidence: REAPER_TARPIT: IN=eth0 SRC=101.133.147.20 LEN=40 TOS=0x14 PREC=0x00 TTL=50 ID=38795 DF PROTO=TCP SPT=46972 DPT=512 WINDOW=42340 RES=0x00 ACK FIN URGP=0
Port Scan
🇭🇰 sandra361
Port scan detected: 21 attempts across 1 port (587). | Evidence: REAPER_TARPIT: IN=eth0 SRC=101.133.147.20 LEN=301 TOS=0x14 PREC=0x00 TTL=50 ID=56802 DF PROTO=TCP SPT=55828 DPT=587 WINDOW=42340 RES=0x00 ACK PSH URGP=0
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 167.172.136.87
🇺🇸 162.158.155.121
🇮🇳 103.228.78.60
🇷🇺 95.83.20.91
🇫🇷 78.232.7.226
🇳🇱 51.15.119.16
🇳🇱 51.15.91.66
🇭🇰 43.155.27.244
🇰🇷 218.238.5.110
🇫🇷 172.71.232.75
🇩🇪 165.22.31.236
🇫🇷 151.115.144.253
🇵🇱 151.115.87.162
🇵🇱 151.115.50.196
🇰🇷 121.133.167.123
🇲🇾 103.228.59.106
feedback