JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 128.1.47.89

128.1.47.89 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 100%: ?

100%

ISP	UCLOUD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 128.1.47.89

Whois 128.1.47.89

IP Abuse Reports for 128.1.47.89:

This IP address has been reported a total of 57 times from 35 distinct sources. 128.1.47.89 was first reported on September 14th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 security.rdmc.fr	2026-09-17 05:48:52 (1 hour ago)	Port Scan Attack proto:TCP src:57372 dst:631	Port Scan
🇺🇸 MPL	2026-09-17 04:55:26 (2 hours ago)	tcp/9201 (61 or more attempts)	Port Scan
🇺🇸 MPL	2026-09-17 04:45:00 (2 hours ago)	tcp/9201 (16 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-09-17 04:00:31 (3 hours ago)	Blocked by UFW (TCP on 5100) Source port: 45078 TTL: 45 Packet length: 44 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 5100) Source port: 45078 TTL: 45 Packet length: 44 TOS: 0x08 This report (for 128.1.47.89) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-09-17 01:49:54 (5 hours ago)	Blocked by UFW (TCP on 51005) Source port: 54990 TTL: 45 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 51005) Source port: 54990 TTL: 45 Packet length: 44 TOS: 0x08 This report (for 128.1.47.89) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-09-17 01:46:14 (5 hours ago)	2026-09-17T04:46:12.433301+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-17T04:46:12.433301+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:08:00 SRC=128.1.47.89 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=47 ID=0 DF PROTO=TCP SPT=37968 DPT=51005 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-09-17 01:34:49 (5 hours ago)	Blocked by UFW (TCP on 51005) Source port: 58761 TTL: 51 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 51005) Source port: 58761 TTL: 51 Packet length: 44 TOS: 0x00 This report (for 128.1.47.89) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 donarev419	2026-09-17 01:17:16 (5 hours ago)	Connection to port 17000 with data transfer. Data preview:	Port Scan Hacking
🇦🇺 LiftUp Hosting	2026-09-17 01:16:00 (5 hours ago)	Honeypot hit: Unauthorized traffic (257 bytes of payload); 17000 [4] TCP	Port Scan
🇫🇮 6kilowatti	2026-09-17 00:21:33 (6 hours ago)	2026-09-17T03:21:32.600749+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-09-17T03:21:32.600749+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=128.1.47.89 DST=83.148.240.21 LEN=44 TOS=0x00 PREC=0x00 TTL=45 ID=0 DF PROTO=TCP SPT=58810 DPT=14440 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇮 6kilowatti	2026-09-16 23:59:19 (7 hours ago)	2026-09-17T02:59:19.067081+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:f ... show more 2026-09-17T02:59:19.067081+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:fd:74:70:71:9e:08:00 SRC=128.1.47.89 DST=10.0.0.30 LEN=44 TOS=0x00 PREC=0x00 TTL=42 ID=0 DF PROTO=TCP SPT=55492 DPT=14440 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-09-16 23:37:58 (7 hours ago)	Blocked by UFW (TCP on 5222) Source port: 39390 TTL: 45 Packet length: 44 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 5222) Source port: 39390 TTL: 45 Packet length: 44 TOS: 0x08 This report (for 128.1.47.89) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Tanados	2026-09-16 22:37:16 (8 hours ago)	Blocked by UFW [51002/tcp] Source port: 48371 TTL: 41 Packet length: 44 TOS: 0x00 This report was g ... show more Blocked by UFW [51002/tcp] Source port: 48371 TTL: 41 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 NetVexor	2026-09-16 22:03:05 (8 hours ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
🇺🇸 xmission.com	2026-09-16 21:18:20 (9 hours ago)	Blocked by UFW (TCP on 7778) Source port: 33208 TTL: 45 Packet length: 44 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 7778) Source port: 33208 TTL: 45 Packet length: 44 TOS: 0x08 This report (for 128.1.47.89) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 188.240.59.31

🇰🇿 185.78.233.42

🇺🇸 65.49.1.181

🇸🇬 47.236.233.179

🇵🇭 47.80.68.74

🇻🇳 2402:800:6341:c2a:ad41:5f0d:f529:a908

🇰🇷 220.124.230.188

🇺🇸 206.189.201.7

🇱🇹 194.165.16.166

🇻🇪 190.120.254.132

🇸🇬 188.166.241.224

🇷🇺 188.43.28.193

🇦🇷 186.38.26.5

🇺🇸 174.198.200.118

🇺🇸 173.15.22.211

🇺🇸 162.216.150.183

🇮🇳 157.119.116.10

🇳🇱 152.42.143.147

🇺🇸 147.185.132.60

🇺🇸 129.153.115.59