JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.47.238.50

195.47.238.50 was found in our database!

This IP was reported 181 times. Confidence of Abuse is 100%: ?

100%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Information: Most of this subnet is used for tor-exit related services.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS30893
Domain Name	noackhosting.se
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.47.238.50

Whois 195.47.238.50

IP Abuse Reports for 195.47.238.50:

This IP address has been reported a total of 181 times from 84 distinct sources. 195.47.238.50 was first reported on December 23rd 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 gnom4ik	2026-06-21 11:52:44 (1 day ago)	ban-reviewer auto report; ip=195.47.238.50; scenario=ssh:bruteforce; scenario_context=ssh:bruteforce ... show more ban-reviewer auto report; ip=195.47.238.50; scenario=ssh:bruteforce; scenario_context=ssh:bruteforce,tor-exit-nodes; verdict=valid_ban; confidence=0.92; categories=18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high show less	Brute-Force SSH
Anonymous	2026-06-20 07:22:03 (2 days ago)	Bot / scanning and/or hacking attempts: [1/1] done, GET /xmlrpc.php?rsd HTTP/2.0, GET /wp-json/oembe ... show more Bot / scanning and/or hacking attempts: [1/1] done, GET /xmlrpc.php?rsd HTTP/2.0, GET /wp-json/oembed/1.0/embed?url=https%3A%2F%2Fvandermey.nl%2F, GET /xmlrpc.php HTTP/2.0 show less	Hacking Web App Attack
🇺🇸 xmission.com	2026-06-20 02:38:19 (2 days ago)	Blocked by UFW (TCP on 49919) Source port: 20954 TTL: 36 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 49919) Source port: 20954 TTL: 36 Packet length: 60 TOS: 0x08 This report (for 195.47.238.50) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-19 14:05:10 (3 days ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇩🇪 bryth	2026-06-19 07:00:54 (3 days ago)	Wordpress login/xmlrpc abuse (Fri Jun 19 06:43:44 AM UTC 2026)	Hacking Web App Attack
🇩🇪 LRob.fr	2026-06-16 10:30:08 (6 days ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇬🇧 gaztronics	2026-06-14 06:44:06 (1 week ago)	2026-06-14T06:44:03.903755 liberator sendmail[1629472]: 65E6i3A31629472: [195.47.238.50] did not iss ... show more 2026-06-14T06:44:03.903755 liberator sendmail[1629472]: 65E6i3A31629472: [195.47.238.50] did not issue MAIL/EXPN/VRFY/ETRN during connection to TLSMTA ... show less	Brute-Force
🇬🇧 andypiper	2026-06-09 01:02:03 (1 week ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 mnsf	2026-06-09 00:12:36 (1 week ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇺🇸 ANTI SCANNER	2026-06-08 16:19:55 (2 weeks ago)	Scanner : /administrator/	Web Spam
🇺🇸 TPI-Abuse	2026-06-07 19:30:15 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 195.47.238.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 195.47.238.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 15:30:10.597322 2026] [security2:error] [pid 12002:tid 12002] [client 195.47.238.50:24450] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|digitview.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "digitview.com"] [uri "/leonikopilevi.com"] [unique_id "aiXGwt7mnA-3rRZ-1wgSJwAAABA"], referer: http://digitview.com/leonikopilevi.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2026-06-07 19:19:00 (2 weeks ago)	(From [email protected]) go01yu	Phishing Web Spam
🇩🇪 Sparxx	2026-06-07 11:25:46 (2 weeks ago)	2026-06-07T13:25:38.203391+02:00 srv postfix/submissions/smtpd[1820036]: warning: unknown[195.47.238 ... show more 2026-06-07T13:25:38.203391+02:00 srv postfix/submissions/smtpd[1820036]: warning: unknown[195.47.238.50]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-06-07T13:25:45.803482+02:00 srv postfix/submissions/smtpd[1820036]: lost connection after AUTH from unknown[195.47.238.50] 2026-06-07T13:25:45.803684+02:00 srv postfix/submissions/smtpd[1820036]: disconnect from unknown[195.47.238.50] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force
🇨🇿 Countryman	2026-06-06 00:10:01 (2 weeks ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
Anonymous	2026-06-05 22:15:19 (2 weeks ago)	2026-06-06T01:45:00.908019+03:30 digitalogic sshd-session[767802]: pam_unix(sshd:auth): authenticati ... show more 2026-06-06T01:45:00.908019+03:30 digitalogic sshd-session[767802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.47.238.50 2026-06-06T01:45:02.666326+03:30 digitalogic sshd-session[767802]: Failed password for invalid user 1 from 195.47.238.50 port 23754 ssh2 2026-06-06T01:45:15.024928+03:30 digitalogic sshd-session[767802]: Connection closed by invalid user 1 195.47.238.50 port 23754 [preauth] ... show less	Brute-Force SSH

Showing 1 to 15 of 181 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇷 85.198.19.241

🇨🇳 219.151.182.56

🇷🇴 193.32.162.84

🇺🇸 162.216.150.32

🇨🇳 153.0.82.52

🇨🇳 123.245.84.47

🇨🇳 116.172.251.92

🇨🇳 103.236.95.60

🇫🇷 86.110.51.41

🇳🇱 204.76.203.231

🇬🇧 195.96.139.154

🇷🇴 193.46.255.86

🇧🇷 187.50.226.182

🇨🇳 180.137.151.93

🇳🇱 176.65.149.224

🇨🇳 175.162.241.102

🇸🇬 172.188.89.41

🇺🇸 147.185.132.30

🇨🇳 113.77.238.32

🇺🇸 104.234.32.56