AbuseIPDB » 47.117.20.164
47.117.20.164 was found in our database!
This IP was reported 625 times. Confidence of Abuse is 100%: ?
| ISP | Aliyun Computing Co., LTD |
|---|---|
| Usage Type | Data Center/Web Hosting/Transit |
| ASN | AS37963 |
| Domain Name | alibabacloud.com |
| Country | 🇨🇳 China |
| City | Shanghai, Shanghai |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 47.117.20.164:
This IP address has been reported a total of 625 times from 172 distinct sources. 47.117.20.164 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇫🇮 nNordic |
Connection attempt blocked by IDS/IPS from 47.117.20.164/32
|
Hacking | ||
| 🇧🇷 ICS Labs |
ICS Labs identified 47.117.20.164 as a malicious indicator from threat intelligence.
|
Hacking | ||
| 🇨🇭 YF |
Pays blacklisté (CN)
|
Brute-Force Web App Attack | ||
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | ||
| 🇺🇸 MPL |
tcp/443 (4 or more attempts)
|
Port Scan | ||
| 🇺🇸 RAP |
2026-05-12 00:00:42 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | ||
| 🇺🇸 MPL |
tcp/2222 (2 or more attempts)
|
Port Scan | ||
| 🇮🇹 Fusty |
|
Port Scan | ||
| 🇺🇸 MPL |
tcp ports: 23,2222 (4 or more attempts)
|
Port Scan | ||
| 🇨🇿 Countryman |
repeated unauthorized connection attempts, host sweep, port 23
|
Hacking Brute-Force | ||
| 🇺🇸 RAP |
2026-05-11 19:46:23 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | ||
| 🇺🇸 MPL |
tcp ports: 2375,2222 (6 or more attempts)
|
Port Scan | ||
| 🇳🇱 VMHeaven.io |
Blocked by UFW [2375/tcp]
Source port: 59248
TTL: 42
Packet length: 40
|
Port Scan | ||
| 🇺🇸 natdem.org |
Web: Path traversal (CVE-2021-41773), Shell execution via cgi-bin, Shell execution attempt
|
Web App Attack Hacking | ||
| 🇺🇸 MPL |
tcp/443 (2 or more attempts)
|
Port Scan |
Showing 1 to 15 of 625 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩