JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.237.125.20

47.237.125.20 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 30%: ?

30%

ISP	Alibaba Cloud LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibaba-inc.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.237.125.20

Whois 47.237.125.20

IP Abuse Reports for 47.237.125.20:

This IP address has been reported a total of 5 times from 4 distinct sources. 47.237.125.20 was first reported on June 30th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇰 sandra361	2026-07-05 16:59:23 (1 day ago)	Port scan detected: 5 attempts across 2 ports (3520,8194). \| Evidence: GHOST_SCAN: IN=eth0 SRC=47.23 ... show more Port scan detected: 5 attempts across 2 ports (3520,8194). \| Evidence: GHOST_SCAN: IN=eth0 SRC=47.237.125.20 LEN=60 TOS=0x14 PREC=0x00 TTL=56 ID=29244 DF PROTO=TCP SPT=55800 DPT=8194 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇬🇧 gbzret4d	2026-07-04 03:33:50 (2 days ago)	Honeypot [uk-production01]: Unauthorized traffic (259 bytes of payload); 2048 [12], 5357 [12], 3075 ... show more Honeypot [uk-production01]: Unauthorized traffic (259 bytes of payload); 2048 [12], 5357 [12], 3075 [11], 9653 [9], 9191 [9] TCP show less	Port Scan
🇺🇸 mc4bbs	2026-07-03 12:15:02 (3 days ago)	ChazTelPlex Asterisk: Unauthorized AccountID probe. Log: [2026-07-03 08:04:45] SECURITY[3226] res_se ... show more ChazTelPlex Asterisk: Unauthorized AccountID probe. Log: [2026-07-03 08:04:45] SECURITY[3226] res_security_log.c: SecurityEvent="ChallengeSent",EventTV="2026-07-03T08:04:45.876-0400",Severity="Informational",Service="SIP",EventVersion="1",AccountID="1000",SessionID="0x7fcb10042b70",LocalAddress="IPV4/UDP/108.54.115.236/5060",RemoteAddress="IPV4/UDP/47.237.125.20/32423",Challenge="6ff64a4d" show less	Fraud VoIP Brute-Force
Anonymous	2026-07-01 08:45:55 (5 days ago)	Honeypot hit: Unauthorized traffic (259 bytes of payload); 6667 [2], 12000 [1], 5678 [1], 6801 [1], ... show more Honeypot hit: Unauthorized traffic (259 bytes of payload); 6667 [2], 12000 [1], 5678 [1], 6801 [1], 30005 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 sandra361	2026-06-30 08:06:44 (6 days ago)	Port scan detected: 11 attempts across 4 ports (26,50000,8092,992). \| Evidence: GHOST_SCAN: IN=enp1s ... show more Port scan detected: 11 attempts across 4 ports (26,50000,8092,992). \| Evidence: GHOST_SCAN: IN=enp1s0 SRC=47.237.125.20 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=34975 DF PROTO=TCP SPT=39744 DPT=50000 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 101.201.67.225

🇺🇸 2a06:98c0:3600::103

🇧🇷 205.210.31.229

🇺🇸 100.29.192.37

🇺🇸 73.73.169.124

🇺🇸 44.78.3.31

🇺🇸 44.34.5.239

🇺🇸 192.3.251.33

🇮🇩 163.7.8.79

🇸🇬 129.212.237.228

🇺🇸 75.1.210.218

🇷🇺 217.150.37.249

🇳🇱 204.76.203.231

🇬🇧 193.32.209.226

🇺🇸 172.236.123.208

🇫🇷 161.97.184.39

🇮🇳 119.18.55.118

🇺🇸 104.243.35.45

🇳🇱 45.148.10.200

🇳🇱 45.148.10.157