47.237.196.0
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Alibaba Cloud LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS45102
- Domain Name
- alibaba-inc.com
- Country
- 🇸🇬 Singapore
- City
- Singapore
Abuse Reports
Total reports
134 from
42 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-10-23 08:10, Last: 2026-10-29 08:21 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-10-16 15:46, Last: 2026-10-20 19:36 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-09-29 18:52, Last: 2026-10-11 09:53 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-09-09 19:47, Last: 2026-09-24 10:15 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-08-20 06:38, Last: 2026-09-04 06:43 UTC. Triggers: unknown.
|
Port Scan | |
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=96, sources=1)
|
Hacking Brute-Force SSH | |
| 🇺🇸 micropedro |
4 incidents: malicious activity. First: 2026-06-18 23:30, Last: 2026-06-26 00:31 UTC. Triggers: ufw-repeater.
|
Port Scan | |
| 🇺🇸 micropedro |
6 incidents: malicious activity. First: 2026-05-21 19:43, Last: 2026-06-26 00:30 UTC. Triggers: ufw-repeater.
|
Port Scan | |
| 🇺🇸 micropedro |
10 incidents: port scanning. First: 2026-04-14 23:06, Last: 2026-06-11 22:32 UTC. Triggers: firewall-tcp,non-public-port,ufw-repeater,ufw-repeater.
|
Port Scan | |
| 🇫🇮 nNordic |
Connection attempt blocked by IDS/IPS from 47.237.196.0/32
|
Hacking | |
| 🇷🇺 Agrohim |
Gate B blocked for categories:
|
DDoS Attack Ping of Death Port Scan Hacking Brute-Force | |
| 🇺🇸 withfallback.com |
sends \r\n\r\n and waits; probably looking for telnet
|
Port Scan | |
| 🇺🇸 MPL |
tcp/5022 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/4981
|
Port Scan | |
| 🇳🇱 StopAbuse |
tcp/4172
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown