JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.92.172.212

47.92.172.212 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 71%: ?

71%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.92.172.212

Whois 47.92.172.212

IP Abuse Reports for 47.92.172.212:

This IP address has been reported a total of 31 times from 22 distinct sources. 47.92.172.212 was first reported on May 8th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 _ArminS_	2026-07-09 11:11:24 (18 hours ago)	SP-Scan 55484:9316 detected 2026.07.09 13:11:24 blocked until 2026.08.28 06:14:11	Port Scan
🇫🇷 Fasetech	2026-07-08 12:01:40 (1 day ago)	SecLedge detected suspicious activity. Score: 865.8. Sensor: T-Pot.	Brute-Force Web App Attack
Anonymous	2026-07-08 08:21:12 (1 day ago)	fail2ban:piguard:14,18	Port Scan Brute-Force
🇳🇱 GabrielJST	2026-07-08 05:36:41 (1 day ago)	Port Scan detected from 47.92.172.212 (CN/China/-).	Port Scan
Anonymous	2026-07-08 01:57:59 (2 days ago)	Port Scan detected from 47.92.172.212 (CN/China/-). 16 hits in the last 100 seconds	Web App Attack
Anonymous	2026-07-07 22:37:39 (2 days ago)	Jul 7 18:37:35 localhost kernel: [111809101.990180] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jul 7 18:37:35 localhost kernel: [111809101.990180] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.92.172.212 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=230 ID=12306 PROTO=TCP SPT=43854 DPT=7131 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 7 18:37:35 localhost kernel: [111809101.990202] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.92.172.212 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=230 ID=12306 PROTO=TCP SPT=43854 DPT=7131 SEQ=1505119159 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 7 18:37:39 localhost kernel: [111809105.284559] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.92.172.212 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=230 ID=22647 PROTO=TCP SPT=43854 DPT=5510 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 7 18:37:39 localhost kernel: [111809105.284570] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.92.172.212 DST=[mungedIP2] LEN=40 TOS=0 show less	Port Scan
🇺🇸 masterguru	2026-07-07 04:50:38 (3 days ago)	Port Scan detected from 47.92.172.212 (CN/China/-). 11 hits in the last 11 seconds (0-165)	Port Scan
🇺🇸 shaunc	2026-06-26 00:59:16 (2 weeks ago)	Jun 25 19:55:30 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC= ... show more Jun 25 19:55:30 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC=47.92.172.212 DST=[redacted] LEN=40 TOS=0x00 PREC=0xA0 TTL=236 ID=41678 PROTO=TCP SPT=55034 DPT=27017 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 25 19:59:09 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC=47.92.172.212 DST=[redacted] LEN=40 TOS=0x00 PREC=0xA0 TTL=236 ID=60669 PROTO=TCP SPT=55034 DPT=3306 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 25 19:59:13 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC=47.92.172.212 DST=[redacted] LEN=40 TOS=0x00 PREC=0xA0 TTL=236 ID=17787 PROTO=TCP SPT=55034 DPT=111 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇹🇷 Squearex	2026-06-21 16:22:20 (2 weeks ago)	Automated ban by SCUMUnified Shield. Honeypot Trap Triggered (Decoy Port 27017)	Brute-Force SSH
🇬🇧 PeravixGroup	2026-06-21 01:55:56 (2 weeks ago)	Honeypot detection: RTSP streaming server scanning / unauthorized access attempt on port 554. Severi ... show more Honeypot detection: RTSP streaming server scanning / unauthorized access attempt on port 554. Severity: LOW. Aaran.cloud show less	Port Scan
🇫🇷 Fasetech	2026-06-19 07:09:25 (2 weeks ago)	SecLedge detected suspicious activity. Score: 865.8. Sensor: T-Pot.	Brute-Force Web App Attack
🇫🇷 Fasetech	2026-06-17 12:15:31 (3 weeks ago)	SecLedge detected suspicious activity. Score: 865.8. Sensor: T-Pot.	Brute-Force Web App Attack
🇩🇪 baltic-lab.com	2026-06-14 23:57:34 (3 weeks ago)	Firewall Detection, DE2, Either a port scan or continued brute-force attack by a previously blocked ... show more Firewall Detection, DE2, Either a port scan or continued brute-force attack by a previously blocked offender ... show less	Brute-Force Port Scan
🇺🇸 baltic-lab.com	2026-06-13 13:05:07 (3 weeks ago)	2026-06-13T15:02:41.409424+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-06-13T15:02:41.409424+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.92.172.212 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=240 ID=61812 PROTO=TCP SPT=55760 DPT=44736 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-13T15:02:41.576885+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.92.172.212 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=240 ID=30834 PROTO=TCP SPT=55760 DPT=49870 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-13T15:02:57.935834+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.92.172.212 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=240 ID=6657 PROTO=TCP SPT=55760 DPT=46176 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-13T15:03:17.664939+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.92.172.212 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=240 ID=39913 PROTO=TCP SPT=55760 DPT=26732 WINDOW ... show less	Brute-Force Hacking
🇺🇸 ISPLtd	2026-06-10 22:06:36 (4 weeks ago)	Jun 10 16:06:30 47.92.172.212 TCP SPT=49189 DPT=26759 SYN Jun 10 16:06:32 47.92.172.212 TCP SPT=4918 ... show more Jun 10 16:06:30 47.92.172.212 TCP SPT=49189 DPT=26759 SYN Jun 10 16:06:32 47.92.172.212 TCP SPT=49189 DPT=57065 SYN Jun 10 16:06:35 47.92.172.212 TCP SPT=49189 DPT=32340 ... show less	Port Scan

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.251.19.83

🇬🇧 158.220.83.77

🇬🇵 193.251.162.57

🇺🇸 162.216.150.92

🇫🇮 147.185.133.10

🇮🇳 124.253.116.100

🇳🇱 93.174.95.106

🇳🇱 91.92.40.124

🇰🇷 61.72.55.130

🇩🇪 47.254.183.43

🇳🇱 45.148.10.141

🇧🇪 34.62.189.46

🇬🇧 31.14.254.41

🇺🇸 2607:f8b0:4004:c07::127

🇺🇸 195.184.76.201

🇸🇬 152.42.164.200

🇱🇰 111.223.167.112

🇩🇪 64.226.126.224

🇰🇪 41.89.96.242

🇬🇧 37.10.113.214