JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.92.213.152

47.92.213.152

Recent Activity

60 reports found in our database

68% ▲ ▲ ▲ Elevated

Abuse confidence score ?

ISP

Aliyun Computing Co., LTD

Usage Type

Data Center/Web Hosting/Transit

ASN

AS37963

Domain Name

alibabacloud.com

Country

🇨🇳 China

City

Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 47.92.213.152:

This IP address has been reported a total of 60 times from 35 distinct sources. 47.92.213.152 was first reported on May 8th 2026, and the most recent report was 11 hours ago. In the last 60 days, the top reporter locations were: Germany with 7 reports; Turkey with 7 reports; United States of America with 5 reports. The most common categories in these recent reports were: Port Scan 19 times; Hacking 10 times; Web App Attack 6 times; Brute-Force 6 times; Email Spam 2 times; Other 5 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-11 15:48:52 (11 hours ago)	2026-09-11T15:48:46.231951+00:00 nbg01-02-mail postfix/smtps/smtpd[400622]: lost connection after CO ... show more 2026-09-11T15:48:46.231951+00:00 nbg01-02-mail postfix/smtps/smtpd[400622]: lost connection after CONNECT from unknown[47.92.213.152] 2026-09-11T15:48:51.350332+00:00 nbg01-02-mail postfix/submission/smtpd[400624]: lost connection after CONNECT from unknown[47.92.213.152] 2026-09-11T15:48:51.452589+00:00 nbg01-02-mail postfix/submission/smtpd[400624]: lost connection after CONNECT from unknown[47.92.213.152] ... show less	Brute-Force
🇹🇼 taiwanfrp.me	2026-09-11 15:41:36 (12 hours ago)	taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=1, targets10m=1, targ ... show more taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=1, targets10m=1, target=proxy:kiwicanary.MinecraftJavaj7zwefweewfwefew\|port:- show less	Port Scan Hacking
🇩🇪 R.G.	2026-09-09 23:12:02 (2 days ago)	Port Scan detected from 47.92.213.152 (CN/China/-). 11 hits in the last 115 seconds; Ports: ; Dir ... show more Port Scan* detected from 47.92.213.152 (CN/China/-). 11 hits in the last 115 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Sep 10 01:11:44 kernel: Firewall: TCP_IN Blocked* IN=enp5s0 OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=47.92.213.152 DST=0.X.X.X LEN show less	Port Scan
Anonymous	2026-09-09 21:55:55 (2 days ago)	Blocked by UFW (TCP on 5353) Source port: 50946 TTL: 253 Packet length: 40 TOS: 0x14 This report (f ... show more Blocked by UFW (TCP on 5353) Source port: 50946 TTL: 253 Packet length: 40 TOS: 0x14 This report (for 47.92.213.152) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇷 neron	2026-09-08 08:55:32 (3 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇨🇳 Dominicwu	2026-09-07 15:12:46 (4 days ago)	TCP port scan against non-whitelisted ports; whitelist=80,443,23456,33333,33334,39090. Recent hits: ... show more TCP port scan against non-whitelisted ports; whitelist=80,443,23456,33333,33334,39090. Recent hits: dst_port=8340 src_port=53938; dst_port=9896 src_port=53938; dst_port=12503 src_port=53938; dst_port=13464 src_port=53938; dst_port=49999 src_port=53938; dst_port=11816 src_port=53938; dst_port=11391 src_port=53938; dst_port=19031 src_port=53938. show less	Port Scan
🇺🇸 Cherryh4ck	2026-09-05 14:14:19 (6 days ago)	Blocked by UFW [11736/tcp] \| SPT: 57628 \| TTL: 233 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/s ... show more Blocked by UFW [11736/tcp] \| SPT: 57628 \| TTL: 233 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇷 neron	2026-09-04 20:55:32 (1 week ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-08-30 03:02:41 (1 week ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-08-26 23:00:50 (2 weeks ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-08-24 11:21:50 (2 weeks ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 chronos	2026-08-24 06:38:17 (2 weeks ago)	[AUTORAVALT][[24/08/2026 - 03:38:16 -03:00 UTC] Attack from [Asia Pacific Network Information Centre ... show more [AUTORAVALT][[24/08/2026 - 03:38:16 -03:00 UTC] Attack from [Asia Pacific Network Information Centre] [47.92.213.152]-[RANGE:47.92.0.0 - 47.95.255.255] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-08-23 10:04:46 (2 weeks ago)	[AUTORAVALT][[23/08/2026 - 07:04:45 -03:00 UTC] Attack from [47.92.213.152] Action: BLocKed Phishin ... show more [AUTORAVALT][[23/08/2026 - 07:04:45 -03:00 UTC] Attack from [47.92.213.152] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force attacks on webpage lo] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇩🇪 VentryShield	2026-08-22 20:26:25 (2 weeks ago)	p0t honeypot: unknown connection on port 2121/tcp, 517 bytes received from client	Port Scan
🇺🇸 LockBlock	2026-08-21 10:34:21 (3 weeks ago)	2026-08-21 10:34:21: Port scan detected from 47.92.213.152 on port 1080 of racknerd-e7e1a9	Port Scan

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.77

🇬🇧 193.163.125.161

🇺🇸 172.58.252.180

🇺🇸 152.32.205.206

🇩🇪 65.111.28.127

🇺🇸 65.49.1.142

🇳🇱 45.148.10.157

🇺🇸 35.90.93.64

🇺🇸 18.188.83.55

🇬🇧 2a06:4880:2000::36

🇩🇪 194.88.98.88

🇬🇧 193.163.125.127

🇺🇸 164.92.114.247

🇪🇸 162.158.123.50

🇮🇹 151.75.231.77

🇺🇸 136.47.142.149

🇻🇳 123.20.86.179

🇫🇷 91.231.89.94

🇫🇷 85.217.140.33

🇺🇸 76.79.213.70