JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.94.137.3

47.94.137.3 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 70%: ?

70%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.94.137.3

Whois 47.94.137.3

IP Abuse Reports for 47.94.137.3:

This IP address has been reported a total of 26 times from 16 distinct sources. 47.94.137.3 was first reported on May 6th 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 acadeova	2026-06-11 03:27:26 (16 hours ago)	Blocked by UFW on vps2 [47818/tcp] Source port: 48347 TTL: 242 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW on vps2 [47818/tcp] Source port: 48347 TTL: 242 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 excill	2026-06-11 03:04:53 (16 hours ago)	Honeypot mesh observed 919 attack events in 24h — cowrie/dionaea/heralding/suricata	Port Scan Hacking Brute-Force SSH
🇺🇸 mutebot.net	2026-06-10 18:45:41 (1 day ago)	SRC=47.94.137.3, PROTO=TCP, SPT=57130, DPT=57113 SRC=47.94.137.3, PROTO=TCP, SPT=57130, DPT=4315 SRC ... show more SRC=47.94.137.3, PROTO=TCP, SPT=57130, DPT=57113 SRC=47.94.137.3, PROTO=TCP, SPT=57130, DPT=4315 SRC=47.94.137.3, PROTO=TCP, SPT=57130, DPT=26133 SRC=47.94.137.3, PROTO=TCP, SPT=57130, DPT=29342 SRC=47.94.137.3, PROTO=TCP, SPT=57130, DPT=21046 show less	Port Scan
🇩🇪 anycast_ac	2026-06-09 01:14:06 (2 days ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/88 (generic). Commands captured ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/88 (generic). Commands captured: $ HEAD / HTTP/1.1 show less	DDoS Attack IoT Targeted Brute-Force
🇩🇪 anycast_ac	2026-06-09 00:58:30 (2 days ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/88 (generic). Commands captured ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/88 (generic). Commands captured: $ show less	DDoS Attack IoT Targeted Brute-Force
🇫🇷 masterguru	2026-06-07 08:34:41 (4 days ago)	Port Scan detected from 47.94.137.3 (CN/China/-). 11 hits in the last 25 seconds (0-143)	Port Scan
🇬🇧 PeravixGroup	2026-06-07 03:07:18 (4 days ago)	Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: M ... show more Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Hacking
🇨🇦 polycoda	2026-06-06 06:28:40 (5 days ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan
Anonymous	2026-06-05 19:02:11 (6 days ago)	Blocked by UFW (TCP on 12800) Source port: 46095 TTL: 248 Packet length: 40 TOS: 0x14 This report ( ... show more Blocked by UFW (TCP on 12800) Source port: 46095 TTL: 248 Packet length: 40 TOS: 0x14 This report (for 47.94.137.3) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 mutebot.net	2026-06-01 00:49:52 (1 week ago)	SRC=47.94.137.3, PROTO=TCP, SPT=54984, DPT=59663 SRC=47.94.137.3, PROTO=TCP, SPT=54984, DPT=24668 SR ... show more SRC=47.94.137.3, PROTO=TCP, SPT=54984, DPT=59663 SRC=47.94.137.3, PROTO=TCP, SPT=54984, DPT=24668 SRC=47.94.137.3, PROTO=TCP, SPT=54984, DPT=32708 SRC=47.94.137.3, PROTO=TCP, SPT=54984, DPT=63580 SRC=47.94.137.3, PROTO=TCP, SPT=54984, DPT=12594 show less	Port Scan
🇺🇸 mutebot.net	2026-05-27 12:16:21 (2 weeks ago)	SRC=47.94.137.3, PROTO=TCP, SPT=44175, DPT=35012 SRC=47.94.137.3, PROTO=TCP, SPT=44175, DPT=1394 SRC ... show more SRC=47.94.137.3, PROTO=TCP, SPT=44175, DPT=35012 SRC=47.94.137.3, PROTO=TCP, SPT=44175, DPT=1394 SRC=47.94.137.3, PROTO=TCP, SPT=44175, DPT=51615 SRC=47.94.137.3, PROTO=TCP, SPT=44175, DPT=33807 SRC=47.94.137.3, PROTO=TCP, SPT=44175, DPT=63994 show less	Port Scan
🇩🇪 kingjan1999	2026-05-25 22:20:30 (2 weeks ago)	Blocked by UFW [44201/tcp] \| SPT: 47628 \| TTL: 233 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/s ... show more Blocked by UFW [44201/tcp] \| SPT: 47628 \| TTL: 233 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 acadeova	2026-05-24 05:51:46 (2 weeks ago)	Blocked by UFW on vps2 [40966/tcp] Source port: 41766 TTL: 242 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW on vps2 [40966/tcp] Source port: 41766 TTL: 242 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-22 19:20:50 (2 weeks ago)	Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDI ... show more Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 LockBlock	2026-05-22 00:09:54 (2 weeks ago)	2026-05-22 00:09:54: Port scan detected from 47.94.137.3 on port 22 of racknerd-e7e1a9	Port Scan SSH

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.233.127.72

🇭🇰 165.154.60.76

🇺🇸 162.217.163.187

🇨🇳 123.245.85.50

🇨🇳 115.190.162.240

🇺🇸 162.216.150.102

🇺🇸 147.185.132.13

🇳🇱 103.161.34.59

🇬🇧 35.203.210.191

🇨🇳 14.29.170.54

🇸🇳 196.207.231.155

🇺🇸 192.178.118.210

🇺🇸 191.102.181.196

🇩🇪 134.122.93.100

🇩🇪 104.29.140.55

🇳🇱 64.89.162.107

🇺🇸 23.94.155.87

🇹🇷 5.11.135.25

🇺🇸 3.142.221.114

🇷🇴 2.57.121.25