JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.94.164.194

47.94.164.194 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 61%: ?

61%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.94.164.194

Whois 47.94.164.194

IP Abuse Reports for 47.94.164.194:

This IP address has been reported a total of 43 times from 34 distinct sources. 47.94.164.194 was first reported on May 6th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 neron	2026-08-25 23:21:50 (1 day ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 Floofie	2026-08-21 15:31:28 (6 days ago)	47.94.164.194 - - [21/Aug/2026:11:31:24 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ... show more 47.94.164.194 - - [21/Aug/2026:11:31:24 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36" 47.94.164.194 - - [21/Aug/2026:11:31:26 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36" 47.94.164.194 - - [21/Aug/2026:11:31:27 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 baltic-lab.com	2026-08-21 11:00:13 (6 days ago)	2026-08-21T12:57:44.591837+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-08-21T12:57:44.591837+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.94.164.194 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=13853 PROTO=TCP SPT=49862 DPT=5060 WINDOW=1024 RES=0x00 SYN URGP=0 2026-08-21T12:58:03.409337+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.94.164.194 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=7310 PROTO=TCP SPT=49862 DPT=2022 WINDOW=1024 RES=0x00 SYN URGP=0 2026-08-21T12:58:53.761602+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.94.164.194 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=56111 PROTO=TCP SPT=49862 DPT=14430 WINDOW=1024 RES=0x00 SYN URGP=0 2026-08-21T12:59:03.402419+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.94.164.194 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=14167 PROTO=TCP SPT=49862 DPT=2095 WINDOW=10 ... show less	Brute-Force Hacking
Anonymous	2026-08-21 08:54:46 (6 days ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 VentryShield	2026-08-17 10:59:07 (1 week ago)	p0t honeypot: unknown connection on port 1066/tcp, 517 bytes received from client	Port Scan
🇹🇷 neron	2026-08-17 09:23:12 (1 week ago)	CrowdSec blocked: tcp:scan detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 drewf.ink	2026-08-16 05:33:12 (1 week ago)	[05:33] Port scanning. Port(s) scanned: TCP/800	Port Scan
Anonymous	2026-08-14 10:08:58 (1 week ago)	Blocked by firewall on hugin [8787/tcp] \| Rule: UFW \| SPT: 42134 \| TTL: 232 \| LEN: 40 \| TOS: 0x00 • ... show more Blocked by firewall on hugin [8787/tcp] \| Rule: UFW \| SPT: 42134 \| TTL: 232 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 mattk	2026-08-09 13:42:11 (2 weeks ago)	port scan	Port Scan
Anonymous	2026-08-05 19:51:54 (3 weeks ago)	Aug 5 15:51:51 localhost kernel: [114304699.993834] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Aug 5 15:51:51 localhost kernel: [114304699.993834] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.94.164.194 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=7914 PROTO=TCP SPT=59510 DPT=61888 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 5 15:51:51 localhost kernel: [114304699.993860] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.94.164.194 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=7914 PROTO=TCP SPT=59510 DPT=61888 SEQ=3311505236 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 5 15:51:53 localhost kernel: [114304702.216236] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.94.164.194 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=230 ID=6718 PROTO=TCP SPT=59510 DPT=5461 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 5 15:51:53 localhost kernel: [114304702.216251] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.94.164.194 DST=[mungedIP2] LEN=40 TOS=0x show less	Port Scan
🇩🇪 R.G.	2026-08-01 13:10:46 (3 weeks ago)	Port Scan detected from 47.94.164.194 (CN/China/-). 11 hits in the last 260 seconds; Ports: ; Dir ... show more Port Scan* detected from 47.94.164.194 (CN/China/-). 11 hits in the last 260 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Aug 1 15:10:12 kernel: Firewall: TCP_IN Blocked* IN=enp0s31f6 OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=47.94.164.194 DST=0.X.X.X show less	Port Scan
🇸🇬 heyzg	2026-07-31 16:04:45 (3 weeks ago)	HTTP Defense Evasion (observed): 3 cmds, 4 HTTP, 22s; attempted command obfuscation	Hacking SSH
🇺🇸 schematics.cc	2026-07-24 05:08:02 (1 month ago)	Blocked by on honeypot2 [1514/tcp] \| SPT: 49498 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: abus ... show more Blocked by on honeypot2 [1514/tcp] \| SPT: 49498 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan
🇩🇪 rh24	2026-07-18 02:25:33 (1 month ago)	Port Scan detected from 47.94.164.194 (CN/China/-).	Port Scan
🇬🇧 pearbright	2026-07-12 00:58:54 (1 month ago)	2026-07-12T00:58:00.430944+00:00 srv1093252 kernel: [4563852.389107] [UFW BLOCK] IN=eth0 OUT= MAC=28 ... show more 2026-07-12T00:58:00.430944+00:00 srv1093252 kernel: [4563852.389107] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=47.94.164.194 DST=72.61.19.109 LEN=28 TOS=0x08 PREC=0x20 TTL=13 ID=30279 PROTO=UDP SPT=61268 DPT=6881 LEN=8 2026-07-12T00:58:03.603498+00:00 srv1093252 kernel: [4563855.561214] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=47.94.164.194 DST=72.61.19.109 LEN=28 TOS=0x08 PREC=0x20 TTL=14 ID=35503 PROTO=UDP SPT=61270 DPT=6881 LEN=8 2026-07-12T00:58:07.176052+00:00 srv1093252 kernel: [4563859.133941] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=47.94.164.194 DST=72.61.19.109 LEN=28 TOS=0x08 PREC=0x20 TTL=18 ID=19420 PROTO=UDP SPT=61268 DPT=6060 LEN=8 2026-07-12T00:58:09.648255+00:00 srv1093252 kernel: [4563861.606034] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=47.94.164.194 DST=72.61.19.109 LEN=28 TOS=0x08 PREC=0x20 TTL=9 ID=61417 PROTO=UDP SPT=61270 DPT=6 ... show less	Port Scan

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.90.244.19

🇨🇳 203.110.233.225

🇹🇳 197.244.207.114

🇺🇸 162.216.149.24

🇺🇸 143.42.1.71

🇨🇳 117.14.157.240

🇹🇷 78.177.136.20

🇩🇪 213.209.159.15

🇷🇴 193.46.255.86

🇷🇺 178.69.53.171

🇺🇸 162.216.150.94

🇺🇸 162.216.149.237

🇨🇳 116.179.37.139

🇺🇸 107.150.98.252

🇵🇱 104.165.13.9

🇺🇸 104.143.77.9

🇮🇹 93.51.226.115

🇳🇱 77.239.124.243

🇨🇭 34.65.85.12

🇨🇦 2600:1f11:961:1601:ed64:c990:6bf8:d40a