JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.95.192.52

47.95.192.52 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 70%: ?

70%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.95.192.52

Whois 47.95.192.52

IP Abuse Reports for 47.95.192.52:

This IP address has been reported a total of 32 times from 23 distinct sources. 47.95.192.52 was first reported on May 8th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-07-12 09:59:34 (1 day ago)	Port Scan detected from 47.95.192.52 (CN/China/-). 11 hits in the last 25 seconds (0-131)	Port Scan
🇭🇰 sandra361	2026-07-09 14:13:23 (4 days ago)	Port scan detected: 6 attempts across 6 ports (5375,8716,8755,12055,18686,49724). \| Evidence: GHOST_ ... show more Port scan detected: 6 attempts across 6 ports (5375,8716,8755,12055,18686,49724). \| Evidence: GHOST_SCAN: IN=eth0 SRC=47.95.192.52 LEN=40 TOS=0x14 PREC=0x00 TTL=233 ID=12677 PROTO=TCP SPT=46392 DPT=8716 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 kingjan1999	2026-07-08 04:30:01 (5 days ago)	Blocked by UFW [11118/tcp] \| SPT: 44980 \| TTL: 230 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/s ... show more Blocked by UFW [11118/tcp] \| SPT: 44980 \| TTL: 230 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Arpan Sen	2026-07-07 04:58:04 (6 days ago)	Network port/address scan: probed 220 distinct port(s) across 1 host(s); 100% of connections receive ... show more Network port/address scan: probed 220 distinct port(s) across 1 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor. show less	Port Scan
Anonymous	2026-07-06 05:53:51 (1 week ago)	Jul 6 01:53:50 localhost kernel: [111662480.436647] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jul 6 01:53:50 localhost kernel: [111662480.436647] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.95.192.52 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=48231 PROTO=TCP SPT=57229 DPT=59030 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 6 01:53:50 localhost kernel: [111662480.436665] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.95.192.52 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=48231 PROTO=TCP SPT=57229 DPT=59030 SEQ=3526507151 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 6 01:53:50 localhost kernel: [111662480.467061] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.95.192.52 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=13838 PROTO=TCP SPT=57229 DPT=30965 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 VentryShield	2026-07-03 07:14:26 (1 week ago)	p0t honeypot: unknown connection on port 6003/tcp, 517 bytes received from client	Port Scan
🇯🇵 jay hung	2026-07-03 00:16:52 (1 week ago)	2026-07-03T00:16:51.898625+00:00 quarktech kernel: [1682468.856119] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-07-03T00:16:51.898625+00:00 quarktech kernel: [1682468.856119] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=47.95.192.52 DST=172.237.20.248 LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=42846 PROTO=TCP SPT=57811 DPT=8018 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 Starburst SysOp Team	2026-07-02 20:57:17 (1 week ago)	Request Missing a Host Header. Operator EQ matched 0 at REQUEST_HEADERS. (920280-mnz6-7)	Hacking
🇺🇸 sargetun	2026-06-26 21:15:37 (2 weeks ago)	Honeypot: Auto-ban: 24 hour idle after honeypot interaction. Auto-reported from VPS honeypot.	Brute-Force SSH Hacking
🇺🇸 chronos	2026-06-26 08:37:40 (2 weeks ago)	[AUTORAVALT][[26/06/2026 - 05:37:40 -03:00 UTC] Attack from [Asia Pacific Network Information Centre ... show more [AUTORAVALT][[26/06/2026 - 05:37:40 -03:00 UTC] Attack from [Asia Pacific Network Information Centre] [47.95.192.52]-[RANGE:47.92.0.0 - 47.95.255.255] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS ] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇦🇺 dyln	2026-06-26 00:52:13 (2 weeks ago)	Dyls honeypot brute-force: RDP, proto8 (9 total hits)	Brute-Force
🇬🇧 PeravixGroup	2026-06-22 03:27:28 (3 weeks ago)	Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ... show more Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud show less	Brute-Force Hacking
🇬🇧 PeravixGroup	2026-06-20 02:48:20 (3 weeks ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 ISPLtd	2026-06-16 02:25:56 (3 weeks ago)	Jun 15 23:25:53 47.95.192.52 TCP SPT=56752 DPT=37860 SYN Jun 15 23:25:55 47.95.192.52 TCP SPT=56752 ... show more Jun 15 23:25:53 47.95.192.52 TCP SPT=56752 DPT=37860 SYN Jun 15 23:25:55 47.95.192.52 TCP SPT=56752 DPT=50927 SYN Jun 15 23:25:55 47.95.192.52 TCP SPT=56752 DPT=64879 ... show less	Port Scan
Anonymous	2026-06-13 23:04:02 (4 weeks ago)	fail2ban:piguard2:14,18	Port Scan Brute-Force

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 202.165.250.12

🇵🇰 154.57.213.93

🇧🇩 103.73.44.76

🇧🇩 43.245.122.32

🇺🇸 35.223.193.237

🇩🇪 213.209.159.154

🇸🇪 194.99.27.134

🇵🇱 176.53.159.198

🇨🇳 175.170.144.18

🇺🇸 172.191.171.80

🇩🇪 139.162.156.94

🇨🇳 114.103.90.175

🇮🇩 110.92.72.202

🇧🇩 103.190.228.55

🇱🇺 94.252.73.237

🇳🇱 91.92.42.126

🇺🇸 57.151.106.164

🇺🇸 47.251.142.244

🇲🇾 47.250.118.118

🇿🇦 41.123.19.156