JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.95.198.252

47.95.198.252 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 60%: ?

60%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.95.198.252

Whois 47.95.198.252

IP Abuse Reports for 47.95.198.252:

This IP address has been reported a total of 39 times from 24 distinct sources. 47.95.198.252 was first reported on May 6th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 GabrielJST	2026-07-15 16:34:56 (1 day ago)	Port Scan detected from 47.95.198.252 (CN/China/-).	Port Scan
🇭🇰 pengpeng	2026-07-15 03:01:41 (2 days ago)	monitor: on ser162528253480 \| port: 50002 \| ttl: 235 script: github.com/sefinek/UFW-AbuseIPDB-Repor ... show more monitor: on ser162528253480 \| port: 50002 \| ttl: 235 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-12 12:49:31 (4 days ago)	2026-07-12T12:49:28.574989+00:00 nbg01-02-mail postfix/submission/smtpd[143274]: lost connection aft ... show more 2026-07-12T12:49:28.574989+00:00 nbg01-02-mail postfix/submission/smtpd[143274]: lost connection after CONNECT from unknown[47.95.198.252] 2026-07-12T12:49:29.747571+00:00 nbg01-02-mail postfix/submission/smtpd[143274]: lost connection after CONNECT from unknown[47.95.198.252] 2026-07-12T12:49:30.088663+00:00 nbg01-02-mail postfix/submission/smtpd[143274]: lost connection after CONNECT from unknown[47.95.198.252] ... show less	Brute-Force
🇺🇸 uchat-ai.com	2026-07-10 15:58:12 (6 days ago)	IP 47.95.198.252 在过去24小时内进行了 2 次攻击。详细信息: 攻击类型: Found User-Agent associated with security scanner, 攻击 ... show more IP 47.95.198.252 在过去24小时内进行了 2 次攻击。详细信息: 攻击类型: Found User-Agent associated with security scanner, 攻击信息: Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: mozilla/5.0 (compatible; nmap scripting engine; https://nmap.org/book/nse.html)"] (Severity: 2); 攻击类型: Found User-Agent associated with security scanner, 攻击信息: Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: mozilla/5.0 (compatible; nmap scripting engine; https://nmap.org/book/nse.html)"] (Severity: 2) show less	Port Scan
🇺🇸 chillcog.com	2026-07-08 16:40:41 (1 week ago)	Blocked by on honeypot2 [63991/tcp] \| SPT: 48835 \| TTL: 236 \| LEN: 40 \| TOS: 0x00 • Reported by: abu ... show more Blocked by on honeypot2 [63991/tcp] \| SPT: 48835 \| TTL: 236 \| LEN: 40 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan
🇩🇪 Honeypot-EU-Fru	2026-07-06 10:30:18 (1 week ago)	1783333818 - 07/06/2026 12:30:18 Host: 47.95.198.252/47.95.198.252 Port: 12346 TCP Blocked ...	Port Scan
🇫🇷 Fasetech	2026-07-03 06:08:11 (2 weeks ago)	SecLedge detected suspicious activity. Score: 114.84. Sensor: T-Pot.	Brute-Force
🇫🇷 masterguru	2026-07-01 05:35:21 (2 weeks ago)	Port Scan detected from 47.95.198.252 (CN/China/-). 11 hits in the last 55 seconds (0-135)	Port Scan
Anonymous	2026-06-16 19:51:46 (1 month ago)	Port Scan detected from 47.95.198.252 (CN/China/-). 16 hits in the last 40 seconds	Web App Attack
Anonymous	2026-06-14 21:37:34 (1 month ago)	Port Scan detected from 47.95.198.252 (CN/China/-). 16 hits in the last 100 seconds	Web App Attack
🇩🇪 Honeypot-EU-Fru	2026-06-13 14:57:05 (1 month ago)	1781362624 - 06/13/2026 16:57:04 Host: 47.95.198.252/47.95.198.252 Port: 2323 TCP Blocked ...	Port Scan
Anonymous	2026-06-11 00:59:49 (1 month ago)	Jun 10 20:59:49 localhost kernel: [109484889.039416] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 10 20:59:49 localhost kernel: [109484889.039416] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.95.198.252 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=51380 PROTO=TCP SPT=59588 DPT=55264 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 10 20:59:49 localhost kernel: [109484889.039438] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.95.198.252 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=51380 PROTO=TCP SPT=59588 DPT=55264 SEQ=2380758826 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇫🇷 Petre 21_ip	2026-06-08 18:43:50 (1 month ago)	2026-06-08T20:43:49.465145+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-06-08T20:43:49.465145+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=47.95.198.252 DST=155.133.26.57 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=57721 PROTO=TCP SPT=44228 DPT=21501 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-06-08 13:11:30 (1 month ago)	Honeypot detection: SIP / VoIP scanning or unauthorized registration attempt on port 5060. Severity: ... show more Honeypot detection: SIP / VoIP scanning or unauthorized registration attempt on port 5060. Severity: LOW. Aaran.cloud show less	Port Scan
🇬🇧 PeravixGroup	2026-06-05 18:04:09 (1 month ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.50

🇷🇺 91.242.236.235

🇸🇪 85.203.44.7

🇭🇰 58.152.42.174

🇬🇧 35.203.211.210

🇲🇽 192.81.249.85

🇲🇩 185.171.68.195

🇱🇧 178.135.16.199

🇺🇸 162.216.149.151

🇳🇱 158.94.211.20

🇮🇳 103.187.102.98

🇮🇳 103.26.225.226

🇹🇷 78.173.32.123

🇺🇸 74.82.47.15

🇺🇸 70.123.235.119

🇹🇼 34.81.72.185

🇺🇸 174.35.25.181

🇻🇳 171.231.181.87

🇦🇷 153.67.181.11

🇺🇸 139.87.112.168