JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.95.200.211

47.95.200.211 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 72%: ?

72%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.95.200.211

Whois 47.95.200.211

IP Abuse Reports for 47.95.200.211:

This IP address has been reported a total of 20 times from 16 distinct sources. 47.95.200.211 was first reported on May 8th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 SysAdmin Dylan	2026-06-06 16:40:50 (1 hour ago)	Port Scan detected from 47.95.200.211 (CN/China/-). 11 hits in the last 70 seconds	Brute-Force
🇫🇷 masterguru	2026-06-06 07:58:50 (9 hours ago)	Port Scan detected from 47.95.200.211 (-). 11 hits in the last 35 seconds (0-143)	Port Scan
🇩🇪 guldkage	2026-06-05 16:36:47 (1 day ago)	Unauthorized connection attempt detected from IP address 47.95.200.211 to port 23 (ger-02) [TELNET]	Exploited Host
🇩🇪 kingjan1999	2026-06-01 03:04:23 (5 days ago)	Blocked by UFW [4020/tcp] \| SPT: 43028 \| TTL: 232 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/se ... show more Blocked by UFW [4020/tcp] \| SPT: 43028 \| TTL: 232 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 _ArminS_	2026-05-30 22:02:42 (6 days ago)	SP-Scan 58561:39209 detected 2026.05.31 00:02:42 blocked until 2026.07.19 17:05:29	Port Scan
Anonymous	2026-05-30 17:43:28 (1 week ago)	May 30 13:43:27 localhost kernel: [108508329.995684] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more May 30 13:43:27 localhost kernel: [108508329.995684] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.95.200.211 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=51097 PROTO=TCP SPT=43005 DPT=16977 WINDOW=1024 RES=0x00 SYN URGP=0 May 30 13:43:27 localhost kernel: [108508329.995702] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.95.200.211 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=51097 PROTO=TCP SPT=43005 DPT=16977 SEQ=2074076598 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 May 30 13:43:28 localhost kernel: [108508330.208605] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.95.200.211 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=50442 PROTO=TCP SPT=43005 DPT=33776 WINDOW=1024 RES=0x00 SYN URGP=0 May 30 13:43:28 localhost kernel: [108508330.208633] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.95.200.211 DST=[mungedIP2] LEN=40 TO show less	Port Scan
🇨🇭 ScanThe.Net	2026-05-29 12:03:13 (1 week ago)	ID: 3658622646 \| PORT: 12741 \| https://47-95-200-211.scanthe.net	Port Scan
🇫🇷 Petre 21_ip	2026-05-28 21:31:34 (1 week ago)	2026-05-28T23:31:33.488159+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-05-28T23:31:33.488159+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=47.95.200.211 DST=155.133.26.57 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=44773 PROTO=TCP SPT=43891 DPT=33899 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 baltic-lab.com	2026-05-26 16:20:18 (1 week ago)	2026-05-26T18:19:46.952239+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-05-26T18:19:46.952239+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.95.200.211 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=56844 PROTO=TCP SPT=52383 DPT=39927 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-26T18:19:51.070648+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.95.200.211 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=50686 PROTO=TCP SPT=52383 DPT=40956 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-26T18:20:04.788933+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.95.200.211 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=26862 PROTO=TCP SPT=52383 DPT=52326 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-26T18:20:04.790330+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.95.200.211 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=61679 PROTO=TCP SPT=52383 DPT=25756 WINDO ... show less	Brute-Force Hacking
🇫🇷 ISPLtd	2026-05-25 09:04:01 (1 week ago)	May 25 06:03:59 47.95.200.211 TCP SPT=59837 DPT=14156 SYN May 25 06:04:00 47.95.200.211 TCP SPT=5983 ... show more May 25 06:03:59 47.95.200.211 TCP SPT=59837 DPT=14156 SYN May 25 06:04:00 47.95.200.211 TCP SPT=59837 DPT=43657 SYN May 25 06:04:00 47.95.200.211 TCP SPT=59837 DPT=33141 ... show less	Port Scan
🇺🇸 ISPLtd	2026-05-25 01:07:30 (1 week ago)	May 24 22:07:26 47.95.200.211 TCP SPT=51245 DPT=62221 SYN May 24 22:07:29 47.95.200.211 TCP SPT=5124 ... show more May 24 22:07:26 47.95.200.211 TCP SPT=51245 DPT=62221 SYN May 24 22:07:29 47.95.200.211 TCP SPT=51245 DPT=33029 SYN May 24 22:07:29 47.95.200.211 TCP SPT=51245 DPT=43375 ... show less	Port Scan
🇨🇳 ThreatBook.io	2026-05-18 22:30:34 (2 weeks ago)	ThreatBook Intelligence: FTP Brute Force,IDC more details on https://threatbook.io/ip/47.95.200.211 ... show more ThreatBook Intelligence: FTP Brute Force,IDC more details on https://threatbook.io/ip/47.95.200.211 2026-05-18 07:08:16 / 2026-05-18 07:08:16 /favicon.ico show less	SSH
🇺🇸 mutebot.net	2026-05-18 16:50:14 (2 weeks ago)	SRC=47.95.200.211, PROTO=TCP, SPT=43003, DPT=35624 SRC=47.95.200.211, PROTO=TCP, SPT=43003, DPT=4619 ... show more SRC=47.95.200.211, PROTO=TCP, SPT=43003, DPT=35624 SRC=47.95.200.211, PROTO=TCP, SPT=43003, DPT=46196 SRC=47.95.200.211, PROTO=TCP, SPT=43003, DPT=22813 SRC=47.95.200.211, PROTO=TCP, SPT=43003, DPT=44034 SRC=47.95.200.211, PROTO=TCP, SPT=43003, DPT=40385 show less	Port Scan
🇨🇳 ThreatBook.io	2026-05-17 22:34:33 (2 weeks ago)	ThreatBook Intelligence: FTP Brute Force,IDC more details on https://threatbook.io/ip/47.95.200.211 ... show more ThreatBook Intelligence: FTP Brute Force,IDC more details on https://threatbook.io/ip/47.95.200.211 2026-05-17 06:49:38 / 2026-05-17 06:49:38 /favicon.ico show less	Web App Attack
🇺🇸 sandra361	2026-05-15 01:07:01 (3 weeks ago)	Port scan detected: 9 attempts across 9 ports (10098,11180,2017,28600,40001,49190,5011,6389,8180). \| ... show more Port scan detected: 9 attempts across 9 ports (10098,11180,2017,28600,40001,49190,5011,6389,8180). \| Evidence: GHOST_SCAN:IN=enp1s0 OUT= SRC=47.95.200.211 LEN=40 TOS=0x00 PREC=0x00 TTL=227 ID=27158 PROTO=TCP SPT=47206 DPT=5011 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:fb54:9a8::

🇪🇬 197.63.244.172

🇪🇨 190.95.248.98

🇺🇸 108.178.7.34

🇧🇩 103.213.238.91

🇬🇧 84.70.69.230

🇧🇷 45.205.1.73

🇬🇧 2a06:4880:6000::8c

🇺🇸 2607:f8b0:4001:c61::12a

🇮🇳 203.145.143.163

🇺🇸 135.237.123.254

🇺🇸 107.150.106.156

🇩🇪 62.54.176.203

🇳🇱 45.148.10.152

🇹🇭 1.1.145.149

🇰🇷 218.156.93.206

🇰🇷 218.150.184.241

🇨🇳 180.100.198.68

🇰🇷 112.219.151.50

🇺🇸 100.28.118.16