JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.95.201.137

47.95.201.137 was found in our database!

This IP was reported 131 times. Confidence of Abuse is 44%: ?

44%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.95.201.137

Whois 47.95.201.137

IP Abuse Reports for 47.95.201.137:

This IP address has been reported a total of 131 times from 80 distinct sources. 47.95.201.137 was first reported on March 16th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇰 PingMeMaybe	2026-07-07 05:12:58 (1 week ago)	Blocked by UFW on hk [3035/tcp] Source port: 41138 TTL: 232 Packet length: 40 TOS: 0x00 This report ... show more Blocked by UFW on hk [3035/tcp] Source port: 41138 TTL: 232 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 mutebot.net	2026-07-01 14:18:57 (1 week ago)	SRC=47.95.201.137, PROTO=TCP, SPT=55507, DPT=19982 SRC=47.95.201.137, PROTO=TCP, SPT=55507, DPT=5000 ... show more SRC=47.95.201.137, PROTO=TCP, SPT=55507, DPT=19982 SRC=47.95.201.137, PROTO=TCP, SPT=55507, DPT=50007 SRC=47.95.201.137, PROTO=TCP, SPT=55507, DPT=31006 SRC=47.95.201.137, PROTO=TCP, SPT=55507, DPT=20090 SRC=47.95.201.137, PROTO=TCP, SPT=55507, DPT=8325 show less	Port Scan
🇫🇷 Fasetech	2026-06-28 11:14:17 (2 weeks ago)	SecLedge detected suspicious activity. Score: 220.8. Sensor: T-Pot.	Brute-Force
🇩🇪 zUnlegit	2026-06-14 23:39:10 (1 month ago)	2026-06-14 23:39:10: Minecraft server scan detected from 47.95.201.137 on port 25565 of mailserver	Port Scan
🇭🇰 sandra361	2026-06-13 01:55:22 (1 month ago)	Port scan detected: 42 attempts across 42 ports (16245,16507,19394,22460,22612,26964,28845,28938,321 ... show more Port scan detected: 42 attempts across 42 ports (16245,16507,19394,22460,22612,26964,28845,28938,32137,32164,34731,35063,36106,36871,38912,42764,42772,42876,44778,46374,46703,47327,4924,49526,50199,50209,51177,5224,53347,53623,53748,53989,55168,56008,56884,57171,57618,60329,64066,64376,64405,794). \| Evidence: GHOST_SCAN: IN=eth0 SRC=47.95.201.137 LEN=40 TOS=0x14 PREC=0x00 TTL=235 ID=39241 PROTO=TCP SPT=55675 DPT=22612 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇳🇱 SysAdmin Dylan	2026-06-11 21:13:21 (1 month ago)	Port Scan detected from 47.95.201.137 (CN/China/-). 11 hits in the last 141 seconds	Brute-Force
🇨🇳 pengpeng	2026-06-11 10:06:49 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 33427 \| ttl: 244 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 33427 \| ttl: 244 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Petre 21_ip	2026-06-09 19:33:54 (1 month ago)	2026-06-09T21:33:53.467423+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-06-09T21:33:53.467423+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=47.95.201.137 DST=155.133.26.57 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=19364 PROTO=TCP SPT=53632 DPT=22758 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 Fasetech	2026-06-08 23:05:35 (1 month ago)	SecLedge detected suspicious activity. Score: 220.8. Sensor: T-Pot.	Brute-Force
🇭🇰 PingMeMaybe	2026-06-06 21:03:58 (1 month ago)	Blocked by UFW on hk [11993/tcp] Source port: 59820 TTL: 237 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on hk [11993/tcp] Source port: 59820 TTL: 237 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 dusfor72	2026-06-06 11:07:26 (1 month ago)	aggressive portscan ...	Port Scan
🇬🇧 PeravixGroup	2026-06-05 23:45:07 (1 month ago)	Honeypot detection: PaperCut MF/NG authentication bypass / RCE on port 9200. Severity: CRITICAL. Aar ... show more Honeypot detection: PaperCut MF/NG authentication bypass / RCE on port 9200. Severity: CRITICAL. Aaran.cloud show less	Hacking Web App Attack
Anonymous	2026-06-04 07:30:08 (1 month ago)	Port Scan detected from 47.95.201.137 (-). 16 hits in the last 60 seconds	Web App Attack
🇺🇸 en0	2026-06-03 19:07:01 (1 month ago)	47.95.201.137 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident coun ... show more 47.95.201.137 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 4 show less	Port Scan
🇺🇸 baltic-lab.com	2026-06-03 01:05:04 (1 month ago)	2026-06-03T03:01:24.018489+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-06-03T03:01:24.018489+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.95.201.137 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=27735 PROTO=TCP SPT=48481 DPT=46966 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-03T03:01:43.086358+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.95.201.137 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=58511 PROTO=TCP SPT=48481 DPT=53074 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-03T03:02:03.330675+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.95.201.137 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=10844 PROTO=TCP SPT=48481 DPT=52964 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-03T03:02:21.982853+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.95.201.137 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=32002 PROTO=TCP SPT=48481 DPT=22798 WINDO ... show less	Brute-Force Hacking

Showing 1 to 15 of 131 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.70.126.26

🇺🇸 47.85.196.221

🇳🇱 45.148.10.151

🇩🇪 212.113.112.185

🇦🇴 193.163.125.58

🇲🇽 187.224.246.146

🇺🇸 172.69.6.178

🇺🇸 154.31.157.121

🇸🇬 118.26.110.171

🇮🇳 117.221.134.1

🇨🇳 27.216.69.157

🇯🇵 207.56.229.202

🇺🇸 172.253.2.23

🇺🇸 172.69.17.34

🇺🇸 170.247.221.209

🇺🇸 162.216.150.75

🇨🇳 106.75.3.6

🇮🇳 103.162.196.82

🇮🇳 103.25.47.94

🇳🇱 91.92.42.81