JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.95.201.20

47.95.201.20 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 46%: ?

46%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.95.201.20

Whois 47.95.201.20

IP Abuse Reports for 47.95.201.20:

This IP address has been reported a total of 25 times from 14 distinct sources. 47.95.201.20 was first reported on May 7th 2026, and the most recent report was 45 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 DZBOT	2026-07-02 23:35:59 (45 minutes ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
Anonymous	2026-06-15 11:33:20 (2 weeks ago)	Port Scan detected from 47.95.201.20 (CN/China/-). 16 hits in the last 80 seconds	Web App Attack
🇫🇷 Little Iguana	2026-06-13 21:58:19 (2 weeks ago)	trying to access non-authorized port	Port Scan
🇫🇷 ISPLtd	2026-06-12 08:53:21 (2 weeks ago)	Jun 12 05:53:10 47.95.201.20 TCP SPT=54388 DPT=543 SYN Jun 12 05:53:12 47.95.201.20 TCP SPT=54388 DP ... show more Jun 12 05:53:10 47.95.201.20 TCP SPT=54388 DPT=543 SYN Jun 12 05:53:12 47.95.201.20 TCP SPT=54388 DPT=8057 SYN Jun 12 05:53:21 47.95.201.20 TCP SPT=54388 DPT=14430 ... show less	Port Scan
🇺🇸 ISPLtd	2026-06-11 01:03:56 (3 weeks ago)	Jun 10 19:03:51 47.95.201.20 TCP SPT=59831 DPT=20534 SYN Jun 10 19:03:54 47.95.201.20 TCP SPT=59831 ... show more Jun 10 19:03:51 47.95.201.20 TCP SPT=59831 DPT=20534 SYN Jun 10 19:03:54 47.95.201.20 TCP SPT=59831 DPT=54061 SYN Jun 10 19:03:55 47.95.201.20 TCP SPT=59831 DPT=3581 ... show less	Port Scan
🇺🇸 sandra361	2026-06-09 21:29:42 (3 weeks ago)	Port scan detected: 24 attempts across 24 ports (11665,14447,16397,17097,20364,25334,35308,36437,375 ... show more Port scan detected: 24 attempts across 24 ports (11665,14447,16397,17097,20364,25334,35308,36437,37564,37771,42540,43744,55559,56669,58508,60874,63146,63679,7219,7390,7693,7731,839,9270). \| Evidence: GHOST_SCAN:IN=enp1s0 OUT= SRC=47.95.201.20 LEN=40 TOS=0x00 PREC=0x00 TTL=227 ID=21236 PROTO=TCP SPT=40564 DPT=7693 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇫🇷 dusfor72	2026-06-08 00:13:09 (3 weeks ago)	aggressive portscan ...	Port Scan
🇬🇧 PeravixGroup	2026-06-06 16:37:35 (3 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇭🇰 PingMeMaybe	2026-06-04 04:40:40 (4 weeks ago)	Blocked by UFW on hk [19117/tcp] Source port: 47997 TTL: 237 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on hk [19117/tcp] Source port: 47997 TTL: 237 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 baltic-lab.com	2026-06-02 08:35:06 (1 month ago)	2026-06-02T10:33:29.220401+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-06-02T10:33:29.220401+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.95.201.20 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=38780 PROTO=TCP SPT=49201 DPT=51873 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-02T10:33:49.297617+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.95.201.20 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=19340 PROTO=TCP SPT=49201 DPT=47096 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-02T10:34:09.574639+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.95.201.20 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=59949 PROTO=TCP SPT=49201 DPT=18641 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-02T10:34:30.520956+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.95.201.20 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=15358 PROTO=TCP SPT=49201 DPT=48363 WINDOW=10 ... show less	Brute-Force Hacking
🇩🇪 acadeova	2026-06-01 20:17:52 (1 month ago)	🚨 Recon detected (nft drop) SRC=47.95.201.20 Observed=TCP dpt=2019 in=enp0s6 ttl=242 Time=recent(jou ... show more 🚨 Recon detected (nft drop) SRC=47.95.201.20 Observed=TCP dpt=2019 in=enp0s6 ttl=242 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇺🇸 ISPLtd	2026-06-01 00:22:56 (1 month ago)	May 31 18:22:53 47.95.201.20 TCP SPT=53373 DPT=7514 SYN May 31 18:22:54 47.95.201.20 TCP SPT=53373 D ... show more May 31 18:22:53 47.95.201.20 TCP SPT=53373 DPT=7514 SYN May 31 18:22:54 47.95.201.20 TCP SPT=53373 DPT=41704 SYN May 31 18:22:55 47.95.201.20 TCP SPT=53373 DPT=25133 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-05-29 20:33:51 (1 month ago)	Honeypot detection: Windows Remote Management (WinRM) unauthorized access attempt on port 5985. Seve ... show more Honeypot detection: Windows Remote Management (WinRM) unauthorized access attempt on port 5985. Severity: MEDIUM. Aaran.cloud show less	Brute-Force Hacking
🇨🇦 Blinker73	2026-05-26 23:23:07 (1 month ago)	2026-05-26T19:23 kernel: OUT= SRC=47.95.201.20 LEN=40 TOS=0x00 PREC=0xA0 TTL=230 ID=18120 PROT ... show more 2026-05-26T19:23 kernel: OUT= SRC=47.95.201.20 LEN=40 TOS=0x00 PREC=0xA0 TTL=230 ID=18120 PROTO=TCP SPT=57784 DPT=46819 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-26T19:23 kernel: OUT= SRC=47.95.201.20 LEN=40 TOS=0x00 PREC=0xA0 TTL=230 ID=14153 PROTO=TCP SPT=57784 DPT=61992 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-26T19:23 kernel: OUT= SRC=47.95.201.20 LEN=40 TOS=0x00 PREC=0xA0 TTL=229 ID=18753 PROTO=TCP SPT=57784 DPT=7619 WINDOW=1024 RES=0x00 SYN URGP= show less	Port Scan
🇫🇷 dusfor72	2026-05-24 11:44:40 (1 month ago)	aggressive portscan ...	Port Scan

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 189.6.214.155

🇬🇧 188.166.146.118

🇺🇸 186.179.47.111

🇫🇷 185.177.72.51

🇧🇷 177.12.140.4

🇧🇷 177.8.232.60

🇨🇳 112.6.118.247

🇫🇷 91.196.152.223

🇨🇳 223.85.102.138

🇬🇧 193.163.125.17

🇺🇸 186.179.39.88

🇺🇸 186.179.14.42

🇺🇸 186.179.14.8

🇬🇧 185.247.137.224

🇫🇷 185.177.72.24

🇸🇬 185.111.159.216

🇨🇳 183.221.0.223

🇨🇳 175.6.54.250

🇺🇸 172.190.89.127

🇧🇷 168.227.187.1