JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.95.204.107

47.95.204.107 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 70%: ?

70%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.95.204.107

Whois 47.95.204.107

IP Abuse Reports for 47.95.204.107:

This IP address has been reported a total of 22 times from 16 distinct sources. 47.95.204.107 was first reported on May 8th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Starburst SysOp Team	2026-06-06 03:16:08 (10 hours ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-nue6-2)	Hacking Bad Web Bot
Anonymous	2026-06-04 19:29:57 (1 day ago)	Port Scan detected from 47.95.204.107 (-). 16 hits in the last 60 seconds	Web App Attack
🇸🇬 baltic-lab.com	2026-06-04 13:44:53 (2 days ago)	Firewall Detection, SG, Either a port scan or continued brute-force attack by a previously blocked o ... show more Firewall Detection, SG, Either a port scan or continued brute-force attack by a previously blocked offender ... show less	Brute-Force Port Scan
🇺🇸 ISPLtd	2026-06-04 01:30:30 (2 days ago)	Jun 3 19:30:27 47.95.204.107 TCP SPT=56627 DPT=46237 SYN Jun 3 19:30:29 47.95.204.107 TCP SPT=5662 ... show more Jun 3 19:30:27 47.95.204.107 TCP SPT=56627 DPT=46237 SYN Jun 3 19:30:29 47.95.204.107 TCP SPT=56627 DPT=21876 SYN Jun 3 19:30:29 47.95.204.107 TCP SPT=56627 DPT=23539 ... show less	Port Scan
🇺🇸 Floofie	2026-05-29 02:17:11 (1 week ago)	47.95.204.107 - - [28/May/2026:22:17:10 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ... show more 47.95.204.107 - - [28/May/2026:22:17:10 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36" 47.95.204.107 - - [28/May/2026:22:17:10 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36" 47.95.204.107 - - [28/May/2026:22:17:11 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 acadeova	2026-05-27 23:22:42 (1 week ago)	🚨 Recon detected (nft drop) SRC=47.95.204.107 Observed=TCP dpt=23272 in=enp0s6 ttl=242 Time=recent(j ... show more 🚨 Recon detected (nft drop) SRC=47.95.204.107 Observed=TCP dpt=23272 in=enp0s6 ttl=242 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇸🇪 donarev419	2026-05-26 00:19:38 (1 week ago)	Connection to port 6929 with data transfer. Data preview:	Port Scan Hacking
🇫🇷 ISPLtd	2026-05-25 13:47:58 (1 week ago)	May 25 10:47:54 47.95.204.107 TCP SPT=56873 DPT=61407 SYN May 25 10:47:55 47.95.204.107 TCP SPT=5687 ... show more May 25 10:47:54 47.95.204.107 TCP SPT=56873 DPT=61407 SYN May 25 10:47:55 47.95.204.107 TCP SPT=56873 DPT=285 SYN May 25 10:47:57 47.95.204.107 TCP SPT=56873 DPT=36646 ... show less	Port Scan
🇩🇪 acadeova	2026-05-24 01:01:46 (1 week ago)	Blocked by UFW on vps2 [48980/tcp] Source port: 44404 TTL: 242 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW on vps2 [48980/tcp] Source port: 44404 TTL: 242 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shaunc	2026-05-22 02:31:06 (2 weeks ago)	May 21 21:24:51 [redacted] kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:6c:78:c1:10:f6:b0: ... show more May 21 21:24:51 [redacted] kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:6c:78:c1:10:f6:b0:08:00 SRC=47.95.204.107 DST=[redacted] LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=62523 PROTO=TCP SPT=56551 DPT=5432 WINDOW=1024 RES=0x00 SYN URGP=0 May 21 21:30:13 [redacted] kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:6c:78:c1:10:f6:b0:08:00 SRC=47.95.204.107 DST=[redacted] LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=30885 PROTO=TCP SPT=56551 DPT=111 WINDOW=1024 RES=0x00 SYN URGP=0 May 21 21:31:03 [redacted] kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:6c:78:c1:10:f6:b0:08:00 SRC=47.95.204.107 DST=[redacted] LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=20010 PROTO=TCP SPT=56551 DPT=27017 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 LockBlock	2026-05-22 00:34:48 (2 weeks ago)	2026-05-22 00:34:48: Port scan detected from 47.95.204.107 on port 110 of racknerd-e7e1a9	Port Scan
🇭🇰 PingMeMaybe	2026-05-18 21:02:18 (2 weeks ago)	Blocked by UFW on hk [58857/tcp] Source port: 58112 TTL: 237 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on hk [58857/tcp] Source port: 58112 TTL: 237 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Blexyel	2026-05-18 18:19:33 (2 weeks ago)	2026-05-18T20:17:23.609975+02:00 smol kernel: [401659.514813] [UFW BLOCK] IN=eth0 OUT= MAC=ea:8f:5e: ... show more 2026-05-18T20:17:23.609975+02:00 smol kernel: [401659.514813] [UFW BLOCK] IN=eth0 OUT= MAC=ea:8f:5e:28:cc:45:bc:0f:fe:3d:a3:a7:08:00 SRC=47.95.204.107 DST=152.53.227.155 LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=64980 PROTO=TCP SPT=48242 DPT=55849 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-18T20:17:43.287913+02:00 smol kernel: [401679.192045] [UFW BLOCK] IN=eth0 OUT= MAC=ea:8f:5e:28:cc:45:bc:0f:fe:3d:a3:a7:08:00 SRC=47.95.204.107 DST=152.53.227.155 LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=22930 PROTO=TCP SPT=48242 DPT=3781 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-18T20:17:56.912017+02:00 smol kernel: [401692.816683] [UFW BLOCK] IN=eth0 OUT= MAC=ea:8f:5e:28:cc:45:bc:0f:fe:3d:a3:a7:08:00 SRC=47.95.204.107 DST=152.53.227.155 LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=63480 PROTO=TCP SPT=48242 DPT=35460 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-18T20:17:57.404237+02:00 smol kernel: [401693.309150] [UFW BLOCK] IN=eth0 OUT= MAC=ea:8f:5e:28:cc:45:bc:0f:fe:3d:a3:a7:08:00 SRC=47.95.204.107 DST=152.53.227.155 LEN ... show less	Port Scan Hacking Brute-Force
🇭🇰 pengpeng	2026-05-18 14:19:25 (2 weeks ago)	monitor: on ser162528253480 \| port: 48963 \| ttl: 238 script: github.com/sefinek/UFW-AbuseIPDB-Repor ... show more monitor: on ser162528253480 \| port: 48963 \| ttl: 238 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 ScanThe.Net	2026-05-18 05:29:41 (2 weeks ago)	ID: 3319968760 \| PORT: 25872 \| https://47-95-204-107.scanthe.net	Port Scan

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.56

🇺🇸 184.168.21.211

🇫🇷 159.26.112.54

🇫🇷 146.70.194.238

🇻🇳 116.97.109.92

🇨🇦 85.217.149.42

🇺🇸 45.79.3.239

🇫🇮 31.134.11.158

🇨🇳 14.103.46.177

🇻🇳 222.252.104.5

🇧🇬 185.255.212.178

🇮🇳 172.253.220.18

🇫🇷 146.70.194.246

🇨🇳 113.221.27.228

🇺🇸 31.97.8.146

🇳🇱 31.42.176.142

🇻🇳 14.162.17.212

🇪🇸 212.225.179.114

🇺🇸 162.216.149.122

🇨🇦 148.113.221.114