JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.95.205.214

47.95.205.214 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 65%: ?

65%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.95.205.214

Whois 47.95.205.214

IP Abuse Reports for 47.95.205.214:

This IP address has been reported a total of 25 times from 17 distinct sources. 47.95.205.214 was first reported on May 9th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-07-09 13:26:35 (1 day ago)	Port Scan detected from 47.95.205.214 (CN/China/-). 11 hits in the last 101 seconds (0-135)	Port Scan
🇬🇧 openstrike.co.uk	2026-07-09 08:20:55 (1 day ago)	119 packets to ports 310 330 427 1302 1583 1689 1989 2344 2406 2527 2884 2953 3086 3222 3386 4453 45 ... show more 119 packets to ports 310 330 427 1302 1583 1689 1989 2344 2406 2527 2884 2953 3086 3222 3386 4453 4569 4589 4848 5141 5501 5688 5904 5933 6698 7052 7210 7401 7640 7721 7781 8197 8257 8272 8464 8773 9107 10034 10167 10305 10331 11022 11027 11036 11070 11227 11301, etc. show less	Port Scan
Anonymous	2026-07-08 23:33:38 (2 days ago)	Shorewall log file match.	Port Scan
Anonymous	2026-07-07 15:39:52 (3 days ago)	Blocked by UFW (TCP on 5113) Source port: 58775 TTL: 243 Packet length: 40 TOS: 0x14 This report (f ... show more Blocked by UFW (TCP on 5113) Source port: 58775 TTL: 243 Packet length: 40 TOS: 0x14 This report (for 47.95.205.214) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 pearbright	2026-07-07 00:03:37 (4 days ago)	2026-07-07T00:03:13.614571+00:00 srv1093252 kernel: [4128568.476028] [UFW BLOCK] IN=eth0 OUT= MAC=28 ... show more 2026-07-07T00:03:13.614571+00:00 srv1093252 kernel: [4128568.476028] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=47.95.205.214 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=223 ID=36354 PROTO=TCP SPT=42592 DPT=12102 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-07T00:03:14.860192+00:00 srv1093252 kernel: [4128569.721283] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=47.95.205.214 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=222 ID=33036 PROTO=TCP SPT=42592 DPT=21111 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-07T00:03:16.041628+00:00 srv1093252 kernel: [4128570.903268] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=47.95.205.214 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=222 ID=57870 PROTO=TCP SPT=42592 DPT=13009 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-07T00:03:18.536869+00:00 srv1093252 kernel: [4128573.398560] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=47.95.205.214 ... show less	Port Scan
🇩🇪 _ArminS_	2026-07-06 10:11:52 (4 days ago)	SP-Scan 52712:5112 detected 2026.07.06 12:11:52 blocked until 2026.08.25 05:14:39	Port Scan
🇺🇸 sandra361	2026-07-02 01:41:44 (1 week ago)	Port scan detected: 24 attempts across 24 ports (14001,19772,2017,28001,38080,446,4505,49681,50052,5 ... show more Port scan detected: 24 attempts across 24 ports (14001,19772,2017,28001,38080,446,4505,49681,50052,5008,5053,6008,7021,7500,7799,7900,8323,8701,8884,9088,9181,9502,96,9848). \| Evidence: GHOST_SCAN: IN=enp1s0 SRC=47.95.205.214 LEN=40 TOS=0x00 PREC=0x00 TTL=224 ID=22715 PROTO=TCP SPT=56455 DPT=50052 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇫🇷 masterguru	2026-07-01 06:28:14 (1 week ago)	Port Scan detected from 47.95.205.214 (CN/China/-). 11 hits in the last 105 seconds (0-135)	Port Scan
🇫🇷 Fasetech	2026-06-25 11:44:32 (2 weeks ago)	SecLedge detected suspicious activity. Score: 239.04. Sensor: T-Pot.	Brute-Force
🇬🇧 PeravixGroup	2026-06-20 02:23:43 (2 weeks ago)	Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDI ... show more Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 dusfor72	2026-06-19 13:29:35 (3 weeks ago)	aggressive portscan ...	Port Scan
🇸🇪 donarev419	2026-06-03 04:17:08 (1 month ago)	Connection to port 1478 with data transfer. Data preview:	Port Scan Hacking
🇩🇪 kingjan1999	2026-06-02 21:53:02 (1 month ago)	Blocked by UFW [48672/tcp] \| SPT: 57172 \| TTL: 233 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/s ... show more Blocked by UFW [48672/tcp] \| SPT: 57172 \| TTL: 233 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-05-27 20:45:38 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 2492 \| ttl: 244 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇭🇰 PingMeMaybe	2026-05-26 18:29:39 (1 month ago)	Blocked by UFW on hk [41057/tcp] Source port: 40166 TTL: 237 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on hk [41057/tcp] Source port: 40166 TTL: 237 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.223.199.221

🇧🇷 205.210.31.153

🇺🇸 165.154.202.116

🇻🇳 117.6.40.210

🇷🇴 92.118.39.62

🇦🇪 83.110.144.38

🇦🇲 46.162.203.179

🇳🇬 41.219.149.74

🇺🇸 34.193.119.44

🇺🇸 2607:f8b0:4001:c11::12d

🇩🇪 212.30.36.26

🇳🇬 197.210.226.100

🇨🇳 101.34.249.202

🇨🇱 68.211.177.55

🇺🇸 64.62.197.136

🇬🇧 35.203.211.230

🇺🇸 205.210.31.95

🇳🇱 203.55.131.5

🇦🇷 186.1.214.146

🇩🇪 167.233.109.10