JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.95.208.64

47.95.208.64 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 41%: ?

41%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.95.208.64

Whois 47.95.208.64

IP Abuse Reports for 47.95.208.64:

This IP address has been reported a total of 23 times from 15 distinct sources. 47.95.208.64 was first reported on September 3rd 2022, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 gglobatech	2026-06-26 09:08:58 (3 days ago)	CrowdSec detection: crowdsecurity/http-bad-user-agent on srv1042301	Brute-Force Port Scan
🇳🇱 knock	2026-06-26 07:34:40 (3 days ago)	Knock-Knock honeypot brute-force: proto8 (6 total hits)	Brute-Force
🇺🇸 mutebot.net	2026-06-10 22:33:38 (2 weeks ago)	SRC=47.95.208.64, PROTO=TCP, SPT=50804, DPT=24041 SRC=47.95.208.64, PROTO=TCP, SPT=50804, DPT=62861 ... show more SRC=47.95.208.64, PROTO=TCP, SPT=50804, DPT=24041 SRC=47.95.208.64, PROTO=TCP, SPT=50804, DPT=62861 SRC=47.95.208.64, PROTO=TCP, SPT=50804, DPT=45850 SRC=47.95.208.64, PROTO=TCP, SPT=50804, DPT=39342 SRC=47.95.208.64, PROTO=TCP, SPT=50804, DPT=58241 show less	Port Scan
🇫🇷 ISPLtd	2026-06-09 23:23:02 (2 weeks ago)	Jun 9 20:23:01 47.95.208.64 TCP SPT=47380 DPT=32692 SYN Jun 9 20:23:01 47.95.208.64 TCP SPT=47380 ... show more Jun 9 20:23:01 47.95.208.64 TCP SPT=47380 DPT=32692 SYN Jun 9 20:23:01 47.95.208.64 TCP SPT=47380 DPT=43481 SYN Jun 9 20:23:02 47.95.208.64 TCP SPT=47380 DPT=29055 ... show less	Port Scan
🇩🇪 excill	2026-06-07 03:04:48 (3 weeks ago)	Honeypot mesh observed 903 attack events in 24h — cowrie/dionaea/heralding/suricata	Port Scan Hacking Brute-Force SSH
🇬🇧 PeravixGroup	2026-06-05 19:28:57 (3 weeks ago)	Honeypot detection: TR-069 CWMP router management protocol abuse attempt on port 7547. Severity: MED ... show more Honeypot detection: TR-069 CWMP router management protocol abuse attempt on port 7547. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Hacking
🇺🇸 baltic-lab.com	2026-06-01 23:02:21 (4 weeks ago)	2026-06-02T01:01:05.840006+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-06-02T01:01:05.840006+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.95.208.64 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=10712 PROTO=TCP SPT=54865 DPT=22228 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-02T01:01:09.017436+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.95.208.64 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=2360 PROTO=TCP SPT=54865 DPT=32181 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-02T01:01:12.901982+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.95.208.64 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=20822 PROTO=TCP SPT=54865 DPT=21028 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-02T01:01:26.633291+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.95.208.64 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=28013 PROTO=TCP SPT=54865 DPT=61500 WINDOW=102 ... show less	Brute-Force Hacking
🇩🇪 acadeova	2026-05-29 02:51:06 (1 month ago)	Blocked by UFW on vps2 [47001/tcp] Source port: 43057 TTL: 242 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW on vps2 [47001/tcp] Source port: 43057 TTL: 242 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 mutebot.net	2026-05-27 16:40:18 (1 month ago)	SRC=47.95.208.64, PROTO=TCP, SPT=40007, DPT=7873 SRC=47.95.208.64, PROTO=TCP, SPT=40007, DPT=13343 S ... show more SRC=47.95.208.64, PROTO=TCP, SPT=40007, DPT=7873 SRC=47.95.208.64, PROTO=TCP, SPT=40007, DPT=13343 SRC=47.95.208.64, PROTO=TCP, SPT=40007, DPT=41904 SRC=47.95.208.64, PROTO=TCP, SPT=40007, DPT=20059 SRC=47.95.208.64, PROTO=TCP, SPT=40007, DPT=33254 show less	Port Scan
🇹🇷 Threat.live	2026-05-25 18:40:03 (1 month ago)	Suspicious Connection Attempts	Brute-Force
🇩🇪 _ArminS_	2026-05-25 07:00:41 (1 month ago)	SP-Scan 52436:34182 detected 2026.05.25 09:00:41 blocked until 2026.07.14 02:03:28	Port Scan
🇩🇪 acadeova	2026-05-24 03:25:46 (1 month ago)	Blocked by UFW on vps2 [11391/tcp] Source port: 53137 TTL: 242 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW on vps2 [11391/tcp] Source port: 53137 TTL: 242 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-23 13:26:59 (1 month ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-05-17 22:08:15 (1 month ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/47.95.208.64 2026-05-17 08:37:4 ... show more ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/47.95.208.64 2026-05-17 08:37:47 / 2026-05-17 08:37:48 /favicon.ico show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-16 22:07:52 (1 month ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/47.95.208.64 2026-05-16 04:50:2 ... show more ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/47.95.208.64 2026-05-16 04:50:21 / 2026-05-16 14:04:44 / show less	Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 87.251.64.156

🇺🇸 207.244.202.236

🇨🇴 206.62.136.130

🇳🇱 195.178.110.242

🇸🇬 178.128.25.70

🇨🇳 120.48.175.122

🇺🇸 107.174.137.235

🇸🇪 104.23.221.58

🇳🇱 88.151.33.203

🇨🇳 58.218.178.134

🇪🇨 38.51.35.239

🇺🇸 23.92.27.206

🇨🇳 223.64.222.37

🇬🇧 193.163.125.69

🇲🇽 187.190.35.163

🇬🇧 185.216.145.190

🇳🇱 185.100.232.75

🇨🇳 183.218.169.153

🇮🇩 180.244.38.15

🇳🇱 172.94.9.55