JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.95.209.49

47.95.209.49 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 61%: ?

61%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.95.209.49

Whois 47.95.209.49

IP Abuse Reports for 47.95.209.49:

This IP address has been reported a total of 21 times from 14 distinct sources. 47.95.209.49 was first reported on May 7th 2026, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 acadeova	2026-06-07 10:36:06 (17 hours ago)	Blocked by UFW on vps2 [50544/tcp] Source port: 48560 TTL: 242 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW on vps2 [50544/tcp] Source port: 48560 TTL: 242 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-06 16:35:54 (1 day ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇫🇷 Petre 21_ip	2026-06-06 07:56:03 (1 day ago)	2026-06-06T09:56:03.101081+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-06-06T09:56:03.101081+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=47.95.209.49 DST=155.133.26.57 LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=1018 PROTO=TCP SPT=52562 DPT=32110 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 baltic-lab.com	2026-06-02 03:40:07 (6 days ago)	2026-06-02T05:37:23.518218+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-06-02T05:37:23.518218+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.95.209.49 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=17709 PROTO=TCP SPT=51442 DPT=15396 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-02T05:37:59.531944+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.95.209.49 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=11501 PROTO=TCP SPT=51442 DPT=43762 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-02T05:38:20.476329+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.95.209.49 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=56412 PROTO=TCP SPT=51442 DPT=39273 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-02T05:38:41.115251+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.95.209.49 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=241 ID=18747 PROTO=TCP SPT=51442 DPT=15983 WINDOW=10 ... show less	Brute-Force Hacking
🇨🇳 pengpeng	2026-05-30 01:47:34 (1 week ago)	monitor: on VM-0-7-ubuntu \| port: 15594 \| ttl: 244 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 15594 \| ttl: 244 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-29 15:47:39 (1 week ago)	Honeypot detection: rsync unauthorized access / data sync attempt on port 873. Severity: LOW. Aaran. ... show more Honeypot detection: rsync unauthorized access / data sync attempt on port 873. Severity: LOW. Aaran.cloud show less	Port Scan
🇬🇧 Hobby Bob	2026-05-28 18:11:37 (1 week ago)	May 28 19:11:36 mail dovecot: pop3-login: Disconnected: Connection closed: read(size=916) failed: Co ... show more May 28 19:11:36 mail dovecot: pop3-login: Disconnected: Connection closed: read(size=916) failed: Connection reset by peer (no auth attempts in 0 secs): user=, rip=47.95.209.49, lip=X.X.X.X session= show less	Port Scan Hacking
🇦🇺 dyln	2026-05-28 18:02:20 (1 week ago)	Dyls honeypot brute-force: RDP, proto8 (10 total hits)	Brute-Force
🇺🇸 mutebot.net	2026-05-25 23:10:44 (1 week ago)	SRC=47.95.209.49, PROTO=TCP, SPT=50634, DPT=45295 SRC=47.95.209.49, PROTO=TCP, SPT=50634, DPT=44665 ... show more SRC=47.95.209.49, PROTO=TCP, SPT=50634, DPT=45295 SRC=47.95.209.49, PROTO=TCP, SPT=50634, DPT=44665 SRC=47.95.209.49, PROTO=TCP, SPT=50634, DPT=13361 SRC=47.95.209.49, PROTO=TCP, SPT=50634, DPT=24032 SRC=47.95.209.49, PROTO=TCP, SPT=50634, DPT=18368 show less	Port Scan
Anonymous	2026-05-24 06:04:51 (2 weeks ago)	Blocked by UFW (TCP on 25813) Source port: 42674 TTL: 248 Packet length: 40 TOS: 0x14 This report ( ... show more Blocked by UFW (TCP on 25813) Source port: 42674 TTL: 248 Packet length: 40 TOS: 0x14 This report (for 47.95.209.49) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-23 16:18:00 (2 weeks ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-21 06:41:38 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 sandra361	2026-05-20 19:01:01 (2 weeks ago)	Brute-force/Port scan detected: 64 attempts across 62 ports (11586,1243,13129,18149,18729,19636,2063 ... show more Brute-force/Port scan detected: 64 attempts across 62 ports (11586,1243,13129,18149,18729,19636,20637,22185,22722,23206,25433,26233,26836,26873,27237,27624,27645,27753,27817,2824,28548,28827,29776,30209,30567,31138,31528,31602,32064,33262,33385,34035,36876,37960,38685,3927,40589,4095,41376,41624,45339,48266,49274,51545,52012,52229,52460,52527,54237,55741,56308,5755,58859,58960,59725,60753,62420,63259,64215,64467,9338,9571). \| Evidence: GHOST_SCAN:IN=enp1s0 OUT= SRC=47.95.209.49 LEN=40 TOS=0x00 PREC=0x00 TTL=227 ID=52189 PROTO=TCP SPT=43598 DPT=9338 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan Brute-Force
🇺🇸 en0	2026-05-20 08:50:53 (2 weeks ago)	47.95.209.49 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident count ... show more 47.95.209.49 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 3 show less	Port Scan
🇺🇸 mutebot.net	2026-05-18 19:05:07 (2 weeks ago)	SRC=47.95.209.49, PROTO=TCP, SPT=51096, DPT=7959 SRC=47.95.209.49, PROTO=TCP, SPT=51096, DPT=18652 S ... show more SRC=47.95.209.49, PROTO=TCP, SPT=51096, DPT=7959 SRC=47.95.209.49, PROTO=TCP, SPT=51096, DPT=18652 SRC=47.95.209.49, PROTO=TCP, SPT=51096, DPT=29118 SRC=47.95.209.49, PROTO=TCP, SPT=51096, DPT=48870 SRC=47.95.209.49, PROTO=TCP, SPT=51096, DPT=38176 show less	Port Scan

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 183.191.30.115

🇦🇫 149.54.62.22

🇺🇸 91.230.168.20

🇭🇰 199.45.154.184

🇨🇦 142.93.145.203

🇻🇳 123.31.18.242

🇯🇴 91.106.108.102

🇵🇹 80.172.227.24

🇷🇴 80.94.95.116

🇺🇸 67.205.181.73

🇺🇸 64.62.156.151

🇭🇰 47.86.234.44

🇰🇷 210.206.24.238

🇺🇸 199.119.65.153

🇻🇳 171.247.166.135

🇱🇹 62.60.130.60

🇺🇸 45.156.129.139

🇳🇱 45.148.10.151

🇨🇳 39.154.12.75

🇺🇸 34.145.177.55