JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.95.211.160

47.95.211.160 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 73%: ?

73%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.95.211.160

Whois 47.95.211.160

IP Abuse Reports for 47.95.211.160:

This IP address has been reported a total of 30 times from 18 distinct sources. 47.95.211.160 was first reported on May 8th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Fasetech	2026-06-08 23:05:30 (3 days ago)	SecLedge detected suspicious activity. Score: 115.92. Sensor: T-Pot.	Brute-Force
Anonymous	2026-06-06 23:24:17 (5 days ago)	47.95.211.160 detected on srv01	Port Scan
🇺🇸 sandra361	2026-06-06 12:39:01 (5 days ago)	Port scan detected: 52 attempts across 52 ports (10135,10151,10202,10404,113,11439,11901,11926,12348 ... show more Port scan detected: 52 attempts across 52 ports (10135,10151,10202,10404,113,11439,11901,11926,12348,1235,13180,1345,13779,16008,16268,17700,1910,1941,19870,19996,203,20422,22060,22062,22443,30041,3027,30875,3097,3110,32766,32771,3381,38085,38801,40052,4310,4333,43389,4512,517,5367,548,58088,61011,7233,7923,8456,8599,9266,9547,9809). \| Evidence: GHOST_SCAN:IN=enp1s0 OUT= SRC=47.95.211.160 LEN=40 TOS=0x00 PREC=0x00 TTL=227 ID=28544 PROTO=TCP SPT=49480 DPT=1941 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
Anonymous	2026-06-05 12:35:02 (6 days ago)	$f2bV_matches	Brute-Force SSH
🇬🇧 pearbright	2026-06-04 08:45:24 (1 week ago)	2026-06-04T08:44:32.060284+00:00 srv1093252 kernel: [1308665.446575] [UFW BLOCK] IN=eth0 OUT= MAC=28 ... show more 2026-06-04T08:44:32.060284+00:00 srv1093252 kernel: [1308665.446575] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=47.95.211.160 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=225 ID=26845 PROTO=TCP SPT=42671 DPT=22966 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-04T08:44:34.626158+00:00 srv1093252 kernel: [1308668.012625] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=47.95.211.160 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=225 ID=59303 PROTO=TCP SPT=42671 DPT=3773 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-04T08:44:34.887584+00:00 srv1093252 kernel: [1308668.273586] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=47.95.211.160 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=225 ID=56064 PROTO=TCP SPT=42671 DPT=61506 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-04T08:44:35.252208+00:00 srv1093252 kernel: [1308668.638611] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=47.95.211.160 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-06-03 15:16:11 (1 week ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 en0	2026-05-31 23:40:35 (1 week ago)	47.95.211.160 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident coun ... show more 47.95.211.160 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 3 show less	Port Scan
🇫🇷 Fasetech	2026-05-30 08:54:14 (1 week ago)	SecLedge detected suspicious activity. Score: 115.92. Sensor: T-Pot.	Brute-Force
🇭🇰 PingMeMaybe	2026-05-28 22:40:42 (2 weeks ago)	Blocked by UFW on hk [16379/tcp] Source port: 48025 TTL: 237 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on hk [16379/tcp] Source port: 48025 TTL: 237 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-28 05:12:35 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇸🇪 donarev419	2026-05-26 01:12:35 (2 weeks ago)	Connection to port 1602 with data transfer. Data preview:	Port Scan Hacking
🇫🇷 Petre 21_ip	2026-05-25 09:44:15 (2 weeks ago)	2026-05-25T11:44:15.106702+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-05-25T11:44:15.106702+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=47.95.211.160 DST=155.133.26.57 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=35288 PROTO=TCP SPT=42250 DPT=20431 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇭 ScanThe.Net	2026-05-25 04:08:48 (2 weeks ago)	ID: 3529791725 \| PORT: 44653 \| https://47-95-211-160.scanthe.net	Port Scan
🇨🇭 ScanThe.Net	2026-05-24 19:54:10 (2 weeks ago)	ID: 3521010199 \| PORT: 31970 \| https://47-95-211-160.scanthe.net	Port Scan
🇫🇷 Fasetech	2026-05-23 11:38:14 (2 weeks ago)	SecLedge detected suspicious activity. Score: 115.92. Sensor: T-Pot.	Brute-Force

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.36

🇬🇭 197.255.79.196

🇬🇧 195.96.139.13

🇬🇧 193.176.29.14

🇬🇧 185.216.145.177

🇺🇸 104.232.79.58

🇫🇷 91.231.89.168

🇺🇸 91.230.168.210

🇳🇱 89.21.67.173

🇨🇳 59.82.83.117

🇧🇪 34.156.81.66

🇺🇸 18.223.132.33

🇧🇷 187.8.120.90

🇸🇪 185.246.130.20

🇺🇸 173.230.150.73

🇹🇼 111.70.16.7

🇺🇸 91.230.168.88

🇫🇷 85.217.140.53

🇫🇷 85.217.140.52

🇫🇷 85.217.140.51