47.95.30.206
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Aliyun Computing Co., LTD
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS37963
- Domain Name
- alibabacloud.com
- Country
- 🇨🇳 China
- City
- Beijing, Beijing
Abuse Reports
Total reports
18 from
11 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇭🇺 Csaba Gáspár |
Realtek.SDK.UDPServer.Command.Execution
|
Hacking | |
| 🇧🇷 diego |
[rede-44-49] 10/28/2026-12:08:42.592393, 47.95.30.206, Protocol: 17, ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
|
Hacking | |
| 🇺🇸 bruce_buskill |
Web exploit/scan attempts against a university web server; blocked.
|
Web App Attack Hacking | |
| 🇮🇩 leomardsy_ |
|
Port Scan | |
| 🇧🇷 diego |
[rede-top188] 10/28/2026-06:27:56.357353, 47.95.30.206, Protocol: 17, ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
|
Hacking | |
| 🇧🇷 diego |
[rede-44-49] 10/28/2026-04:37:14.991173, 47.95.30.206, Protocol: 17, ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
|
Hacking | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 110100 | Desc: Suricata: exploit (ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)) de 47.95.30.206
|
Port Scan Brute-Force SSH | |
| 🇧🇷 diego |
[rede-44-49] 10/27/2026-18:59:13.414567, 47.95.30.206, Protocol: 17, ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
|
Hacking | |
| 🇺🇸 grassyloki |
|
Hacking | |
| 🇮🇩 leomardsy_ |
|
Port Scan | |
| 🇧🇷 diego |
[rede-164-29] 10/27/2026-00:54:19.288361, 47.95.30.206, Protocol: 17, ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
|
Hacking | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 110100 | Desc: Suricata: exploit (ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)) de 47.95.30.206
|
Port Scan Brute-Force SSH | |
| 🇫🇷 Petre 21_ip |
2026-10-26T19:43:29.381056+01:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=47.95.30.206 DST=155.133.26.57 LEN=166 TOS=0x00 PREC=0x00 TTL=48 ID=43635 DF PROTO=UDP SPT=55854 DPT=9034 LEN=146
...
|
Port Scan | |
| 🇺🇸 HamSammich |
Automated sensor: 1 port 9034 connection/probe attempts over the last 24h (latest 2026-10-26T17:21Z).
|
Port Scan | |
| 🇮🇩 leomardsy_ |
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown