JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.96.224.42

47.96.224.42 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 37%: ?

37%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.96.224.42

Whois 47.96.224.42

IP Abuse Reports for 47.96.224.42:

This IP address has been reported a total of 41 times from 28 distinct sources. 47.96.224.42 was first reported on February 11th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 chrisj	2026-07-06 12:46:56 (1 week ago)	2026-07-06T12:45:23.171295+00:00 aws.vandogh.org postfix/smtpd[543479]: improper command pipelining ... show more 2026-07-06T12:45:23.171295+00:00 aws.vandogh.org postfix/smtpd[543479]: improper command pipelining after CONNECT from unknown[47.96.224.42]: \026\003\001\002\000\001\000\001\374\003\003\327\344\270\233\336\365\255\205\212\210f\037e\264\341q\361A\314\331\2407\271\204.\020M\343h\a\213E\000\000\332\000\005\000\004\000\002\000\001\000\026\0003\0009\000:\000\030\0005\000\n\000\033\000/\0004\300\020\300\006\300\025\300\v\300\001\000;\3000\300,\300(\300$\300\024\300\n\000\245 2026-07-06T12:45:24.591129+00:00 aws.vandogh.org postfix/smtpd[543480]: improper command pipelining after CONNECT from unknown[47.96.224.42]: \026\003\001\002\000\001\000\001\374\003\003z\026: \021\252\272\322%\321N\351!Uk"\217&\|E\236\211bU\223N\275\246\023\2359\023\000\000\332\000\005\000\004\000\002\000\001\000\026\0003\0009\000:\000\030\0005\000\n\000\033\000/\0004\300\020\300\006\300\025\300\v\300\001\000;\3000\300,\300(\300$\300\024\300\n\000\245 2026-07-06T12:46:55.638125+00:00 aws.vandogh.org postfix/smtpd[543479 ... show less	Brute-Force
🇳🇱 GabrielJST	2026-07-06 06:26:06 (1 week ago)	Port Scan detected from 47.96.224.42 (CN/China/-).	Port Scan
Anonymous	2026-07-06 04:54:43 (1 week ago)	2026-07-06T00:54:35.103576-04:00 mail postfix/smtpd[1126907]: lost connection after EHLO from unknow ... show more 2026-07-06T00:54:35.103576-04:00 mail postfix/smtpd[1126907]: lost connection after EHLO from unknown[47.96.224.42] 2026-07-06T00:54:35.303470-04:00 mail postfix/smtpd[1126907]: improper command pipelining after CONNECT from unknown[47.96.224.42]: HELP\r\n 2026-07-06T00:54:42.803473-04:00 mail postfix/smtpd[1126907]: lost connection after UNKNOWN from unknown[47.96.224.42] ... show less	Email Spam Brute-Force
🇺🇸 tk103	2026-07-05 17:58:45 (1 week ago)	postfix	Brute-Force
🇭🇰 PingMeMaybe	2026-07-05 17:33:57 (1 week ago)	Blocked by UFW on hk [25/tcp] Source port: 34819 TTL: 31 Packet length: 44 TOS: 0x00 This report wa ... show more Blocked by UFW on hk [25/tcp] Source port: 34819 TTL: 31 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Email Spam
🇯🇵 joehorn.tw	2026-07-05 12:55:57 (1 week ago)	2026-07-05T20:50:04.378801+08:00 Galaxy postfix/smtpd[62002]: lost connection after EHLO from unknow ... show more 2026-07-05T20:50:04.378801+08:00 Galaxy postfix/smtpd[62002]: lost connection after EHLO from unknown[47.96.224.42] 2026-07-05T20:55:53.416975+08:00 Galaxy postfix/smtpd[62110]: lost connection after CONNECT from unknown[47.96.224.42] 2026-07-05T20:55:56.922661+08:00 Galaxy postfix/smtpd[62110]: lost connection after STARTTLS from unknown[47.96.224.42] ... show less	Email Spam
🇬🇧 pearbright	2026-07-05 03:45:51 (1 week ago)	2026-07-05T03:44:44.219384+00:00 srv1093252 kernel: [3969060.143861] [UFW BLOCK] IN=eth0 OUT= MAC=28 ... show more 2026-07-05T03:44:44.219384+00:00 srv1093252 kernel: [3969060.143861] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=47.96.224.42 DST=72.61.19.109 LEN=44 TOS=0x08 PREC=0x20 TTL=25 ID=64145 PROTO=TCP SPT=46479 DPT=25 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-05T03:44:44.748970+00:00 srv1093252 kernel: [3969060.673121] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=47.96.224.42 DST=72.61.19.109 LEN=44 TOS=0x08 PREC=0x20 TTL=30 ID=205 PROTO=TCP SPT=46481 DPT=25 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-05T03:45:23.736004+00:00 srv1093252 kernel: [3969099.660230] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=47.96.224.42 DST=72.61.19.109 LEN=328 TOS=0x08 PREC=0x20 TTL=29 ID=4162 PROTO=UDP SPT=41945 DPT=31108 LEN=308 2026-07-05T03:45:25.805921+00:00 srv1093252 kernel: [3969101.729975] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=47.96.224.42 DST=72.61.19.109 LEN=60 TOS=0x08 PREC= ... show less	Port Scan
🇮🇱 spd.co.il	2026-04-13 01:03:47 (3 months ago)	Port scan detected on multiple ports	Port Scan
Anonymous	2026-04-12 14:09:34 (3 months ago)	2026-04-12 22:09:32 TLS Error: tls-crypt unwrapping failed from [AF_INET]47.96.224.42:53288 ...	VPN IP Port Scan
🇫🇷 Coco Bongo	2026-04-12 09:32:58 (3 months ago)	1775986376 - 04/12/2026 11:32:56 Host: 47.96.224.42/47.96.224.42 Port: 161 UDP Blocked ...	Port Scan
🇺🇸 mutebot.net	2026-03-15 23:04:17 (3 months ago)	SRC=47.96.224.42, PROTO=TCP, SPT=64067, DPT=25	Port Scan
🇹🇷 rtbh.com.tr	2026-03-13 20:12:02 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-12 20:12:01 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 security.rdmc.fr	2026-03-12 17:37:29 (4 months ago)	Port Scan Attack proto:UDP src:53317 dst:69	Port Scan
🇭🇺 DumaNet	2026-03-11 08:57:00 (4 months ago)	Blocked for port scanning. Time: Tue Mar 10. 15:12:23 2026 +0100 IP: 47.96.224.42 (CN/China/-) ... show more Blocked for port scanning. Time: Tue Mar 10. 15:12:23 2026 +0100 IP: 47.96.224.42 (CN/China/-) Sample of block hits: Mar 10 15:08:39 vserv kernel: [41135796.122852] Firewall: UDP_IN Blocked IN=eth0 OUT= MAC= SRC=47.96.224.42 DST=[removed] LEN=79 TOS=0x00 PREC=0x00 TTL=22 ID=37529 PROTO=UDP SPT=45962 DPT=389 LEN=59 Mar 10 15:08:41 vserv kernel: [41135798.165370] Firewall: UDP_IN Blocked IN=eth0 OUT= MAC= SRC=47.96.224.42 DST=[removed] LEN=79 TOS=0x00 PREC=0x00 TTL=39 ID=25046 PROTO=UDP SPT=45964 DPT=389 LEN=59 Mar 10 15:09:45 vserv kernel: [41135862.194023] Firewall: UDP_IN Blocked IN=eth0 OUT= MAC= SRC=47.96.224.42 DST=[removed] LEN=76 TOS=0x00 PREC=0x00 TTL=22 ID=62711 PROTO=UDP SPT=45962 DPT=123 LEN=56 Mar 10 15:09:45 vserv kernel: [41135862.194491] Firewall: UDP_IN Blocked IN=eth0 OUT= MAC= SRC=47.96.224.42 DST=[removed] LEN=76 TOS=0x00 PREC=0x00 TTL=38 ID=62711 PROTO=UDP SPT=45962 DPT=123 LEN=56 Mar 10 15:09:46 vserv kernel: [41135863.213491] Firewall: UDP_IN Blocked IN=eth0 OUT= MAC show less	Port Scan

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇭 180.191.22.25

🇧🇷 177.11.196.79

🇵🇱 176.53.159.198

🇺🇸 172.200.228.35

🇬🇧 87.106.65.126

🇳🇱 45.148.10.157

🇺🇸 44.192.8.8

🇺🇸 34.73.175.44

🇺🇸 34.21.18.197

🇺🇸 2607:f8b0:4004:c27::12a

🇩🇪 213.209.159.242

🇳🇱 195.178.110.232

🇧🇦 185.65.107.14

🇺🇸 167.71.98.184

🇻🇳 103.189.208.13

🇳🇱 91.92.42.81

🇳🇱 91.92.40.41

🇺🇸 44.238.119.81

🇻🇳 42.96.19.37

🇨🇳 36.110.172.218