JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

47.97.2.138

Recent Activity

Abuse confidence score ?

100% Critical

267 reports

82 reporters · latest 17 hours ago

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 47.97.2.138

Export CSV

This IP address has been reported a total of 267 times from 82 distinct sources. 47.97.2.138 was first reported on March 15th 2025, and the most recent report was 17 hours ago. In the last 60 days, the top reporter locations were: Turkey with 24 reports; United States of America with 11 reports; Germany with 10 reports. The most common categories in these recent reports were: Hacking 31 times; Web App Attack 27 times; Port Scan 27 times; Brute-Force 15 times; SSH 7 times; Other 11 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 Dominicwu	2026-10-04 12:12:35 (17 hours ago)	TCP port scan against non-whitelisted ports on the same router: 38 SYN packet(s) logged by nftables ... show more TCP port scan against non-whitelisted ports on the same router: 38 SYN packet(s) logged by nftables within a 300s window starting 2026-09-07 23:57 (dst ports: 16804,20884,24000,34971,8827; nftables rate-limits logging, actual scan may be larger). Evidence: dst_port=34971 src_port=56621; dst_port=20884 src_port=56621; dst_port=16804 src_port=56621; dst_port=24000 src_port=56621. Reported automatically from firewall/SSH logs collected by abuseipdb-reporter. show less	Port Scan
🇩🇪 HoneyPot-FrPri	2026-10-04 02:38:22 (1 day ago)	1791081502 - 10/04/2026 04:38:22 Host: 47.97.2.138/47.97.2.138 Port: 27665 TCP Blocked ...	Port Scan
🇨🇦 Arpan Sen	2026-10-03 12:59:37 (1 day ago)	Network port/address scan: probed 220 distinct port(s) across 1 host(s); 100% of connections receive ... show more Network port/address scan: probed 220 distinct port(s) across 1 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor. show less	Port Scan
🇺🇸 donarev419	2026-10-03 07:45:54 (1 day ago)	Connection to port 3846 with data transfer. Data preview:	Port Scan Hacking
Anonymous	2026-10-01 22:57:45 (3 days ago)	Port Scan detected from 47.97.2.138 (CN/China/-).	Port Scan
🇹🇷 neron	2026-10-01 22:06:37 (3 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
Anonymous	2026-10-01 20:53:15 (3 days ago)	Port Scan detected from 47.97.2.138 (CN/China/-). 16 hits in the last 60 seconds	Web App Attack
🇨🇦 Blinker73	2026-10-01 08:47:10 (3 days ago)	2026-10-01T04:47 kernel: OUT= SRC=47.97.2.138 LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=5375 PROTO= ... show more 2026-10-01T04:47 kernel: OUT= SRC=47.97.2.138 LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=5375 PROTO=TCP SPT=44426 DPT=12921 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-01T04:47 kernel: OUT= SRC=47.97.2.138 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=18707 PROTO=TCP SPT=44426 DPT=47827 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-01T04:47 kernel: OUT= SRC=47.97.2.138 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=11549 PROTO=TCP SPT=44426 DPT=17614 WINDOW=1024 RES=0x00 SYN URGP= show less	Port Scan
🇩🇪 xavier-momain.eu	2026-10-01 06:13:18 (3 days ago)	CrowdSec ban — scenario: ssh:bruteforce \| report #4	Brute-Force SSH
🇭🇰 sandra361	2026-09-29 16:16:17 (5 days ago)	Port scan detected: 9 attempts across 9 ports (1134, 28685, 32419, 33738, 42134, 43713, 45607, 51652 ... show more Port scan detected: 9 attempts across 9 ports (1134, 28685, 32419, 33738, 42134, 43713, 45607, 51652, 53831). \| Evidence: GHOST_SCAN: IN=eth0 SRC=47.97.2.138 LEN=40 TOS=0x14 PREC=0x00 TTL=242 ID=56845 PROTO=TCP SPT=58564 DPT=43713 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 R.G.	2026-09-29 02:12:16 (6 days ago)	Port Scan detected from 47.97.2.138 (CN/China/-). 11 hits in the last 115 seconds; Ports: ; Direc ... show more Port Scan* detected from 47.97.2.138 (CN/China/-). 11 hits in the last 115 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Sep 29 04:11:59 kernel: Firewall: TCP_IN Blocked* IN=enp5s0 OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=47.97.2.138 DST=0.X.X.X LEN=4 show less	Port Scan
🇭🇰 CyberFox	2026-09-29 00:58:14 (6 days ago)	14221/tcp,24416/tcp,6746/tcp,6815/tcp,38122/tcp,43629/tcp,40938/tcp,49746/tcp,41174/tcp,40523/tcp,19 ... show more 14221/tcp,24416/tcp,6746/tcp,6815/tcp,38122/tcp,43629/tcp,40938/tcp,49746/tcp,41174/tcp,40523/tcp,19209/tcp,710/tcp,39336/tcp,15639/tcp,28658/tcp,26991/tcp,59798/tcp,65422/tcp,9671/tcp,62201/tcp,29966/tcp,5157/tcp,47413/tcp,33657/tcp,48548/tcp,19642/tcp,3943/tcp,30503/tcp (224 or more attempts) show less	Port Scan
🇹🇷 neron	2026-09-28 11:51:38 (6 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇬🇧 Aetherweb Ark	2026-09-28 09:38:24 (6 days ago)	Port Scan detected from 47.97.2.138 (CN/China/-). N in the last X seconds	Port Scan
Anonymous	2026-09-27 12:35:30 (1 week ago)	fail2ban:piguard:14,18	Port Scan Brute-Force

Showing 1 to 15 of 267 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 181.63.178.30

🇺🇸 167.172.18.255

🇺🇸 129.121.115.165

🇳🇱 94.154.43.100

🇺🇸 91.230.168.7

🇳🇱 45.156.128.57

🇷🇴 2.57.121.112

🇳🇱 213.177.179.109

🇺🇸 206.246.18.28

🇬🇧 195.96.139.213

🇷🇺 185.126.130.53

🇧🇷 177.73.162.220

🇫🇷 172.71.130.147

🇩🇪 172.69.151.180

🇨🇳 144.123.77.252

🇺🇸 136.36.189.65

🇹🇭 125.26.168.36

🇮🇳 103.248.234.140

🇩🇪 95.85.236.20

🇳🇱 89.125.255.146