JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.98.180.144

47.98.180.144 was found in our database!

This IP was reported 209 times. Confidence of Abuse is 45%: ?

45%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.98.180.144

Whois 47.98.180.144

IP Abuse Reports for 47.98.180.144:

This IP address has been reported a total of 209 times from 57 distinct sources. 47.98.180.144 was first reported on March 12th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 baltic-lab.com	2026-08-01 08:05:15 (8 hours ago)	2026-08-01T10:02:09.062920+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-08-01T10:02:09.062920+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.98.180.144 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=60650 PROTO=TCP SPT=51328 DPT=58082 WINDOW=1024 RES=0x00 SYN URGP=0 2026-08-01T10:02:26.053759+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.98.180.144 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=27753 PROTO=TCP SPT=51328 DPT=9203 WINDOW=1024 RES=0x00 SYN URGP=0 2026-08-01T10:02:46.237767+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.98.180.144 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=52641 PROTO=TCP SPT=51328 DPT=8311 WINDOW=1024 RES=0x00 SYN URGP=0 2026-08-01T10:03:24.546054+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.98.180.144 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=27138 PROTO=TCP SPT=51328 DPT=58400 WINDOW= ... show less	Brute-Force Hacking
🇩🇪 wlt-blocker	2026-07-31 12:54:20 (1 day ago)	Illegal port scans	Port Scan
🇳🇱 GabrielJST	2026-07-31 12:10:02 (1 day ago)	Port Scan detected from 47.98.180.144 (CN/China/-).	Port Scan
🇺🇸 schematics.cc	2026-07-31 11:51:41 (1 day ago)	Blocked by on honeypot2 [8011/tcp] \| SPT: 58695 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: abus ... show more Blocked by on honeypot2 [8011/tcp] \| SPT: 58695 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan
🇯🇵 jay hung	2026-07-31 06:49:58 (1 day ago)	2026-07-31T06:49:57.403025+00:00 quarktech kernel: [238772.745989] [UFW BLOCK] IN=eth0 OUT= MAC=22:0 ... show more 2026-07-31T06:49:57.403025+00:00 quarktech kernel: [238772.745989] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=47.98.180.144 DST=172.237.20.248 LEN=40 TOS=0x00 PREC=0x00 TTL=230 ID=42508 PROTO=TCP SPT=40595 DPT=1081 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇦 alexbfr	2026-07-18 00:43:19 (2 weeks ago)	Fail2Ban Report, custom-honeypot jail: Automated honeypot detection.	Port Scan
🇪🇸 gnom4ik	2026-07-15 02:16:09 (2 weeks ago)	ban-reviewer auto report; ip=47.98.180.144; scenario=ssh:bruteforce; scenario_context=ssh:bruteforce ... show more ban-reviewer auto report; ip=47.98.180.144; scenario=ssh:bruteforce; scenario_context=ssh:bruteforce,firehol_greensnow; verdict=valid_ban; confidence=0.92; categories=18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high show less	Brute-Force SSH
🇺🇸 micropedro	2026-07-01 21:30:40 (4 weeks ago)	4 incidents: malicious activity. First: 2026-06-24 16:30, Last: 2026-07-01 17:30 UTC. Triggers: ufw- ... show more 4 incidents: malicious activity. First: 2026-06-24 16:30, Last: 2026-07-01 17:30 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 micropedro	2026-07-01 21:30:19 (4 weeks ago)	3 incidents: malicious activity. First: 2026-06-17 15:30, Last: 2026-07-01 17:30 UTC. Triggers: ufw- ... show more 3 incidents: malicious activity. First: 2026-06-17 15:30, Last: 2026-07-01 17:30 UTC. Triggers: ufw-repeater. show less	Port Scan
🇩🇪 anycast_ac	2026-06-21 16:56:07 (1 month ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/11211 (memcached). Commands cap ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/11211 (memcached). Commands captured: $ HEAD / HTTP/1.1 $ Host: 87.120.93.156:11211 $ Accept-Encoding: identity show less	DDoS Attack IoT Targeted Brute-Force
🇩🇪 anycast_ac	2026-06-21 16:37:06 (1 month ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/11211 (memcached).	DDoS Attack IoT Targeted Brute-Force
🇺🇸 micropedro	2026-06-17 19:31:00 (1 month ago)	4 incidents: malicious activity. First: 2026-06-10 14:30, Last: 2026-06-17 15:31 UTC. Triggers: ufw- ... show more 4 incidents: malicious activity. First: 2026-06-10 14:30, Last: 2026-06-17 15:31 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 micropedro	2026-06-10 18:30:21 (1 month ago)	3 incidents: malicious activity. First: 2026-05-27 12:30, Last: 2026-06-10 14:30 UTC. Triggers: ufw- ... show more 3 incidents: malicious activity. First: 2026-05-27 12:30, Last: 2026-06-10 14:30 UTC. Triggers: ufw-repeater. show less	Port Scan
🇬🇧 PeravixGroup	2026-06-07 11:15:28 (1 month ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇬🇧 PeravixGroup	2026-06-05 20:41:05 (1 month ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host

Showing 1 to 15 of 209 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 103.180.212.24

🇮🇷 195.182.38.46

🇫🇮 147.185.133.44

🇵🇰 139.135.46.224

🇨🇳 114.67.127.241

🇧🇩 103.183.62.0

🇵🇰 103.35.210.97

🇧🇷 45.161.5.202

🇺🇸 45.61.187.220

🇬🇧 35.203.210.68

🇺🇸 34.125.160.132

🇺🇸 216.25.89.86

🇺🇸 198.1.93.192

🇺🇸 178.128.158.175

🇨🇳 115.190.192.7

🇸🇬 103.250.10.63

🇺🇸 40.77.167.132

🇳🇱 195.178.110.30

🇲🇽 189.194.140.170

🇲🇽 187.213.151.192