JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.99.105.215

47.99.105.215 was found in our database!

This IP was reported 188 times. Confidence of Abuse is 78%: ?

78%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.99.105.215

Whois 47.99.105.215

IP Abuse Reports for 47.99.105.215:

This IP address has been reported a total of 188 times from 50 distinct sources. 47.99.105.215 was first reported on March 24th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dusfor72	2026-06-10 18:31:48 (3 hours ago)	aggressive portscan ...	Port Scan
🇩🇪 anycast_ac	2026-06-09 01:14:06 (1 day ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/9999 (generic). Commands captur ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/9999 (generic). Commands captured: $ HEAD / HTTP/1.1 show less	DDoS Attack IoT Targeted Brute-Force
🇩🇪 anycast_ac	2026-06-09 00:58:33 (1 day ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/9999 (generic). Commands captur ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/9999 (generic). Commands captured: $ show less	DDoS Attack IoT Targeted Brute-Force
🇫🇷 security.rdmc.fr	2026-06-08 02:17:20 (2 days ago)	Port Scan Attack proto:TCP src:45029 dst:5062	Port Scan
🇺🇸 baltic-lab.com	2026-06-06 14:15:17 (4 days ago)	2026-06-06T16:14:00.991607+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-06-06T16:14:00.991607+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.99.105.215 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=12829 PROTO=TCP SPT=55239 DPT=1502 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-06T16:14:17.106039+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.99.105.215 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=18111 PROTO=TCP SPT=55239 DPT=9444 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-06T16:14:38.577945+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.99.105.215 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=60264 PROTO=TCP SPT=55239 DPT=3800 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-06T16:14:59.751394+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=47.99.105.215 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=64137 PROTO=TCP SPT=55239 DPT=20311 WINDOW=1 ... show less	Brute-Force Hacking
🇩🇪 Starburst SysOp Team	2026-06-05 00:12:23 (5 days ago)	Request Missing a Host Header. Operator EQ matched 0 at REQUEST_HEADERS. (920280-nue6-2)	Hacking
🇫🇷 ISPLtd	2026-06-04 12:18:46 (6 days ago)	Jun 4 09:18:43 47.99.105.215 TCP SPT=55521 DPT=39750 SYN Jun 4 09:18:45 47.99.105.215 TCP SPT=5552 ... show more Jun 4 09:18:43 47.99.105.215 TCP SPT=55521 DPT=39750 SYN Jun 4 09:18:45 47.99.105.215 TCP SPT=55521 DPT=25172 SYN Jun 4 09:18:45 47.99.105.215 TCP SPT=55521 DPT=60196 ... show less	Port Scan
🇺🇸 sandra361	2026-06-01 22:27:02 (1 week ago)	Port scan detected: 9 attempts across 9 ports (17107,27000,3205,4001,50002,6088,8823,8993,9026). \| E ... show more Port scan detected: 9 attempts across 9 ports (17107,27000,3205,4001,50002,6088,8823,8993,9026). \| Evidence: GHOST_SCAN:IN=enp1s0 OUT= SRC=47.99.105.215 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=20169 PROTO=TCP SPT=52794 DPT=17107 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇨🇳 pengpeng	2026-06-01 05:19:41 (1 week ago)	monitor: on VM-0-7-ubuntu \| port: 80 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇩🇪 kingjan1999	2026-05-31 08:04:41 (1 week ago)	Blocked by UFW [11551/tcp] \| SPT: 54662 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/s ... show more Blocked by UFW [11551/tcp] \| SPT: 54662 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-29 20:43:39 (1 week ago)	Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2376. Sever ... show more Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2376. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-29 10:53:13 (1 week ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 masterguru	2026-05-27 02:21:17 (2 weeks ago)	Port Scan detected from 47.99.105.215 (-). 11 hits in the last 297 seconds (0-165)	Port Scan
🇺🇸 baltic-lab.com	2026-05-26 10:40:10 (2 weeks ago)	2026-05-26T12:40:01.059263+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-05-26T12:40:01.059263+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:d0:e9:08:00 SRC=47.99.105.215 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=50612 PROTO=TCP SPT=52000 DPT=50450 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-26T12:40:01.407135+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:d0:e9:08:00 SRC=47.99.105.215 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=23088 PROTO=TCP SPT=52000 DPT=30641 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-26T12:40:02.602425+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:d0:e9:08:00 SRC=47.99.105.215 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=2855 PROTO=TCP SPT=52000 DPT=38845 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-26T12:40:02.948910+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:d0:e9:08:00 SRC=47.99.105.215 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=29046 PROTO=TCP SPT=52000 DPT=45951 WINDOW ... show less	Brute-Force Hacking
🇫🇷 Thaliruth	2026-05-22 08:01:02 (2 weeks ago)	May 22 10:00:54 151 dovecot: pop3-login: Login aborted: Connection closed: SSL_accept() failed: erro ... show more May 22 10:00:54 151 dovecot: pop3-login: Login aborted: Connection closed: SSL_accept() failed: error:0A00018C:SSL routines::version too low (disconnected during TLS handshake) (tls_handshake_not_finished): user=<>, rip=47.99.105.215, lip=46.252.194.151, TLS handshaking: SSL_accept() failed: error:0A00018C:SSL routines::version too low, session=<YPo8bWNSOowvY2nX> May 22 10:00:55 151 dovecot: pop3-login: Login aborted: Connection closed (no auth attempts in 1 secs) (no_auth_attempts): user=<>, rip=47.99.105.215, lip=46.252.194.151, TLS, session=<+W2fbWNSaI0vY2nX> May 22 10:01:01 151 dovecot: pop3-login: Login aborted: Connection closed (no auth attempts in 0 secs) (no_auth_attempts): user=<>, rip=47.99.105.215, lip=46.252.194.151, TLS, session=<q6kGbmNSiI4vY2nX> ... show less	Hacking Brute-Force

Showing 1 to 15 of 188 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 168.119.64.101

🇨🇳 101.68.5.113

🇱🇹 81.30.98.44

🇺🇸 43.159.149.216

🇮🇩 36.93.144.67

🇸🇬 20.153.140.50

🇮🇩 124.40.252.3

🇬🇧 51.89.192.92

🇳🇱 45.148.10.157

🇭🇰 45.142.154.87

🇸🇰 31.134.103.242

🇺🇸 23.110.169.218

🇳🇱 176.65.148.147

🇨🇳 118.248.218.125

🇧🇬 78.128.113.22

🇺🇸 74.48.114.121

🇳🇱 45.148.10.147

🇰🇷 1.238.106.229

🇩🇪 213.209.159.158

🇺🇸 212.119.41.210