103.47.81.42

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
90% Critical
47 reports
42 reporters · latest 3 weeks ago
ISP
YunNan LanDui Network Technology co., LTD
Usage Type
Data Center/Web Hosting/Transit
ASN
AS134765
Domain Name
landui.com
Country
🇨🇳 China
City
Kunming, Yunnan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
47 from 42 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 11 🇺🇸 United States of America 7 🇧🇷 Brazil 3
Most common categories SSH 42 Brute-Force 41 Port Scan 4 Hacking 2 Spoofing 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇳 Parth Maniar
This IP address carried out 27 SSH credential attack (attempts) on 16-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Brute-Force SSH
🇮🇳 Parth Maniar
This IP address carried out 271 port scanning attempts on 16-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Port Scan SSH
🇮🇳 Parth Maniar
This IP address carried out 1 SSH credential attack (attempts) on 15-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Brute-Force SSH
🇫🇮 vereinshosting
Invalid user wpuser from 103.47.81.42 port 55898
Brute-Force SSH
🇧🇷 ItsClairton
Brute-Force SSH
🇫🇷 sshboga
SSH brute-force on cowrie honeypot port 22. 3 login attempt(s). Usernames: wpuser, root. Passwords tried: $satcom$, wpuser, krakow.
Brute-Force SSH
🇧🇷 SecOpsSL
Brute-Force SSH
🇸🇬 Pumilk
SSH brute-force (5 failed logins), auto-banned by fail2ban
Brute-Force SSH
Anonymous
Reported by Charon (Fail2Ban)
SSH
🇺🇸 LSPCCU
TSEC Honeypot Network report. Threat score: 99/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: cowrie. Context: Attacker IP from China (AS134765, CHINANET Yunnan province IDC1 network).
Port Scan Hacking Brute-Force Web App Attack SSH
🇫🇷 eszfrigyes.com
2026-10-16T14:41:48.192269+02:00 mail sshd[424015]: Invalid user mrr from 103.47.81.42 port 43054 ...
Brute-Force SSH
🇫🇷 eszfrigyes.com
Brute-Force SSH
🇺🇸 Matthew Barnes
2026-10-16T04:14:01.368444-06:00 jump sshd[198766]: Invalid user text from 103.47.81.42 port 43260 2026-10-16T04:42:19.432626-06:00 jump sshd[198821]: Invalid user oraprod from 103.47.81.42 port 36704 ...
Brute-Force
🇩🇪 AnonDrop
Brute-Force
🇩🇪 formality
Invalid user ultra from 103.47.81.42 port 41130
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 104.243.245.121
🇺🇸 64.57.177.181
🇫🇷 51.159.64.158
🇳🇱 31.59.219.121
🇧🇷 191.7.159.201
🇨🇴 181.78.83.38
🇺🇸 167.172.23.50
🇺🇸 147.182.172.213
🇧🇷 138.204.130.142
🇺🇸 104.164.123.122
🇹🇷 94.103.47.213
🇳🇱 86.38.187.32
🇫🇷 85.204.70.96
🇧🇭 77.69.202.125
🇺🇸 70.184.126.19
🇺🇸 57.141.0.12
🇮🇪 31.13.127.85
🇺🇸 157.230.60.140
🇨🇳 120.48.33.69
🇸🇬 107.155.55.85
feedback