JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

123.52.173.47

Recent Activity

Abuse Confidence Score

100% Critical

196 reports

152 reporters · latest 1 hour ago

ISP: CHINANET HENAN PROVINCE NETWORK
Usage Type: Fixed Line ISP
ASN: AS4134
Domain Name: hntele.com
Country: 🇨🇳 China
City: Zhengzhou, Henan

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

196 from 152 distinct reporters

First reported

October 31st 2026

Most recent report

1 hour ago

Last 60 days

Top reporter locations 🇩🇪 Germany 49 🇺🇸 United States of America 25 🇫🇷 France 14

Most common categories Brute-Force 175 SSH 174 Port Scan 17 Hacking 12 Web App Attack 3

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 paradoxnetworks	2026-11-07 14:40:05 UTC · (1 hour ago)	2026-11-07T14:28:35.251333+00:00 rc02 sshd-session[2356966]: Invalid user rich from 123.52.173.47 port 35384 2026-11-07T14:37:40.119502+00:00 rc02 sshd-session[2357111]: Invalid user maria from 123.52.173.47 port 45456 2026-11-07T14:40:04.583798+00:0 ... show more 2026-11-07T14:28:35.251333+00:00 rc02 sshd-session[2356966]: Invalid user rich from 123.52.173.47 port 35384 2026-11-07T14:37:40.119502+00:00 rc02 sshd-session[2357111]: Invalid user maria from 123.52.173.47 port 45456 2026-11-07T14:40:04.583798+00:00 rc02 sshd-session[2357131]: Invalid user matin from 123.52.173.47 port 40892 ... show less	Brute-Force SSH
Anonymous	2026-11-07 14:05:08 UTC · (1 hour ago)	2026-11-07T22:01:11.333780+08:00 HKCM1-20260502115917ab4c7d sshd-session[358325]: Failed password for root from 123.52.173.47 port 50768 ssh2 2026-11-07T22:02:25.749844+08:00 HKCM1-20260502115917ab4c7d sshd-session[358391]: Invalid user ftpuser from ... show more 2026-11-07T22:01:11.333780+08:00 HKCM1-20260502115917ab4c7d sshd-session[358325]: Failed password for root from 123.52.173.47 port 50768 ssh2 2026-11-07T22:02:25.749844+08:00 HKCM1-20260502115917ab4c7d sshd-session[358391]: Invalid user ftpuser from 123.52.173.47 port 33488 2026-11-07T22:02:25.756238+08:00 HKCM1-20260502115917ab4c7d sshd-session[358391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.52.173.47 2026-11-07T22:02:27.657316+08:00 HKCM1-20260502115917ab4c7d sshd-session[358391]: Failed password for invalid user ftpuser from 123.52.173.47 port 33488 ssh2 2026-11-07T22:05:05.020378+08:00 HKCM1-20260502115917ab4c7d sshd-session[358495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.52.173.47 user=root 2026-11-07T22:05:07.178530+08:00 HKCM1-20260502115917ab4c7d sshd-session[358495]: Failed password for root from 123.52.173.47 port 55410 ssh2 ... show less	Brute-Force SSH
🇩🇪 filip2cz	2026-11-07 12:57:54 UTC · (2 hours ago)	Nov 7 13:51:25 system-status sshd[3030488]: Failed password for invalid user astra from 123.52.173.47 port 58074 ssh2 Nov 7 13:57:52 system-status sshd[3038416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhos ... show more Nov 7 13:51:25 system-status sshd[3030488]: Failed password for invalid user astra from 123.52.173.47 port 58074 ssh2 Nov 7 13:57:52 system-status sshd[3038416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.52.173.47 user=root Nov 7 13:57:53 system-status sshd[3038416]: Failed password for root from 123.52.173.47 port 45136 ssh2 ... show less	Brute-Force SSH
🇧🇾 hbars.by	2026-11-07 11:59:36 UTC · (3 hours ago)	2026-11-07T14:59:33.492813+03:00 radionet sshd[2053897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.52.173.47 user=root 2026-11-07T14:59:36.130111+03:00 radionet sshd[2053897]: Failed password for roo ... show more 2026-11-07T14:59:33.492813+03:00 radionet sshd[2053897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.52.173.47 user=root 2026-11-07T14:59:36.130111+03:00 radionet sshd[2053897]: Failed password for root from 123.52.173.47 port 38780 ssh2 show less	Brute-Force SSH
🇨🇦 oh.mg	2026-11-07 11:16:37 UTC · (4 hours ago)	(sshd) Failed SSH login from 123.52.173.47 (CN/China/47.173.52.123.broad.ly.ha.dynamic.163data.com.cn): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: 2026-11-07T11:11:11.558527+00:00 rygel sshd[13161]: pam_unix(sshd:auth): ... show more (sshd) Failed SSH login from 123.52.173.47 (CN/China/47.173.52.123.broad.ly.ha.dynamic.163data.com.cn): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: 2026-11-07T11:11:11.558527+00:00 rygel sshd[13161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.52.173.47 user=root 2026-11-07T11:11:13.468715+00:00 rygel sshd[13161]: Failed password for root from 123.52.173.47 port 36036 ssh2 2026-11-07T11:14:20.764381+00:00 rygel sshd[30826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.52.173.47 user=root 2026-11-07T11:14:23.285072+00:00 rygel sshd[30826]: Failed password for root from 123.52.173.47 port 33796 ssh2 2026-11-07T11:16:32.739409+00:00 rygel sshd[43470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.52.173.47 user=root show less	Brute-Force SSH
🇳🇱 DIICOT	2026-11-07 11:09:14 UTC · (4 hours ago)	Post-auth malicious activity: attacker executed reconnaissance commands after successful SSH auth.	Hacking
🇺🇸 dchu096	2026-11-07 10:44:25 UTC · (4 hours ago)	2026-11-07T05:43:26.509202-05:00 Bot2 sshd-session[150573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.52.173.47 2026-11-07T05:43:28.154753-05:00 Bot2 sshd-session[150573]: Failed password for invalid ... show more 2026-11-07T05:43:26.509202-05:00 Bot2 sshd-session[150573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.52.173.47 2026-11-07T05:43:28.154753-05:00 Bot2 sshd-session[150573]: Failed password for invalid user object from 123.52.173.47 port 57128 ssh2 2026-11-07T05:44:24.481068-05:00 Bot2 sshd-session[150577]: Invalid user teach from 123.52.173.47 port 38116 ... show less	Brute-Force SSH
🇮🇳 92kmees	2026-11-07 10:43:18 UTC · (4 hours ago)	Fail2Ban ban from SSH jail	Brute-Force SSH
🇩🇪 thefaxe	2026-11-07 08:15:32 UTC · (7 hours ago)	2026-11-07T09:13:13.548240+01:00 ka02 sshd-session[1897038]: Connection from 123.52.173.47 port 35254 on 46.38.234.197 port 22 rdomain "" 2026-11-07T09:13:14.585733+01:00 ka02 sshd-session[1897038]: Invalid user gitlab-runner from 123.52.173.47 port ... show more 2026-11-07T09:13:13.548240+01:00 ka02 sshd-session[1897038]: Connection from 123.52.173.47 port 35254 on 46.38.234.197 port 22 rdomain "" 2026-11-07T09:13:14.585733+01:00 ka02 sshd-session[1897038]: Invalid user gitlab-runner from 123.52.173.47 port 35254 2026-11-07T09:13:14.784293+01:00 ka02 sshd-session[1897038]: Disconnected from invalid user gitlab-runner 123.52.173.47 port 35254 [preauth] 2026-11-07T09:15:30.226513+01:00 ka02 sshd-session[1897193]: Connection from 123.52.173.47 port 58904 on 46.38.234.197 port 22 rdomain "" 2026-11-07T09:15:32.230433+01:00 ka02 sshd-session[1897193]: Invalid user phoenix from 123.52.173.47 port 58904 ... show less	Brute-Force SSH
🇪🇪 EndCore Group	2026-11-07 08:12:34 UTC · (7 hours ago)	2026-11-07T08:12:31.784763vm162835.hosted-by.qwins.co sshd[179864]: Invalid user gitlab-runner from 123.52.173.47 port 58806 2026-11-07T08:12:31.787120vm162835.hosted-by.qwins.co sshd[179864]: pam_unix(sshd:auth): authentication failure; logname= uid ... show more 2026-11-07T08:12:31.784763vm162835.hosted-by.qwins.co sshd[179864]: Invalid user gitlab-runner from 123.52.173.47 port 58806 2026-11-07T08:12:31.787120vm162835.hosted-by.qwins.co sshd[179864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.52.173.47 2026-11-07T08:12:33.361541vm162835.hosted-by.qwins.co sshd[179864]: Failed password for invalid user gitlab-runner from 123.52.173.47 port 58806 ssh2 ... show less	Brute-Force SSH
🇨🇳 Pumilk	2026-11-07 07:03:20 UTC · (8 hours ago)	SSH brute-force (5 failed logins), auto-banned by fail2ban	Brute-Force SSH
🇲🇩 chummy-clinch8q	2026-11-07 06:53:30 UTC · (8 hours ago)	SSH brute-force detected by Fail2Ban on linguae.lat	Brute-Force SSH
🇩🇪 genclikfederasyonu.org	2026-11-07 04:54:52 UTC · (10 hours ago)	fail2banned (ssh brute)	Brute-Force SSH
🇩🇪 formality	2026-11-07 03:47:19 UTC · (11 hours ago)	Invalid user si1d from 123.52.173.47 port 35622	Brute-Force SSH
🇪🇸 librebit	2026-11-07 01:39:08 UTC · (14 hours ago)	Brute force	Brute-Force

Showing 1 to 15 of 196 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇳 115.97.98.66

🇩🇪 23.132.164.184

🇺🇸 216.73.216.78

🇨🇳 183.199.223.102

🇨🇳 116.179.32.147

🇺🇸 69.152.169.250

🇨🇳 183.233.155.146

🇨🇴 181.71.241.220

🇺🇸 162.216.149.131

🇭🇰 119.28.46.114

🇩🇪 69.5.169.227

🇭🇰 42.200.66.164

🇧🇪 35.210.116.204

🇮🇩 27.50.20.36

🇩🇪 5.253.235.93

🇨🇱 190.20.248.203

🇨🇱 181.172.35.58

🇨🇴 181.68.0.215

🇮🇶 178.210.229.183

🇹🇭 165.154.120.223