JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.115.160.48

47.115.160.48 was found in our database!

This IP was reported 101 times. Confidence of Abuse is 100%: ?

100%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.115.160.48

Whois 47.115.160.48

IP Abuse Reports for 47.115.160.48:

This IP address has been reported a total of 101 times from 81 distinct sources. 47.115.160.48 was first reported on April 25th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Admins@FBN	2026-06-23 15:46:59 (2 hours ago)	FW-PortScan: Traffic Blocked srcport=56174 dstport=2222	Port Scan
🇩🇪 Freenex1911	2026-06-23 10:16:32 (7 hours ago)	2026-06-23T12:16:24.355867+02:00 fusco sshd-session[3207339]: Failed password for root from 47.115.1 ... show more 2026-06-23T12:16:24.355867+02:00 fusco sshd-session[3207339]: Failed password for root from 47.115.160.48 port 46846 ssh2 2026-06-23T12:16:28.210891+02:00 fusco sshd-session[3207339]: Failed password for root from 47.115.160.48 port 46846 ssh2 2026-06-23T12:16:32.140871+02:00 fusco sshd-session[3207339]: Failed password for root from 47.115.160.48 port 46846 ssh2 ... show less	Brute-Force SSH
🇧🇷 helix	2026-06-23 09:04:30 (9 hours ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇩🇪 Kotiacat_one	2026-06-23 07:10:23 (10 hours ago)	2026-06-23T07:10:21.009952+00:00 powarnitzynalexander5.serv.host sshd-session[25548]: pam_unix(sshd: ... show more 2026-06-23T07:10:21.009952+00:00 powarnitzynalexander5.serv.host sshd-session[25548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.115.160.48 user=root 2026-06-23T07:10:22.929977+00:00 powarnitzynalexander5.serv.host sshd-session[25548]: Failed password for root from 47.115.160.48 port 43366 ssh2 ... show less	Brute-Force SSH
🇺🇸 anon333	2026-06-20 13:33:59 (3 days ago)	Hacker syslog review 1781962439	Hacking
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-20 12:29:11 (3 days ago)	Honeypot hit: SSH handshake/banner (22 bytes of payload); 2222 [1] TCP	Brute-Force SSH
🇺🇸 anon333	2026-06-20 11:57:47 (3 days ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-20T11:57:41Z and 2026-06-2 ... show more Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-20T11:57:41Z and 2026-06-20T11:57:46Z show less	Brute-Force SSH
🇩🇪 fynndows.de	2026-06-18 18:55:52 (4 days ago)	2026-06-18T18:55:50.178193+00:00 24fire sshd-session[3495518]: Failed password for root from 47.115. ... show more 2026-06-18T18:55:50.178193+00:00 24fire sshd-session[3495518]: Failed password for root from 47.115.160.48 port 49830 ssh2 2026-06-18T18:55:52.325245+00:00 24fire sshd-session[3495518]: Failed password for root from 47.115.160.48 port 49830 ssh2 ... show less	Brute-Force SSH
🇫🇷 ZO3N	2026-06-16 17:30:46 (1 week ago)	SSH brute force — 3 tentatives, user: root 2026-06-16T19:30:19.819253+02:00 vps-de5e3fcc sshd-sessio ... show more SSH brute force — 3 tentatives, user: root 2026-06-16T19:30:19.819253+02:00 vps-de5e3fcc sshd-session[429807]: Failed password for root from 47.115.160.48 port 56524 ssh2 2026-06-16T19:30:22.686563+02:00 vps-de5e3fcc sshd-session[429807]: Failed password for root from 47.115.160.48 port 56524 ssh2 2026-06-16T19:30:26.418670+02:00 vps-de5e3fcc sshd-session[429807]: Failed password for root from 47.115.160.48 port 56524 ssh2 show less	Brute-Force SSH
🇸🇬 updown.io	2026-06-16 16:21:37 (1 week ago)	2026-06-16T16:21:25.115463+00:00 sin.updn.io sshd[3824461]: Failed password for root from 47.115.160 ... show more 2026-06-16T16:21:25.115463+00:00 sin.updn.io sshd[3824461]: Failed password for root from 47.115.160.48 port 56340 ssh2 2026-06-16T16:21:27.923452+00:00 sin.updn.io sshd[3824461]: Failed password for root from 47.115.160.48 port 56340 ssh2 2026-06-16T16:21:30.538661+00:00 sin.updn.io sshd[3824461]: Failed password for root from 47.115.160.48 port 56340 ssh2 2026-06-16T16:21:32.828449+00:00 sin.updn.io sshd[3824461]: Failed password for root from 47.115.160.48 port 56340 ssh2 2026-06-16T16:21:35.976426+00:00 sin.updn.io sshd[3824461]: Failed password for root from 47.115.160.48 port 56340 ssh2 ... show less	Brute-Force SSH
🇮🇩 asagiri.moe	2026-06-16 03:22:41 (1 week ago)	2026-06-16T10:22:25.485735+07:00 yuki sshd[2122809]: Failed password for root from 47.115.160.48 por ... show more 2026-06-16T10:22:25.485735+07:00 yuki sshd[2122809]: Failed password for root from 47.115.160.48 port 41924 ssh2 2026-06-16T10:22:38.623077+07:00 yuki sshd[2122809]: Disconnecting authenticating user root 47.115.160.48 port 41924: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] 2026-06-16T10:22:40.549292+07:00 yuki sshd[2122910]: Invalid user test from 47.115.160.48 port 51612 ... show less	Brute-Force SSH
🇩🇪 andorin	2026-06-15 04:02:16 (1 week ago)	SSH/Telnet honeypot (endlessh) on habith.eu: 2 connection attempts trapped, total tarpit time 40s. A ... show more SSH/Telnet honeypot (endlessh) on habith.eu: 2 connection attempts trapped, total tarpit time 40s. Automated report. show less	Port Scan Brute-Force SSH
🇲🇿 delsio	2026-06-14 17:10:11 (1 week ago)	AS37697 ntopng observed inbound attack; alert=Live Flow High Score; source=47.115.160.48; destinatio ... show more AS37697 ntopng observed inbound attack; alert=Live Flow High Score; source=47.115.160.48; destination=169.255.134.235; destination_port=2222; score=110; action=bgp_blackhole_and_flowspec_discard; block_duration=18000s; reason=high-confidence ntopng_blacklisted alert=Live Flow High Score dst=169.255.134.235 port=2222 show less	Port Scan
🇫🇷 zulzeen	2026-06-14 16:26:49 (1 week ago)	[distribamap-0] Blocked by SysWarden Firewall [GEO] (Database/Cache Attack)	Hacking Brute-Force
🇩🇪 marcel-knorr.de	2026-06-13 01:46:19 (1 week ago)	[easydock-loadbalancer] SSH login failed	Brute-Force SSH

Showing 1 to 15 of 101 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 69.5.169.197

🇮🇶 65.20.250.93

🇸🇩 197.254.238.254

🇵🇱 194.180.48.33

🇮🇩 152.32.153.53

🇰🇷 140.245.69.89

🇫🇷 91.231.89.187

🇺🇸 54.224.11.65

🇬🇪 46.49.53.119

🇳🇱 45.142.193.18

🇺🇦 45.11.57.172

🇵🇰 39.53.232.36

🇭🇰 199.45.154.138

🇳🇱 188.137.237.32

🇨🇳 180.76.105.69

🇧🇷 179.184.241.69

🇺🇸 162.216.149.205

🇵🇰 110.93.236.34

🇫🇷 91.196.152.93

🇿🇦 82.21.244.104