47.116.108.204
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Aliyun Computing Co., LTD
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS37963
- Domain Name
- alibabacloud.com
- Country
- 🇨🇳 China
- City
- Shanghai, Shanghai
Abuse Reports
Total reports
54 from
37 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇺🇸 RAP |
2026-11-05 19:32:51 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇫🇮 iamxorum |
Automated SSH scanner trapped in Endlessh tarpit. Log: 2026-11-05T17:49:53.127668+00:00 XRM-00 endlessh[917]: 2026-11-05T17:49:53.127Z ACCEPT host=::ffff:47.116.108.204 port=34984 fd=4 n=1/4096
...
|
Brute-Force SSH | |
| Anonymous |
$f2bV_matches
|
Brute-Force SSH | |
| 🇺🇸 ISPLtd |
Nov 5 03:46:42 47.116.108.204 TCP SPT=36588 DPT=2222 SYN
Nov 5 03:46:43 47.116.108.204 TCP SPT=36588 DPT=2222 SYN
...
|
Port Scan SSH | |
| 🇩🇪 ITSNF |
Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=2222
|
Port Scan Hacking | |
| 🇨🇿 kronos |
IDS: FlowIntel scan-like source | SID:9900001 | session_sigs:2 | alerts5m:25
|
Port Scan | |
| 🇺🇸 Axel |
Atom Honypot: 30 connections to client:ssh (tcp/2222), ssh (tcp/2222) observed by 1 honeypot sensor between 2026-11-02 17:34 UTC and 2026-11-02 17:35 UTC.
|
SSH | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 2222)
Source port: 45598
TTL: 45
Packet length: 60
TOS: 0x08
This report (for 47.116.108.204) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇨🇴 juan_mesa |
Unauthorized connection attempts to SSH TCP/2222 on 1 MikroTik router(s) (blocked by firewall).
|
Port Scan SSH | |
| 🇩🇪 _ArminS_ |
SP-Scan 35758:2222 detected 2026.11.01 22:22:09
blocked until 2026.12.21 15:24:56
|
Port Scan | |
| 🇩🇪 tc-hawkes.com |
SSH Bruteforce
...
|
Brute-Force SSH | |
| 🇨🇴 juan_mesa |
Unauthorized connection attempts to SSH TCP/2222 on 1 MikroTik router(s) (blocked by firewall).
|
Port Scan SSH | |
| 🇳🇱 ByeByte API |
1 failed SSH login attempts on port 22 from this IP. Usernames attempted included NL5xUDpV2xRa. Generic dictionary list, none matched real accounts. Single burst at 2026-10-31 19:39 UTC.
|
Brute-Force SSH | |
| 🇨🇿 kronos |
IDS: FlowIntel scan-like source | SID:9900001 | alerts5m:24
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown