JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.116.125.38

47.116.125.38 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 63%: ?

63%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.116.125.38

Whois 47.116.125.38

IP Abuse Reports for 47.116.125.38:

This IP address has been reported a total of 15 times from 14 distinct sources. 47.116.125.38 was first reported on June 8th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 sh97	2026-06-30 09:32:12 (9 hours ago)	IT02-IF: SSH Brute Force from 47.116.125.38 at 2026-06-30 15:02:12 IST	Brute-Force SSH
🇮🇹 sh97	2026-06-27 23:42:27 (2 days ago)	IT02-IF: SSH Brute Force from 47.116.125.38 at 2026-06-28 05:12:27 IST	Brute-Force SSH
🇮🇹 paradoxnetworks	2026-06-27 23:42:22 (2 days ago)	2026-06-27T23:42:12.503552+00:00 edge-fog-swb01.int.pdx.net.uk sshd[244660]: Failed password for roo ... show more 2026-06-27T23:42:12.503552+00:00 edge-fog-swb01.int.pdx.net.uk sshd[244660]: Failed password for root from 47.116.125.38 port 47194 ssh2 2026-06-27T23:42:18.552831+00:00 edge-fog-swb01.int.pdx.net.uk sshd[244660]: Failed password for root from 47.116.125.38 port 47194 ssh2 2026-06-27T23:42:21.837785+00:00 edge-fog-swb01.int.pdx.net.uk sshd[244660]: Failed password for root from 47.116.125.38 port 47194 ssh2 ... show less	Brute-Force SSH
🇺🇸 Szymekk	2026-06-27 00:19:18 (3 days ago)	Fail2Ban: SSH brute force attempt [srv05]	Brute-Force SSH
🇩🇪 SMi-Web	2026-06-25 22:33:08 (4 days ago)	Blocked by firewall on hugin [2222/tcp] \| Rule: UFW \| SPT: 6385 \| TTL: 110 \| LEN: 40 \| TOS: 0x00 • R ... show more Blocked by firewall on hugin [2222/tcp] \| Rule: UFW \| SPT: 6385 \| TTL: 110 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 KnightIndustries	2026-06-25 14:46:34 (5 days ago)	2026-06-25T16:46:29.365299+02:00 milkyway sshd[956041]: pam_unix(sshd:auth): authentication failure; ... show more 2026-06-25T16:46:29.365299+02:00 milkyway sshd[956041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.116.125.38 user=root 2026-06-25T16:46:31.307909+02:00 milkyway sshd[956041]: Failed password for root from 47.116.125.38 port 39306 ssh2 2026-06-25T16:46:34.561253+02:00 milkyway sshd[956039]: Failed password for root from 47.116.125.38 port 43806 ssh2 ... show less	Brute-Force SSH
🇺🇸 4ensic	2026-06-24 07:49:44 (6 days ago)	2026-06-24T02:49:26.742311-05:00 drpxkvfh.colocrossing.cloud sshd[40308]: Failed password for root f ... show more 2026-06-24T02:49:26.742311-05:00 drpxkvfh.colocrossing.cloud sshd[40308]: Failed password for root from 47.116.125.38 port 52222 ssh2 2026-06-24T02:49:31.330406-05:00 drpxkvfh.colocrossing.cloud sshd[40308]: Failed password for root from 47.116.125.38 port 52222 ssh2 2026-06-24T02:49:33.930578-05:00 drpxkvfh.colocrossing.cloud sshd[40308]: Failed password for root from 47.116.125.38 port 52222 ssh2 2026-06-24T02:49:38.820911-05:00 drpxkvfh.colocrossing.cloud sshd[40308]: Failed password for root from 47.116.125.38 port 52222 ssh2 2026-06-24T02:49:43.416612-05:00 drpxkvfh.colocrossing.cloud sshd[40308]: Failed password for root from 47.116.125.38 port 52222 ssh2 2026-06-24T02:49:43.758218-05:00 drpxkvfh.colocrossing.cloud sshd[40308]: Disconnecting authenticating user root 47.116.125.38 port 52222: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] ... show less	Brute-Force SSH
🇫🇮 iamxorum	2026-06-21 21:36:20 (1 week ago)	2026-06-21T21:36:19.363270+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-06-21T21:36:19.363270+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=47.116.125.38 DST=46.62.222.43 LEN=40 TOS=0x00 PREC=0x00 TTL=110 ID=0 DF PROTO=TCP SPT=52180 DPT=2222 WINDOW=9887 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-06-20 04:05:23 (1 week ago)	Blocked by UFW (TCP on 2222) Source port: 50739 TTL: 110 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 2222) Source port: 50739 TTL: 110 Packet length: 40 TOS: 0x08 This report (for 47.116.125.38) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 Scrapline	2026-06-16 12:32:49 (2 weeks ago)	[Fail2Ban] sshd: banned after 2 failures	Brute-Force SSH
🇨🇦 Tanados	2026-06-14 23:45:29 (2 weeks ago)	Blocked by UFW [6379/tcp] Source port: 37103 TTL: 104 Packet length: 40 TOS: 0x00 This report was g ... show more Blocked by UFW [6379/tcp] Source port: 37103 TTL: 104 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇪 NordhTech	2026-06-14 11:30:43 (2 weeks ago)	More than 3 malicious connection attempts, trying port(s) 6379/tcp, then blocked from services ...	Port Scan Hacking
🇩🇪 anycast_ac	2026-06-11 08:43:15 (2 weeks ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/6379 (redis). Commands captured ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/6379 (redis). Commands captured: $ info show less	DDoS Attack IoT Targeted Brute-Force
🇬🇧 Nov	2026-06-08 01:06:28 (3 weeks ago)	Unauthorized SSH access attempt (tcp/2222)	Port Scan SSH
🇹🇷 Threat.live	2026-06-08 00:55:02 (3 weeks ago)	Threat.live: Brute Force	Brute-Force

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.32.209.240

🇺🇸 162.216.149.34

🇯🇵 160.251.182.78

🇫🇮 147.185.133.52

🇺🇸 138.197.35.49

🇮🇳 124.253.194.228

🇵🇰 118.103.229.152

🇦🇺 103.114.58.89

🇳🇱 91.92.42.133

🇺🇸 65.49.20.84

🇺🇸 20.245.71.147

🇩🇪 5.231.242.15

🇺🇸 3.233.50.222

🇭🇰 199.45.155.81

🇺🇾 186.54.169.102

🇺🇸 162.222.203.17

🇻🇳 116.110.154.48

🇸🇬 114.119.135.30

🇺🇸 104.37.86.24

🇨🇳 49.234.188.64