JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

47.120.37.48

Recent Activity

Abuse Confidence Score

55% Elevated

55 reports

37 reporters · latest 2 days ago

ISP: Aliyun Computing Co., LTD
Usage Type: Data Center/Web Hosting/Transit
ASN: AS37963
Domain Name: alibabacloud.com
Country: 🇨🇳 China
City: Shenzhen, Guangdong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

55 from 37 distinct reporters

First reported

May 10th 2025

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇹🇷 Turkey 12 🇩🇪 Germany 5 🇺🇸 United States of America 5

Most common categories Brute-Force 15 SSH 15 Hacking 13 Web App Attack 13 Port Scan 5

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 fynndows.de	2026-11-07 19:50:46 UTC · (2 days ago)	2026-11-07T20:50:44.578864+01:00 oH9i97bxiccs sshd[3716904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.120.37.48 user=root 2026-11-07T20:50:46.330032+01:00 oH9i97bxiccs sshd[3716904]: Failed password ... show more 2026-11-07T20:50:44.578864+01:00 oH9i97bxiccs sshd[3716904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.120.37.48 user=root 2026-11-07T20:50:46.330032+01:00 oH9i97bxiccs sshd[3716904]: Failed password for root from 47.120.37.48 port 41632 ssh2 ... show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-11-01 23:45:00 UTC · (1 week ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 shaunc	2026-10-31 07:12:25 UTC · (1 week ago)	Oct 31 02:12:17 mailman sshd[13132]: Connection closed by 47.120.37.48 port 51266 [preauth] Oct 31 02:12:20 mailman sshd[13142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.120.37.48 user=root Oct 31 02 ... show more Oct 31 02:12:17 mailman sshd[13132]: Connection closed by 47.120.37.48 port 51266 [preauth] Oct 31 02:12:20 mailman sshd[13142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.120.37.48 user=root Oct 31 02:12:22 mailman sshd[13142]: Failed password for root from 47.120.37.48 port 56250 ssh2 show less	Brute-Force SSH
Anonymous	2026-10-31 07:12:20 UTC · (1 week ago)	SSH brute force: repeated failed logins and invalid usernames. Reported by fail2ban.	Brute-Force SSH
🇫🇷 Pythagus	2026-10-28 19:00:06 UTC · (1 week ago)	2026-10-28T18:58:46.851939+00:00 server sshd[1700420]: Failed password for invalid user root from 47.120.37.48 port 57234 ssh2	Port Scan SSH
🇫🇮 BlackSl1de	2026-10-28 18:58:57 UTC · (1 week ago)	Banned by Fail2Ban on SSH	Brute-Force
🇹🇷 neron	2026-10-20 22:47:53 UTC · (2 weeks ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 mg	2026-10-20 06:15:12 UTC · (2 weeks ago)	2026-10-19T23:15:03.834071-07:00 bluejay sshd[692022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.120.37.48 user=root 2026-10-19T23:15:06.303616-07:00 bluejay sshd[692022]: Failed password for root fro ... show more 2026-10-19T23:15:03.834071-07:00 bluejay sshd[692022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.120.37.48 user=root 2026-10-19T23:15:06.303616-07:00 bluejay sshd[692022]: Failed password for root from 47.120.37.48 port 57948 ssh2 2026-10-19T23:15:08.554894-07:00 bluejay sshd[692057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.120.37.48 user=root 2026-10-19T23:15:10.708499-07:00 bluejay sshd[692057]: Failed password for root from 47.120.37.48 port 57306 ssh2 ... show less	Brute-Force SSH
🇹🇷 neron	2026-10-19 22:00:07 UTC · (3 weeks ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇸🇪 ljo	2026-10-14 05:44:58 UTC · (3 weeks ago)	2026-10-14T07:44:51.208465+02:00 serengeti sshd-session[1744897]: Failed password for root from 47.120.37.48 port 39304 ssh2 2026-10-14T07:44:53.017188+02:00 serengeti sshd-session[1744901]: Failed password for root from 47.120.37.48 port 39310 ssh2 ... show more 2026-10-14T07:44:51.208465+02:00 serengeti sshd-session[1744897]: Failed password for root from 47.120.37.48 port 39304 ssh2 2026-10-14T07:44:53.017188+02:00 serengeti sshd-session[1744901]: Failed password for root from 47.120.37.48 port 39310 ssh2 2026-10-14T07:44:54.857027+02:00 serengeti sshd-session[1744903]: Failed password for root from 47.120.37.48 port 39324 ssh2 2026-10-14T07:44:56.643687+02:00 serengeti sshd-session[1744907]: Failed password for root from 47.120.37.48 port 39330 ssh2 2026-10-14T07:44:58.250728+02:00 serengeti sshd-session[1744915]: Failed password for root from 47.120.37.48 port 45850 ssh2 ... show less	Brute-Force SSH
🇫🇮 bittiguru.fi	2026-10-09 17:19:48 UTC · (1 month ago)	2026-10-09T20:19:42.498768ns2 sshd[3450530]: Failed password for root from 47.120.37.48 port 49554 ssh2 2026-10-09T20:19:46.162018ns2 sshd[3450532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.120.37.48 ... show more 2026-10-09T20:19:42.498768ns2 sshd[3450530]: Failed password for root from 47.120.37.48 port 49554 ssh2 2026-10-09T20:19:46.162018ns2 sshd[3450532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.120.37.48 user=root 2026-10-09T20:19:48.170645ns2 sshd[3450532]: Failed password for root from 47.120.37.48 port 49556 ssh2 ... show less	Brute-Force SSH
🇮🇩 Vano Ganzzz	2026-10-08 17:15:20 UTC · (1 month ago)	[Fail2Ban] Banned 47.120.37.48 for 600 seconds. No specific log lines found at the time of reporting.	Brute-Force SSH
🇩🇪 xavier-momain.eu	2026-10-02 20:08:53 UTC · (1 month ago)	CrowdSec ban — scenario: ssh:bruteforce \| report #4	Brute-Force SSH
🇹🇷 neron	2026-10-01 22:06:37 UTC · (1 month ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-09-29 17:51:38 UTC · (1 month ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 120.78.173.72

🇩🇪 87.122.20.12

🇳🇱 77.239.124.70

🇩🇪 69.5.169.84

🇵🇪 38.253.80.254

🇬🇧 2a06:4880::20

🇧🇷 205.210.31.162

🇳🇵 202.63.241.45

🇩🇪 167.94.146.64

🇺🇸 162.216.150.197

🇺🇸 162.216.149.68

🇺🇸 134.33.66.242

🇺🇸 107.173.45.61

🇧🇬 79.124.40.114

🇺🇸 71.27.86.44

🇩🇪 69.5.169.32

🇺🇦 46.150.69.229

🇺🇸 40.223.150.198

🇺🇸 199.47.82.20

🇳🇱 195.178.110.227