This IP address has been reported a total of
18
times from
17 distinct
sources.
47.121.28.46 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Malicious activity detected from this IP during SSH attempts. VPN: No, Datacenter: No, Organization: ...
show moreMalicious activity detected from this IP during SSH attempts. VPN: No, Datacenter: No, Organization: AS37963 Hangzhou Alibaba Advertising Co.,Ltd., Region: Guangdong, Log: 2026-06-14T04:31:00.192707 02:00 Administracion sshd[90288]: Failed password for root from 47.121.28.46 port 57116 ssh2, Abuse Score: 75, Total Reports: 16
show less
2026-06-13T16:20:52.005370[redacted] sshd[1792849]: Connection closed by authenticating user root 47 ...
show more2026-06-13T16:20:52.005370[redacted] sshd[1792849]: Connection closed by authenticating user root 47.121.28.46 port 34000 [preauth]
show less
2026-06-13T22:33:03.189758+02:00 hosting.defencegeeks.net sshd-session[2942613]: Failed password for ...
show more2026-06-13T22:33:03.189758+02:00 hosting.defencegeeks.net sshd-session[2942613]: Failed password for root from 47.121.28.46 port 50568 ssh2
2026-06-13T22:33:06.895538+02:00 hosting.defencegeeks.net sshd-session[2942613]: Failed password for root from 47.121.28.46 port 50568 ssh2
2026-06-13T22:33:11.126030+02:00 hosting.defencegeeks.net sshd-session[2942613]: Failed password for root from 47.121.28.46 port 50568 ssh2
2026-06-13T22:33:13.049273+02:00 hosting.defencegeeks.net sshd-session[2942613]: Failed password for root from 47.121.28.46 port 50568 ssh2
2026-06-13T22:33:17.181297+02:00 hosting.defencegeeks.net sshd-session[2942613]: Failed password for root from 47.121.28.46 port 50568 ssh2
2026-06-13T22:33:19.394299+02:00 hosting.defencegeeks.net sshd-session[2942613]: Disconnecting authenticating user root 47.121.28.46 port 50568: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
...
show less
2026-06-13T19:52:22.163933+00:00 vultr sshd[2692732]: Failed password for root from 47.121.28.46 por ...
show more2026-06-13T19:52:22.163933+00:00 vultr sshd[2692732]: Failed password for root from 47.121.28.46 port 36270 ssh2
2026-06-13T19:52:24.520808+00:00 vultr sshd[2692732]: Failed password for root from 47.121.28.46 port 36270 ssh2
...
show less
2026-06-08T02:44:15.911314+08:00 r901613 sshd[267985]: Failed password for root from 47.121.28.46 po ...
show more2026-06-08T02:44:15.911314+08:00 r901613 sshd[267985]: Failed password for root from 47.121.28.46 port 52324 ssh2
2026-06-08T02:44:19.079844+08:00 r901613 sshd[267985]: Failed password for root from 47.121.28.46 port 52324 ssh2
2026-06-08T02:44:22.889891+08:00 r901613 sshd[267985]: Failed password for root from 47.121.28.46 port 52324 ssh2
2026-06-08T02:44:25.538589+08:00 r901613 sshd[267985]: Failed password for root from 47.121.28.46 port 52324 ssh2
2026-06-08T02:44:29.682764+08:00 r901613 sshd[267985]: Failed password for root from 47.121.28.46 port 52324 ssh2
...
show less
[Sun Jun 7 03:06:22 AM CEST 2026] [Automated Fail2Ban Report] Unauthorized attempt to connect via S ...
show more[Sun Jun 7 03:06:22 AM CEST 2026] [Automated Fail2Ban Report] Unauthorized attempt to connect via SSH
show less
5 incidents: port scanning. First: 2026-06-05 00:23, Last: 2026-06-05 01:30 UTC. Triggers: port-trap ...
show more5 incidents: port scanning. First: 2026-06-05 00:23, Last: 2026-06-05 01:30 UTC. Triggers: port-trap,non-public-port,firewall-tcp,ufw-repeater,recidive.
show less