JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.238.166.49

47.238.166.49 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	ALIBABA CLOUD - HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibabacloud.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.238.166.49

Whois 47.238.166.49

IP Abuse Reports for 47.238.166.49:

This IP address has been reported a total of 15 times from 15 distinct sources. 47.238.166.49 was first reported on April 22nd 2024, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 KIsmay	2024-05-19 03:01:34 (2 years ago)	May 18 23:00:17 www4 sshd[3994373]: Failed password for root from 47.238.166.49 port 43724 ssh2 May ... show more May 18 23:00:17 www4 sshd[3994373]: Failed password for root from 47.238.166.49 port 43724 ssh2 May 18 23:00:32 www4 sshd[3994373]: Failed password for root from 47.238.166.49 port 43724 ssh2 May 18 23:00:46 www4 sshd[3994373]: Failed password for root from 47.238.166.49 port 43724 ssh2 May 18 23:01:12 www4 sshd[3994373]: Failed password for root from 47.238.166.49 port 43724 ssh2 May 18 23:01:34 www4 sshd[3994373]: Disconnecting authenticating user root 47.238.166.49 port 43724: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] ... show less	Brute-Force SSH
🇳🇱 StopAbuse	2024-05-18 23:21:34 (2 years ago)	tcp/6379	Port Scan
🇩🇪 reger-men	2024-05-14 00:03:14 (2 years ago)	IP & Port Scan.	Port Scan Brute-Force SSH
🇳🇱 Hotwire	2024-05-13 21:53:58 (2 years ago)	May 13 21:53:48 h1buntu sshd[956407]: Failed password for root from 47.238.166.49 port 58620 ssh2 Ma ... show more May 13 21:53:48 h1buntu sshd[956407]: Failed password for root from 47.238.166.49 port 58620 ssh2 May 13 21:53:56 h1buntu sshd[956407]: Failed password for root from 47.238.166.49 port 58620 ssh2 May 13 21:53:57 h1buntu sshd[956407]: Disconnecting authenticating user root 47.238.166.49 port 58620: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] ... show less	Hacking Brute-Force SSH
🇫🇷 Rousse Nicolas	2024-05-11 20:20:39 (2 years ago)	May 11 20:20:35 srv-web sshd[3979145]: Failed password for invalid user test from 47.238.166.49 port ... show more May 11 20:20:35 srv-web sshd[3979145]: Failed password for invalid user test from 47.238.166.49 port 34322 ssh2 May 11 20:20:33 srv-web sshd[3979145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.238.166.49 May 11 20:20:33 srv-web sshd[3979145]: Invalid user test from 47.238.166.49 port 34322 May 11 20:20:35 srv-web sshd[3979145]: Failed password for invalid user test from 47.238.166.49 port 34322 ssh2 May 11 20:20:38 srv-web sshd[3979145]: Failed password for invalid user test from 47.238.166.49 port 34322 ssh2 ... show less	Brute-Force SSH
Anonymous	2024-05-10 12:42:19 (2 years ago)	May 10 08:42:01 global2 sshd[25657]: Failed password for root from 47.238.166.49 port 52560 ssh2 May ... show more May 10 08:42:01 global2 sshd[25657]: Failed password for root from 47.238.166.49 port 52560 ssh2 May 10 08:42:09 global2 sshd[25657]: Failed password for root from 47.238.166.49 port 52560 ssh2 May 10 08:42:14 global2 sshd[25657]: Failed password for root from 47.238.166.49 port 52560 ssh2 May 10 08:42:18 global2 sshd[25657]: Failed password for root from 47.238.166.49 port 52560 ssh2 May 10 08:42:19 global2 sshd[25657]: Disconnecting authenticating user root 47.238.166.49 port 52560: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] ... show less	Brute-Force SSH
🇺🇸 xevion	2024-05-10 03:26:20 (2 years ago)	May 9 22:26:05 Roman sshd[28207]: Failed password for root from 47.238.166.49 port 35520 ssh2 May ... show more May 9 22:26:05 Roman sshd[28207]: Failed password for root from 47.238.166.49 port 35520 ssh2 May 9 22:26:09 Roman sshd[28207]: Failed password for root from 47.238.166.49 port 35520 ssh2 May 9 22:26:13 Roman sshd[28207]: Failed password for root from 47.238.166.49 port 35520 ssh2 May 9 22:26:16 Roman sshd[28207]: Failed password for root from 47.238.166.49 port 35520 ssh2 May 9 22:26:18 Roman sshd[28207]: Disconnecting authenticating user root 47.238.166.49 port 35520: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] ... show less	Brute-Force SSH
🇸🇪 Anonymous	2024-05-07 21:02:21 (2 years ago)	Drop from IP address 47.238.166.49 to tcp-port 2222	Port Scan
🇺🇸 ShadowWhisperer	2024-05-06 16:03:49 (2 years ago)	Hosts malware, used in SSH attack	Hacking Exploited Host SSH
🇧🇷 diego	2024-05-06 06:32:41 (2 years ago)	[rede-176-124] 05/06/2024-03:32:41.501756, 47.238.166.49, Protocol: 6, ET CINS Active Threat Intelli ... show more [rede-176-124] 05/06/2024-03:32:41.501756, 47.238.166.49, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 60 show less	Hacking
🇺🇸 drewf.ink	2024-05-05 19:18:18 (2 years ago)	[19:18] Attempted SSH login on port 2222 with credentials root:123456	Brute-Force SSH
🇫🇮 itbyhf	2024-04-29 02:20:22 (2 years ago)	2024-04-29T05:20:11.448892+03:00 backup-hel sshd[2006041]: Failed password for root from 47.238.166. ... show more 2024-04-29T05:20:11.448892+03:00 backup-hel sshd[2006041]: Failed password for root from 47.238.166.49 port 40932 ssh2 2024-04-29T05:20:13.859749+03:00 backup-hel sshd[2006041]: Failed password for root from 47.238.166.49 port 40932 ssh2 2024-04-29T05:20:17.348309+03:00 backup-hel sshd[2006041]: Failed password for root from 47.238.166.49 port 40932 ssh2 2024-04-29T05:20:19.761685+03:00 backup-hel sshd[2006041]: Failed password for root from 47.238.166.49 port 40932 ssh2 2024-04-29T05:20:21.839015+03:00 backup-hel sshd[2006041]: Disconnecting authenticating user root 47.238.166.49 port 40932: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] ... show less	Brute-Force SSH
🇩🇪 Custard	2024-04-26 08:52:52 (2 years ago)	Apr 26 02:52:48 mail sshd[1258918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show more Apr 26 02:52:48 mail sshd[1258918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.238.166.49 user=root Apr 26 02:52:50 mail sshd[1258918]: Failed password for root from 47.238.166.49 port 35954 ssh2 show less	Brute-Force SSH
🇺🇸 IDS	2024-04-26 06:03:57 (2 years ago)	2024-04-26T02:03:41.718477mail.idscp.com sshd[1393522]: Failed password for root from 47.238.166.49 ... show more 2024-04-26T02:03:41.718477mail.idscp.com sshd[1393522]: Failed password for root from 47.238.166.49 port 53266 ssh2 2024-04-26T02:03:44.487610mail.idscp.com sshd[1393522]: Failed password for root from 47.238.166.49 port 53266 ssh2 2024-04-26T02:03:48.403020mail.idscp.com sshd[1393522]: Failed password for root from 47.238.166.49 port 53266 ssh2 2024-04-26T02:03:53.976332mail.idscp.com sshd[1393522]: Failed password for root from 47.238.166.49 port 53266 ssh2 2024-04-26T02:03:56.566697mail.idscp.com sshd[1393522]: Disconnecting authenticating user root 47.238.166.49 port 53266: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] ... show less	Brute-Force SSH
🇰🇭 nagaworld	2024-04-22 04:48:56 (2 years ago)	Apr 22 11:48:47 chat sshd[933328]: Failed password for root from 47.238.166.49 port 48914 ssh2 Apr 2 ... show more Apr 22 11:48:47 chat sshd[933328]: Failed password for root from 47.238.166.49 port 48914 ssh2 Apr 22 11:48:50 chat sshd[933328]: Failed password for root from 47.238.166.49 port 48914 ssh2 Apr 22 11:48:52 chat sshd[933328]: Failed password for root from 47.238.166.49 port 48914 ssh2 Apr 22 11:48:54 chat sshd[933328]: Failed password for root from 47.238.166.49 port 48914 ssh2 Apr 22 11:48:55 chat sshd[933328]: Disconnecting authenticating user root 47.238.166.49 port 48914: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] ... show less	Brute-Force SSH

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 175.107.0.113

🇺🇸 2604:a940:300:5b6:0:21::

🇺🇸 216.25.89.140

🇦🇷 190.244.39.224

🇬🇧 172.94.9.120

🇺🇸 154.197.56.163

🇺🇸 154.16.119.22

🇳🇬 152.32.142.188

🇫🇮 147.185.133.209

🇺🇸 147.185.132.52

🇺🇸 142.93.199.80

🇨🇳 111.31.190.207

🇨🇳 106.75.25.139

🇺🇸 91.193.232.116

🇳🇱 80.82.77.202

🇺🇸 67.207.83.40

🇧🇪 34.140.216.39

🇨🇦 34.130.98.175

🇮🇷 5.236.73.30

🇷🇴 2.57.121.25