JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.238.192.222

47.238.192.222 was found in our database!

This IP was reported 82 times. Confidence of Abuse is 59%: ?

59%

ISP	ALIBABA CLOUD - HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibabacloud.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.238.192.222

Whois 47.238.192.222

IP Abuse Reports for 47.238.192.222:

This IP address has been reported a total of 82 times from 54 distinct sources. 47.238.192.222 was first reported on July 5th 2024, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 m2jest1c	2026-09-23 04:49:22 (6 hours ago)	2026-09-23T00:49:21.275117 rhel-20gb-ash-1 sshd[3144125]: error: kex_exchange_identification: Connec ... show more 2026-09-23T00:49:21.275117 rhel-20gb-ash-1 sshd[3144125]: error: kex_exchange_identification: Connection closed by remote host 2026-09-23T00:49:21.275157 rhel-20gb-ash-1 sshd[3144125]: Connection closed by 47.238.192.222 port 56157 ... show less	Brute-Force SSH
🇺🇸 abenage	2026-09-22 14:59:25 (20 hours ago)	Sep 22 08:59:24 [redacted] postfix/submission/smtpd[606527]: lost connection after CONNECT from unkn ... show more Sep 22 08:59:24 [redacted] postfix/submission/smtpd[606527]: lost connection after CONNECT from unknown[47.238.192.222] show less	Brute-Force Email Spam Exploited Host
🇰🇷 stypr	2026-09-20 04:52:00 (3 days ago)	Malicious activity detected	Port Scan Brute-Force
Anonymous	2026-09-20 04:05:47 (3 days ago)	Port scan against our edge firewall, detected by Wazuh: Regel 100502 \| abuseipdb 46% (7 Meldungen, H ... show more Port scan against our edge firewall, detected by Wazuh: Regel 100502 \| abuseipdb 46% (7 Meldungen, HK) show less	Port Scan
🇮🇩 sma14sby	2026-09-19 09:41:52 (4 days ago)	IP 47.238.192.222 has been banned after detecting attempted access to a sensitive endpoint (port sca ... show more IP 47.238.192.222 has been banned after detecting attempted access to a sensitive endpoint (port scanner). show less	Port Scan Hacking Bad Web Bot
🇪🇸 librebit	2026-09-19 00:30:37 (4 days ago)	Brute force	Brute-Force
Anonymous	2026-09-18 15:04:43 (4 days ago)	Tried our host z.	Port Scan Hacking Exploited Host
🇫🇷 Thaliruth	2026-09-18 14:41:06 (4 days ago)	Sep 18 16:41:01 151 dovecot: pop3-login: Login aborted: Connection closed (no auth attempts in 1 sec ... show more Sep 18 16:41:01 151 dovecot: pop3-login: Login aborted: Connection closed (no auth attempts in 1 secs) (no_auth_attempts): user=<>, rip=47.238.192.222, lip=92.205.177.255, session=<0c+Y48JbXsUv7sDe> Sep 18 16:41:05 151 dovecot: imap-login: Login aborted: Connection closed (no auth attempts in 1 secs) (no_auth_attempts): user=<>, rip=47.238.192.222, lip=92.205.177.255, session=<Dljc48JbXsUv7sDe> Sep 18 16:41:06 151 dovecot: pop3-login: Login aborted: Connection closed (disconnected during TLS handshake) (tls_handshake_not_finished): user=<>, rip=47.238.192.222, lip=92.205.177.255, TLS handshaking: Connection closed, session=<Cv/X48JbVsUv7sDe> ... show less	Hacking Brute-Force
🇳🇱 Nrbrtkls	2026-09-17 18:07:18 (5 days ago)	SSH honeypot (endlessh tarpit) connection from 47.238.192.222	SSH Port Scan
🇮🇪 RoboSOC	2026-09-17 08:27:05 (6 days ago)	SCAN: TCP Port Scan CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	Port Scan
🇫🇷 masterguru	2026-09-17 03:39:26 (6 days ago)	Port Scan detected from 47.238.192.222 (HK/Hong Kong/-). 11 hits in the last 50 seconds (0-131)	Port Scan
🇺🇸 mentality	2024-09-25 00:43:51 (1 year ago)	2024-09-25T01:38:50.113079racknerd-2df238 sshd[394020]: Invalid user webapp from 47.238.192.222 port ... show more 2024-09-25T01:38:50.113079racknerd-2df238 sshd[394020]: Invalid user webapp from 47.238.192.222 port 57304 2024-09-25T01:38:52.376945racknerd-2df238 sshd[394020]: Failed password for invalid user webapp from 47.238.192.222 port 57304 ssh2 2024-09-25T01:43:51.211396racknerd-2df238 sshd[394101]: Invalid user postgres from 47.238.192.222 port 40314 ... show less	Brute-Force SSH
🇬🇧 chrisw	2024-09-22 22:50:43 (2 years ago)	Sep 22 23:50:42 l03 sshd[22740]: Invalid user odoo from 47.238.192.222 port 47064 ...	SSH
🇳🇱 majo-it.nl	2024-09-20 21:53:48 (2 years ago)	Sep 20 21:53:45 fail2ban sshd[527378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show more Sep 20 21:53:45 fail2ban sshd[527378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.238.192.222 Sep 20 21:53:47 fail2ban sshd[527378]: Failed password for invalid user daniel from 47.238.192.222 port 48430 ssh2 ... show less	Brute-Force SSH
🇨🇿 lp	2024-09-20 21:39:03 (2 years ago)	SSH brute force: 4 attempts were recorded from 47.238.192.222 2024-09-20T23:32:50.145099+02:00 from ... show more SSH brute force: 4 attempts were recorded from 47.238.192.222 2024-09-20T23:32:50.145099+02:00 from invalid user test01 47.238.192.222 port 47964 [preauth] 2024-09-20T23:38:43.808320+02:00 from 47.238.192.222 port 38724 on <redacted> port 22 rdomain "" 2024-09-20T23:38:45.207896+02:00 user user1 from 47.238.192.222 port 38724 2024-09-20T23:38:45.491974+02:00 from invalid user user1 47.238.192.222 port 38724 [preauth] show less	Brute-Force SSH

Showing 1 to 15 of 82 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 208.108.195.243

🇹🇼 165.154.14.170

🇫🇷 91.231.89.132

🇷🇺 79.126.114.133

🇺🇸 64.62.156.226

🇭🇰 20.205.12.169

🇯🇵 13.230.21.186

🇳🇱 193.47.62.69

🇺🇸 192.177.142.238

🇹🇼 111.70.49.186

🇺🇸 72.219.204.81

🇵🇪 45.170.50.2

🇳🇱 45.148.10.141

🇺🇸 44.192.144.11

🇺🇸 35.171.100.150

🇹🇼 34.80.101.149

🇫🇷 4.211.70.206

🇺🇸 3.239.153.129

🇺🇸 3.209.83.34

🇺🇦 195.62.36.242