This IP address has been reported a total of
49
times from
36 distinct
sources.
47.239.54.213 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-19T17:00:58.842113 mail.atmatech.id sshd[2863232]: Failed password for root from 47.239.54.2 ...
show more2026-06-19T17:00:58.842113 mail.atmatech.id sshd[2863232]: Failed password for root from 47.239.54.213 port 52792 ssh2
2026-06-19T17:02:20.716503 mail.atmatech.id sshd[2864769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.239.54.213 user=root
2026-06-19T17:02:22.835171 mail.atmatech.id sshd[2864769]: Failed password for root from 47.239.54.213 port 36448 ssh2
...
show less
2026-06-19T03:04:34.276978+02:00 dolores sshd[3759289]: Invalid user pi from 47.239.54.213 port 5534 ...
show more2026-06-19T03:04:34.276978+02:00 dolores sshd[3759289]: Invalid user pi from 47.239.54.213 port 55340
2026-06-19T03:04:44.416843+02:00 dolores sshd[3759293]: Invalid user ubuntu from 47.239.54.213 port 36920
2026-06-19T03:04:54.575039+02:00 dolores sshd[3759345]: Invalid user admin from 47.239.54.213 port 35280
...
show less
{"event":{"DateTime":"2026-06-17T08:07:15Z","RemoteAddr":"47.239.54.213:56914","Protocol":"SSH","Com ...
show more{"event":{"DateTime":"2026-06-17T08:07:15Z","RemoteAddr":"47.239.54.213:56914","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"70f0630d-ae1d-4554-8d00-75652098c9fb","Environ":"","User":"root","Password":"4321","Client":"SSH-2.0-libssh2_1.11.1","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"47.239.54.213","SourcePort":"56914","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"}
{"event":{"DateTime":"2026-06-17T08:07:15Z","RemoteAddr":"47.239.54.213:56872","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"11c80349-8c9b-4967-9047-b827f011570d","Environ":"","User":"root","Password":"123456","Client":"SSH-2.0-libssh2_1.11.1","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Descr
show less
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=47.239.54.213; proto=TCP; source_port=57224; target_port=5901; flags=SYN
show less
Automated report from monolith.
Type: SSH brute-force (failed authentication burst)
Events in window ...
show moreAutomated report from monolith.
Type: SSH brute-force (failed authentication burst)
Events in window: 7
Users tried: root
Sample log:
2026-06-14T17:08:05-04:00 monolith sshd-session[1467823]: Failed password for root from 47.239.54.213 port 41824 ssh2
2026-06-14T17:08:05-04:00 monolith sshd-session[1467831]: Failed password for root from 47.239.54.213 port 41848 ssh2
2026-06-14T17:08:05-04:00 monolith sshd-session[1467820]: Failed password for root from 47.239.54.213 port 41838 ssh2
show less