JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

47.252.94.49

Neutral Activity

Abuse Confidence Score

0% Low Risk

79 reports

48 reporters · latest 2 months ago

ISP: Alibaba Cloud - US
Usage Type: Data Center/Web Hosting/Transit
ASN: AS45102
Domain Name: alibabacloud.com
Country: 🇺🇸 United States of America
City: Virginia Beach, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

47.252.94.49 has been reported 79 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

79 from 48 distinct reporters

First reported

January 8th 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-09-02 19:31:56 UTC · (2 months ago)	Fail2Ban Jail: sshd \| Evidence: Mar 17 18:09:51 fisher sshd[103695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.252.94.49 Mar 17 18:09:53 fisher sshd[103695]: Failed password for invalid user media fro ... show more Fail2Ban Jail: sshd \| Evidence: Mar 17 18:09:51 fisher sshd[103695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.252.94.49 Mar 17 18:09:53 fisher sshd[103695]: Failed password for invalid user media from 47.252.94.49 port 40528 ssh2 show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-03-21 20:12:11 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-19 20:12:09 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ghostwarriors	2026-03-19 11:20:53 UTC · (7 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇺🇸 SANYALnet Labs	2026-03-19 11:13:07 UTC · (7 months ago)	Mar 19 11:13:02 gigabyte-h410m sshd[2235174]: Invalid user mgeweb from 47.252.94.49 port 60592 Mar 19 11:13:04 gigabyte-h410m sshd[2235174]: Failed password for invalid user mgeweb from 47.252.94.49 port 60592 ssh2 Mar 19 11:13:06 gigabyte-h410m sshd ... show more Mar 19 11:13:02 gigabyte-h410m sshd[2235174]: Invalid user mgeweb from 47.252.94.49 port 60592 Mar 19 11:13:04 gigabyte-h410m sshd[2235174]: Failed password for invalid user mgeweb from 47.252.94.49 port 60592 ssh2 Mar 19 11:13:06 gigabyte-h410m sshd[2235174]: Disconnected from invalid user mgeweb 47.252.94.49 port 60592 [preauth] ... show less	Brute-Force
🇺🇸 Execoop	2026-03-17 21:16:17 UTC · (7 months ago)	SSH honeypot \| SSH Backdoor Install + Auth Attempts (Moderate) \| 3 auths (2 users), 2 cmds, 1s \| libssh \| tactics: SSH key injection, tunnel/proxy	Hacking Exploited Host SSH
🇧🇷 Peregrine	2026-03-17 21:09:52 UTC · (7 months ago)	Fail2Ban Jail: ssh-proxmox-honeypot \| Evidence: Mar 17 18:09:51 fisher sshd[103695]: Invalid user media from 47.252.94.49 port 40528	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-03-17 20:12:07 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ghostwarriors	2026-03-16 19:50:33 UTC · (7 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 groupnet.at	2026-03-16 19:42:21 UTC · (7 months ago)	Mar 16 20:34:10 ma0301 sshd[524214]: Invalid user yocto from 47.252.94.49 port 32890 Mar 16 20:36:18 ma0301 sshd[526666]: Invalid user steam from 47.252.94.49 port 52228 Mar 16 20:37:11 ma0301 sshd[527181]: Invalid user ct from 47.252.94.49 port 3385 ... show more Mar 16 20:34:10 ma0301 sshd[524214]: Invalid user yocto from 47.252.94.49 port 32890 Mar 16 20:36:18 ma0301 sshd[526666]: Invalid user steam from 47.252.94.49 port 52228 Mar 16 20:37:11 ma0301 sshd[527181]: Invalid user ct from 47.252.94.49 port 33852 Mar 16 20:38:07 ma0301 sshd[527679]: Invalid user edu from 47.252.94.49 port 43702 Mar 16 20:38:57 ma0301 sshd[528386]: Invalid user d from 47.252.94.49 port 53562 Mar 16 20:39:48 ma0301 sshd[528681]: Invalid user builduser from 47.252.94.49 port 35178 Mar 16 20:40:38 ma0301 sshd[530881]: Invalid user fastuser from 47.252.94.49 port 45030 Mar 16 20:41:29 ma0301 sshd[531191]: Invalid user teamspeak from 47.252.94.49 port 54884 Mar 16 20:42:20 ma0301 sshd[531927]: Invalid user business from 47.252.94.49 port 36504 ... show less	Brute-Force SSH
🇧🇾 lns.bz	2026-03-16 19:26:20 UTC · (7 months ago)	SSH bruteforce [BY]	SSH
🇨🇿 lp	2026-03-15 05:55:05 UTC · (7 months ago)	SSH Brute force: 1 attempts were recorded from 47.252.94.49 2026-03-15T05:26:57+01:00 Invalid user test_user from 47.252.94.49 port 51266	Brute-Force SSH
🇫🇷 Steph@	2026-03-15 04:37:58 UTC · (7 months ago)	Mar 15 05:36:57 srv4 sshd[2896667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.252.94.49 Mar 15 05:36:58 srv4 sshd[2896667]: Failed password for invalid user eadmin from 47.252.94.49 port 38690 ssh2 Ma ... show more Mar 15 05:36:57 srv4 sshd[2896667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.252.94.49 Mar 15 05:36:58 srv4 sshd[2896667]: Failed password for invalid user eadmin from 47.252.94.49 port 38690 ssh2 Mar 15 05:37:55 srv4 sshd[2896674]: Invalid user coder from 47.252.94.49 port 49662 Mar 15 05:37:55 srv4 sshd[2896674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.252.94.49 Mar 15 05:37:57 srv4 sshd[2896674]: Failed password for invalid user coder from 47.252.94.49 port 49662 ssh2 ... show less	Brute-Force SSH
🇺🇸 musicwolf83	2026-03-15 04:37:17 UTC · (7 months ago)	2026-03-14T22:30:08.210079-06:00 yms sshd[1443595]: Invalid user test_user from 47.252.94.49 port 44568 2026-03-14T22:30:08.313938-06:00 yms sshd[1443595]: Disconnected from invalid user test_user 47.252.94.49 port 44568 [preauth] 2026-03-14T22:37:15 ... show more 2026-03-14T22:30:08.210079-06:00 yms sshd[1443595]: Invalid user test_user from 47.252.94.49 port 44568 2026-03-14T22:30:08.313938-06:00 yms sshd[1443595]: Disconnected from invalid user test_user 47.252.94.49 port 44568 [preauth] 2026-03-14T22:37:15.634042-06:00 yms sshd[1455359]: Invalid user eadmin from 47.252.94.49 port 44632 ... show less	Port Scan Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-03-13 20:12:02 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 205.210.31.210

🇬🇧 195.206.182.204

🇳🇱 195.178.110.204

🇳🇱 192.253.248.226

🇹🇭 184.82.29.55

🇺🇸 174.172.196.175

🇺🇸 162.216.149.160

🇿🇦 152.110.243.149

🇮🇶 150.228.105.215

🇬🇧 134.122.109.70

🇲🇾 113.211.215.211

🇨🇳 112.86.225.78

🇱🇹 77.90.185.78

🇫🇷 37.187.35.26

🇺🇸 20.118.251.35

🇺🇸 216.25.89.130

🇳🇱 200.138.46.237

🇺🇸 185.198.240.62

🇩🇪 185.176.255.74

🇦🇷 179.38.161.58