This IP address has been reported a total of
12
times from
10 distinct
sources.
47.254.56.138 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 3
reports;
Germany
with 2
reports;
Spain
with 2
reports.
The most common categories in these recent reports were:
SSH
11
times;
Brute-Force
10
times;
Port Scan
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-13T06:25:29.193714-07:00 orcas sshd[32716]: Invalid user tester from 47.254.56.138
2026-10-1 ...
show more2026-10-13T06:25:29.193714-07:00 orcas sshd[32716]: Invalid user tester from 47.254.56.138
2026-10-13T06:26:54.474666-07:00 orcas sshd[37968]: Invalid user ftpuser from 47.254.56.138
2026-10-13T06:28:22.266765-07:00 orcas sshd[42418]: Invalid user clara from 47.254.56.138
2026-10-13T06:29:07.561771-07:00 orcas sshd[44434]: Invalid user design from 47.254.56.138
2026-10-13T06:30:35.247728-07:00 orcas sshd[48544]: Invalid user ftpuser from 47.254.56.138
...
show less
2026-10-09T19:08:33.330626+00:00 s1 sshd[538028]: Invalid user ahmad from 47.254.56.138 port 52912
2 ...
show more2026-10-09T19:08:33.330626+00:00 s1 sshd[538028]: Invalid user ahmad from 47.254.56.138 port 52912
2026-10-09T19:09:18.530390+00:00 s1 sshd[538224]: Invalid user root1 from 47.254.56.138 port 51660
2026-10-09T19:10:45.911432+00:00 s1 sshd[538431]: Invalid user mati from 47.254.56.138 port 35284
...
show less
[06/Oct/2026:04:46:28 +0300] sshd: Invalid user pop from 47.254.56.138 port 35510
[06/Oct/2026:04:4 ...
show more[06/Oct/2026:04:46:28 +0300] sshd: Invalid user pop from 47.254.56.138 port 35510
[06/Oct/2026:04:46:28 +0300] sshd: User root from 47.254.56.138 not allowed because not listed in AllowUsers
[06/Oct/2026:04:46:28 +0300] sshd: User root from 47.254.56.138 not allowed because not listed in AllowUsers
...
show less
2026-10-01T05:17:24.269617+02:00 admin sshd[2767848]: Invalid user mdm from 47.254.56.138 port 56020 ...
show more2026-10-01T05:17:24.269617+02:00 admin sshd[2767848]: Invalid user mdm from 47.254.56.138 port 56020
2026-10-01T05:17:24.272698+02:00 admin sshd[2767848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.254.56.138
2026-10-01T05:17:26.020243+02:00 admin sshd[2767848]: Failed password for invalid user mdm from 47.254.56.138 port 56020 ssh2
2026-10-01T05:18:05.441602+02:00 admin sshd[2768209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.254.56.138 user=root
2026-10-01T05:18:07.149387+02:00 admin sshd[2768209]: Failed password for root from 47.254.56.138 port 57754 ssh2
...
show less
Failed 10 attempts using usernames: user03, egor, ftpuser2, admin, test2, sit, kubeadmin, eddy, ubun ...
show moreFailed 10 attempts using usernames: user03, egor, ftpuser2, admin, test2, sit, kubeadmin, eddy, ubuntu and be
show less
2026-09-25T00:33:06.653478+02:00 admin sshd[3739157]: Invalid user server from 47.254.56.138 port 40 ...
show more2026-09-25T00:33:06.653478+02:00 admin sshd[3739157]: Invalid user server from 47.254.56.138 port 40048
2026-09-25T00:33:06.655359+02:00 admin sshd[3739157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.254.56.138
2026-09-25T00:33:08.348583+02:00 admin sshd[3739157]: Failed password for invalid user server from 47.254.56.138 port 40048 ssh2
2026-09-25T00:33:53.448338+02:00 admin sshd[3739329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.254.56.138 user=root
2026-09-25T00:33:55.596179+02:00 admin sshd[3739329]: Failed password for root from 47.254.56.138 port 49056 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
12
of 12 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
