JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

47.90.139.149

Activity Trending Down

Abuse Confidence Score

32% Elevated

36 reports

28 reporters · latest 1 week ago

ISP: Alibaba Cloud - US
Usage Type: Data Center/Web Hosting/Transit
ASN: AS45102
Domain Name: alibabacloud.com
Country: 🇺🇸 United States of America
City: Virginia Beach, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

36 from 28 distinct reporters

First reported

May 27th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇩🇪 Germany 4 🇨🇿 Czechia 3 🇵🇱 Poland 2

Most common categories Brute-Force 9 SSH 9 Port Scan 2

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 kisiek	2026-11-01 10:22:02 UTC · (1 week ago)	(sshd) Failed SSH login from 47.90.139.149 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Nov 1 11:07:19 zone sshd[420037]: Invalid user chenhao from 47.90.139.149 port 51288 Nov 1 11:07:21 zone s ... show more (sshd) Failed SSH login from 47.90.139.149 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Nov 1 11:07:19 zone sshd[420037]: Invalid user chenhao from 47.90.139.149 port 51288 Nov 1 11:07:21 zone sshd[420037]: Failed password for invalid user chenhao from 47.90.139.149 port 51288 ssh2 Nov 1 11:21:15 zone sshd[422807]: Invalid user ubuntu from 47.90.139.149 port 43402 Nov 1 11:21:17 zone sshd[422807]: Failed password for invalid user ubuntu from 47.90.139.149 port 43402 ssh2 Nov 1 11:21:56 zone sshd[422895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.90.139.149 user=root show less	Port Scan
Anonymous	2026-11-01 10:12:57 UTC · (2 weeks ago)	Nov 1 11:12:54 myserver sshd[2634167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.90.139.149 Nov 1 11:12:56 myserver sshd[2634167]: Failed password for invalid user chenhao from 47.90.139.149 port 34 ... show more Nov 1 11:12:54 myserver sshd[2634167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.90.139.149 Nov 1 11:12:56 myserver sshd[2634167]: Failed password for invalid user chenhao from 47.90.139.149 port 34816 ssh2 ... show less	Brute-Force SSH
🇨🇿 lp	2026-10-31 20:02:50 UTC · (2 weeks ago)	SSH Brute force: 1 attempts were recorded from 47.90.139.149 2026-10-31T20:42:45+0100 Connection closed by authenticating user root 47.90.139.149 [preauth]	Brute-Force SSH
🇨🇿 lp	2026-10-31 05:33:06 UTC · (2 weeks ago)	SSH Brute force: 1 attempts were recorded from 47.90.139.149 2026-10-31T06:19:14+0100 Invalid user mytest from 47.90.139.149	Brute-Force SSH
🇨🇿 lp	2026-10-28 04:02:56 UTC · (2 weeks ago)	SSH Brute force: 1 attempts were recorded from 47.90.139.149 2026-10-28T04:54:50+0100 Invalid user admin from 47.90.139.149	Brute-Force SSH
🇩🇪 fleckenbase	2026-10-24 09:41:50 UTC · (3 weeks ago)	2026-10-24T11:37:40.879593+02:00 v30393 sshd[1162934]: Disconnected from authenticating user root 47.90.139.149 port 58452 [preauth] 2026-10-24T11:41:51.584501+02:00 v30393 sshd[1163156]: Disconnected from authenticating user root 47.90.139.149 port ... show more 2026-10-24T11:37:40.879593+02:00 v30393 sshd[1162934]: Disconnected from authenticating user root 47.90.139.149 port 58452 [preauth] 2026-10-24T11:41:51.584501+02:00 v30393 sshd[1163156]: Disconnected from authenticating user root 47.90.139.149 port 34376 [preauth] ... show less	Brute-Force SSH
🇵🇱 alianet	2026-10-23 18:27:03 UTC · (3 weeks ago)	Oct 23 18:22:54 vps-eb8e942e sshd-session[1120676]: Disconnected from invalid user root 47.90.139.149 port 54634 [preauth] Oct 23 18:27:02 vps-eb8e942e sshd-session[1120969]: Connection from 47.90.139.149 port 36862 on 57.128.195.69 port 2222 rdomain ... show more Oct 23 18:22:54 vps-eb8e942e sshd-session[1120676]: Disconnected from invalid user root 47.90.139.149 port 54634 [preauth] Oct 23 18:27:02 vps-eb8e942e sshd-session[1120969]: Connection from 47.90.139.149 port 36862 on 57.128.195.69 port 2222 rdomain "" Oct 23 18:27:03 vps-eb8e942e sshd-session[1120969]: User root from 47.90.139.149 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇩🇪 mxpgmbh	2026-10-19 23:37:37 UTC · (3 weeks ago)	2026-10-20T01:37:01.358571+02:00 ** sshd-session[64661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.90.139.149 user=root 2026-10-20T01:37:02.937256+02:00 sshd-session[64661]: Failed password for ... show more 2026-10-20T01:37:01.358571+02:00 sshd-session[64661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.90.139.149 user=root 2026-10-20T01:37:02.937256+02:00 sshd-session[64661]: Failed password for root from 47.90.139.149 port 41728 ssh2 2026-10-20T01:37:34.879430+02:00 sshd-session[64885]: Invalid user from 47.90.139.149 port 48162 2026-10-20T01:37:34.880965+02:00 sshd-session[64885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.90.139.149 2026-10-20T01:37:37.028621+02:00 sshd-session[64885]: Failed password for invalid user ** from 47.90.139.149 port 48162 ssh2 show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-09-17 07:20:31 UTC · (1 month ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 FD-IX	2026-09-17 07:11:45 UTC · (1 month ago)	Fail2Ban: SSH brute-force attack detected.	Brute-Force SSH
🇫🇷 Petre 21_ip	2026-09-15 10:22:54 UTC · (1 month ago)	2026-09-15T12:22:53.535865+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=47.90.139.149 DST=155.133.26.57 LEN=60 TOS=0x14 PREC=0x00 TTL=54 ID=25369 DF PROTO=TCP SPT=49626 DPT=2222 WINDOW=64240 RES= ... show more 2026-09-15T12:22:53.535865+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=47.90.139.149 DST=155.133.26.57 LEN=60 TOS=0x14 PREC=0x00 TTL=54 ID=25369 DF PROTO=TCP SPT=49626 DPT=2222 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 mxpgmbh	2026-09-14 19:50:51 UTC · (2 months ago)	2026-09-14T21:50:11.937241+02:00 ** sshd-session[28495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.90.139.149 user=root 2026-09-14T21:50:13.182050+02:00 sshd-session[28495]: Failed password for ... show more 2026-09-14T21:50:11.937241+02:00 sshd-session[28495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.90.139.149 user=root 2026-09-14T21:50:13.182050+02:00 sshd-session[28495]: Failed password for root from 47.90.139.149 port 45466 ssh2 2026-09-14T21:50:48.692915+02:00 sshd-session[29813]: Invalid user from 47.90.139.149 port 41476 2026-09-14T21:50:48.694871+02:00 sshd-session[29813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.90.139.149 2026-09-14T21:50:50.891516+02:00 sshd-session[29813]: Failed password for invalid user ** from 47.90.139.149 port 41476 ssh2 show less	Brute-Force SSH
🇩🇪 cschulze	2026-09-09 19:38:59 UTC · (2 months ago)	2026-09-09T21:35:55.707844+02:00 v2201704704747956 sshd-session[33862]: Invalid user nmrsu from 47.90.139.149 port 47260 2026-09-09T21:37:44.511739+02:00 v2201704704747956 sshd-session[33872]: Invalid user roger from 47.90.139.149 port 51782 2026-09- ... show more 2026-09-09T21:35:55.707844+02:00 v2201704704747956 sshd-session[33862]: Invalid user nmrsu from 47.90.139.149 port 47260 2026-09-09T21:37:44.511739+02:00 v2201704704747956 sshd-session[33872]: Invalid user roger from 47.90.139.149 port 51782 2026-09-09T21:38:20.944438+02:00 v2201704704747956 sshd-session[33884]: Invalid user shoutcast from 47.90.139.149 port 43482 2026-09-09T21:38:57.560622+02:00 v2201704704747956 sshd-session[33886]: Invalid user work from 47.90.139.149 port 51882 ... show less	SSH
🇫🇮 Finder	2026-09-04 22:01:25 UTC · (2 months ago)	Fail2Ban - Brute-force SSH server ...	Brute-Force SSH
🇸🇰 Spyerfox	2026-09-04 21:55:09 UTC · (2 months ago)	Sep 4 23:55:07 <server> sshd\[653\]: User root from 47.90.139.149 not allowed because not listed in AllowUsersSep 4 23:55:08 <server> sshd\[653\]: Failed password for invalid user root from 47.90.139.149 port 45948 ssh2 ...	Brute-Force SSH

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 195.206.182.209

🇬🇧 195.140.214.26

🇬🇧 193.176.29.26

🇬🇧 193.32.209.240

🇬🇧 81.19.219.234

🇬🇧 31.14.254.108

🇬🇧 31.14.254.95

🇬🇧 31.14.254.86

🇺🇸 20.46.228.245

🇬🇧 5.226.140.123

🇮🇳 223.185.31.86

🇳🇱 185.242.226.103

🇰🇷 175.209.156.146

🇺🇸 162.216.150.169

🇺🇸 162.216.150.88

🇸🇬 161.120.181.149

🇸🇬 161.120.172.134

🇧🇬 79.124.62.10

🇸🇬 43.173.179.122

🇧🇪 34.156.64.240