JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.92.148.42

47.92.148.42 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 67%: ?

67%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.92.148.42

Whois 47.92.148.42

IP Abuse Reports for 47.92.148.42:

This IP address has been reported a total of 26 times from 25 distinct sources. 47.92.148.42 was first reported on June 15th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 m_vlasov	2026-06-29 03:30:59 (2 weeks ago)	SSH/Telnet honeypot: 0 login attempts, 1 sessions, 0 shell commands.	Port Scan
🇪🇸 www.pk25.com	2026-06-28 10:03:08 (2 weeks ago)	2026-06-28T12:02:51.889567+02:00 servidor1 sshd-session[729280]: pam_unix(sshd:auth): authentication ... show more 2026-06-28T12:02:51.889567+02:00 servidor1 sshd-session[729280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.92.148.42 user=root 2026-06-28T12:02:53.592454+02:00 servidor1 sshd-session[729280]: Failed password for invalid user root from 47.92.148.42 port 56272 ssh2 2026-06-28T12:02:56.714708+02:00 servidor1 sshd-session[729280]: Failed password for invalid user root from 47.92.148.42 port 56272 ssh2 2026-06-28T12:02:59.991249+02:00 servidor1 sshd-session[729280]: Failed password for invalid user root from 47.92.148.42 port 56272 ssh2 2026-06-28T12:03:03.323924+02:00 servidor1 sshd-session[729280]: Failed password for invalid user root from 47.92.148.42 port 56272 ssh2 2026-06-28T12:03:05.706918+02:00 servidor1 sshd-session[729280]: Failed password for invalid user root from 47.92.148.42 port 56272 ssh2 2026-06-28T12:03:07.081006+02:00 servidor1 sshd-session[729280]: Disconnecting invalid user root 47.92.148.42 port 56272: Change of userna ... show less	Brute-Force SSH
Anonymous	2026-06-28 09:21:17 (2 weeks ago)	Jun 28 11:21:02 prisma sshd[3974430]: Failed password for root from 47.92.148.42 port 56056 ssh2 Jun ... show more Jun 28 11:21:02 prisma sshd[3974430]: Failed password for root from 47.92.148.42 port 56056 ssh2 Jun 28 11:21:05 prisma sshd[3974430]: Failed password for root from 47.92.148.42 port 56056 ssh2 Jun 28 11:21:08 prisma sshd[3974430]: Failed password for root from 47.92.148.42 port 56056 ssh2 Jun 28 11:21:11 prisma sshd[3974430]: Failed password for root from 47.92.148.42 port 56056 ssh2 Jun 28 11:21:16 prisma sshd[3974430]: Failed password for root from 47.92.148.42 port 56056 ssh2 ... show less	Brute-Force SSH
🇩🇪 factor1	2026-06-27 22:31:43 (2 weeks ago)	Fail2ban at thor Reports Abuse.	FTP Brute-Force Brute-Force
🇩🇪 NetWatch	2026-06-27 19:14:46 (3 weeks ago)	The IP 47.92.148.42 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇫🇷 Max la Menace	2026-06-26 15:09:20 (3 weeks ago)	2026-06-26T16:09:09.942219+01:00 ns3124905 sshd-session[1540730]: Failed password for root from 47.9 ... show more 2026-06-26T16:09:09.942219+01:00 ns3124905 sshd-session[1540730]: Failed password for root from 47.92.148.42 port 33904 ssh2 2026-06-26T16:09:16.470909+01:00 ns3124905 sshd-session[1540730]: Failed password for root from 47.92.148.42 port 33904 ssh2 2026-06-26T16:09:20.277039+01:00 ns3124905 sshd-session[1540730]: Failed password for root from 47.92.148.42 port 33904 ssh2 ... show less	Brute-Force SSH
🇺🇸 vandomatos	2026-06-26 10:31:29 (3 weeks ago)	Jun 26 03:31:08 servidor sshd[1423578]: Failed password for root from 47.92.148.42 port 56890 ssh2 J ... show more Jun 26 03:31:08 servidor sshd[1423578]: Failed password for root from 47.92.148.42 port 56890 ssh2 Jun 26 03:31:11 servidor sshd[1423578]: Failed password for root from 47.92.148.42 port 56890 ssh2 Jun 26 03:31:21 servidor sshd[1423578]: Disconnecting authenticating user root 47.92.148.42 port 56890: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] ... show less	Brute-Force SSH
Anonymous	2026-06-24 08:14:51 (3 weeks ago)	tcp_port_scan	DDoS Attack Port Scan Brute-Force
Anonymous	2026-06-24 02:20:02 (3 weeks ago)	2026-06-24T05:49:51.763150+03:30 digitalogic sshd-session[336379]: Failed password for root from 47. ... show more 2026-06-24T05:49:51.763150+03:30 digitalogic sshd-session[336379]: Failed password for root from 47.92.148.42 port 48660 ssh2 2026-06-24T05:49:54.390227+03:30 digitalogic sshd-session[336379]: Failed password for root from 47.92.148.42 port 48660 ssh2 2026-06-24T05:49:57.198039+03:30 digitalogic sshd-session[336379]: Failed password for root from 47.92.148.42 port 48660 ssh2 ... show less	Brute-Force SSH
🇩🇪 cybergecko.de	2026-06-24 01:44:35 (3 weeks ago)	Jun 24 03:44:15 CyberGecko sshd[2675514]: Failed password for root from 47.92.148.42 port 57956 ssh2 ... show more Jun 24 03:44:15 CyberGecko sshd[2675514]: Failed password for root from 47.92.148.42 port 57956 ssh2 Jun 24 03:44:20 CyberGecko sshd[2675514]: Failed password for root from 47.92.148.42 port 57956 ssh2 Jun 24 03:44:25 CyberGecko sshd[2675514]: Failed password for root from 47.92.148.42 port 57956 ssh2 Jun 24 03:44:34 CyberGecko sshd[2675514]: Disconnecting authenticating user root 47.92.148.42 port 57956: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] ... show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-06-23 22:45:00 (3 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇦🇹 centurion	2026-06-23 21:57:36 (3 weeks ago)	Blocked by UFW on ns03 [6379/tcp] Source port: 43164 TTL: 103 Packet length: 40 TOS: 0x00 This repo ... show more Blocked by UFW on ns03 [6379/tcp] Source port: 43164 TTL: 103 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 thecocasio	2026-06-22 22:24:18 (3 weeks ago)	PortSentry honeypot: unsolicited TCP connection to closed decoy port 6379 (Redis) on a host running ... show more PortSentry honeypot: unsolicited TCP connection to closed decoy port 6379 (Redis) on a host running no such service. Automated port-scan detection at 2026-06-22T22:24:18Z. show less	Port Scan
🇬🇧 gbzret4d	2026-06-22 10:46:09 (3 weeks ago)	Honeypot [uk-production01]: SSH handshake/banner (22 bytes of payload); 2222 [1] TCP	SSH
🇨🇦 sh97	2026-06-20 20:54:56 (4 weeks ago)	CA02-HB-TOR: SSH Brute Force from 47.92.148.42 at 2026-06-21 02:24:56 IST	Brute-Force SSH

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 211.75.3.37

🇲🇾 202.165.29.196

🇩🇪 165.227.141.174

🇸🇬 101.47.15.119

🇸🇬 47.82.168.137

🇩🇪 45.135.141.14

🇸🇬 45.32.124.176

🇩🇪 4.182.219.135

🇹🇼 198.235.24.105

🇩🇪 193.108.118.155

🇩🇪 172.111.80.161

🇺🇸 3.217.82.254

🇺🇸 2a04:4e40:e040:0:d40:bded:8047:d569

🇧🇷 201.222.20.20

🇩🇪 167.94.145.19

🇰🇷 119.209.12.20

🇭🇰 118.193.39.103

🇳🇱 45.148.10.141

🇬🇧 35.203.211.59

🇻🇳 14.224.202.234