JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.96.71.48

47.96.71.48 was found in our database!

This IP was reported 109 times. Confidence of Abuse is 1%: ?

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.96.71.48

Whois 47.96.71.48

IP Abuse Reports for 47.96.71.48:

This IP address has been reported a total of 109 times from 93 distinct sources. 47.96.71.48 was first reported on April 22nd 2026, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-08-19 12:55:57 (4 weeks ago)	ICS Labs identified 47.96.71.48 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Exploited Host
🇮🇳 evicky2002	2026-07-03 07:05:16 (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 dotnetdork	2026-07-03 00:36:57 (2 months ago)	SSH honeypot detection (Endlessh tarpit, port 22). 1 probe(s) sustained for 16m total hold time. 2 K ... show more SSH honeypot detection (Endlessh tarpit, port 22). 1 probe(s) sustained for 16m total hold time. 2 KB of synthetic SSH banner data served to exhaust attacker resources. Consistent with automated SSH scanning/brute-force. Reported by dotnetdork.dev security honeypot. show less	Brute-Force SSH
🇮🇳 evicky2002	2026-07-02 04:51:18 (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇧🇷 ICS Labs	2026-05-31 02:00:16 (3 months ago)	ICS Labs identified 47.96.71.48 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Exploited Host
🇫🇷 guille-rodriguez	2026-05-21 09:36:23 (3 months ago)	SSH BruteForce detected by Fail2Ban (failures=8, source=VPSO)	Brute-Force SSH
Anonymous	2026-05-21 09:13:15 (3 months ago)	2026-05-21T11:13:13.716116+02:00 webserver.mordor.land sshd-session[194985]: Invalid user admin from ... show more 2026-05-21T11:13:13.716116+02:00 webserver.mordor.land sshd-session[194985]: Invalid user admin from 47.96.71.48 port 60530 2026-05-21T11:13:13.954595+02:00 webserver.mordor.land sshd-session[194985]: Connection closed by invalid user admin 47.96.71.48 port 60530 [preauth] 2026-05-21T11:13:14.738796+02:00 webserver.mordor.land sshd-session[194987]: Invalid user testuser from 47.96.71.48 port 60542 ... show less	Brute-Force SSH
🇫🇷 LRNP	2026-05-21 09:09:59 (3 months ago)	2026-05-21T09:09:56.667510+00:00 helium sshd-session[61191]: pam_unix(sshd:auth): authentication fai ... show more 2026-05-21T09:09:56.667510+00:00 helium sshd-session[61191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.96.71.48 2026-05-21T09:09:58.487908+00:00 helium sshd-session[61191]: Failed password for invalid user admin from 47.96.71.48 port 39642 ssh2 2026-05-21T09:09:59.521622+00:00 helium sshd-session[61191]: Connection closed by invalid user admin 47.96.71.48 port 39642 [preauth] ... show less	Brute-Force SSH
🇩🇪 markawes	2026-05-20 20:21:01 (3 months ago)	[markis] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence ... show more [markis] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence: 2026-05-20T20:20:53.561350+00:00 sshd-session[561562]: Failed password for root from 47.96.71.48 port 33832 ssh2 2026-05-20T20:20:55.875797+00:00 sshd-session[561565]: Invalid user admin from 47.96.71.48 port 49386 2026-05-20T20:20:56.193598+00:00 sshd-session[561565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.96.71.48 2026-05-20T20:20:57.409648+00:00 sshd-session[561565]: Failed password for invalid user admin from 47.96.71.48 port 49386 ssh2 2026-05-20T20:20:59.665775+00:00 sshd-session[561567]: Invalid user admin from 47.96.71.48 port 49396 show less	Brute-Force SSH
Anonymous	2026-05-20 20:18:35 (3 months ago)	$f2bV_matches	Brute-Force SSH
Anonymous	2026-05-20 20:08:07 (3 months ago)	May 20 20:08:02 f2b auth.info sshd[1051511]: Failed password for root from 47.96.71.48 port 46460 ss ... show more May 20 20:08:02 f2b auth.info sshd[1051511]: Failed password for root from 47.96.71.48 port 46460 ssh2 May 20 20:08:04 f2b auth.info sshd[1051517]: Failed password for root from 47.96.71.48 port 46468 ssh2 May 20 20:08:06 f2b auth.info sshd[1051519]: Invalid user admin from 47.96.71.48 port 46480 ... show less	Brute-Force SSH
🇨🇦 Flashfire	2026-05-20 20:01:59 (3 months ago)	May 20 20:01:51 flashfire sshd[1782155]: Connection closed by authenticating user root 47.96.71.48 p ... show more May 20 20:01:51 flashfire sshd[1782155]: Connection closed by authenticating user root 47.96.71.48 port 35462 [preauth] May 20 20:01:53 flashfire sshd[1782183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.96.71.48 user=root May 20 20:01:55 flashfire sshd[1782183]: Failed password for root from 47.96.71.48 port 52622 ssh2 May 20 20:01:56 flashfire sshd[1782183]: Connection closed by authenticating user root 47.96.71.48 port 52622 [preauth] May 20 20:01:57 flashfire sshd[1782233]: Invalid user admin from 47.96.71.48 port 52626 ... show less	Brute-Force SSH
🇨🇦 enoki	2026-05-20 20:01:39 (3 months ago)	2026-05-20T20:01:32.727119+00:00 enklol sshd-session[2172577]: Invalid user admin from 47.96.71.48 p ... show more 2026-05-20T20:01:32.727119+00:00 enklol sshd-session[2172577]: Invalid user admin from 47.96.71.48 port 48218 2026-05-20T20:01:34.185971+00:00 enklol sshd-session[2172579]: Invalid user admin from 47.96.71.48 port 48224 2026-05-20T20:01:35.653919+00:00 enklol sshd-session[2172581]: Invalid user hduser from 47.96.71.48 port 48226 2026-05-20T20:01:37.094740+00:00 enklol sshd-session[2172583]: Invalid user steam from 47.96.71.48 port 48238 2026-05-20T20:01:38.415264+00:00 enklol sshd-session[2172591]: Invalid user ubuntu from 47.96.71.48 port 48248 ... show less	Brute-Force SSH
🇯🇵 rafale2k	2026-05-20 18:24:25 (3 months ago)	SSH Brute Force	Brute-Force SSH
Anonymous	2026-05-20 03:05:57 (3 months ago)	SSH Honeypot detected multiple failed login attempts	Brute-Force SSH

Showing 1 to 15 of 109 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a940:301:225:0:f::

🇳🇮 208.96.130.124

🇮🇳 182.70.255.242

🇺🇸 167.172.209.184

🇮🇷 85.198.19.239

🇸🇬 47.79.201.52

🇺🇸 40.119.40.27

🇺🇸 34.232.26.216

🇷🇴 2.57.121.112

🇳🇱 204.76.203.214

🇲🇽 187.210.87.133

🇧🇷 179.176.210.17

🇧🇪 66.249.93.233

🇧🇴 190.129.122.185

🇫🇷 170.39.216.152

🇳🇱 167.172.45.115

🇺🇸 162.216.150.229

🇬🇧 151.245.206.220

🇨🇳 123.12.38.187

🇨🇳 112.36.74.46