This IP address has been reported a total of
12
times from
11 distinct
sources.
47.97.5.66 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-14T02:45:52.732758+08:00 C20241211186402 sshd[159068]: Failed password for root from 47.97.5 ...
show more2026-06-14T02:45:52.732758+08:00 C20241211186402 sshd[159068]: Failed password for root from 47.97.5.66 port 52482 ssh2
2026-06-14T02:45:55.256403+08:00 C20241211186402 sshd[159068]: Failed password for root from 47.97.5.66 port 52482 ssh2
2026-06-14T02:45:58.270269+08:00 C20241211186402 sshd[159068]: Failed password for root from 47.97.5.66 port 52482 ssh2
2026-06-14T02:46:00.825147+08:00 C20241211186402 sshd[159068]: Failed password for root from 47.97.5.66 port 52482 ssh2
2026-06-14T02:46:03.825098+08:00 C20241211186402 sshd[159068]: Failed password for root from 47.97.5.66 port 52482 ssh2
...
show less
Blocked by UFW (TCP on 22)
Source port: 58581
TTL: 112
Packet length: 40
TOS: 0x00
This report (for ...
show moreBlocked by UFW (TCP on 22)
Source port: 58581
TTL: 112
Packet length: 40
TOS: 0x00
This report (for 47.97.5.66) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-06-11T22:05:50.664021+00:00 seraph sshd[976624]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-06-11T22:05:50.664021+00:00 seraph sshd[976624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.5.66 user=root
2026-06-11T22:05:52.165180+00:00 seraph sshd[976624]: Failed password for invalid user root from 47.97.5.66 port 32890 ssh2
2026-06-11T22:06:02.386028+00:00 seraph sshd[976624]: Failed password for invalid user root from 47.97.5.66 port 32890 ssh2
2026-06-11T22:06:05.900626+00:00 seraph sshd[976624]: Failed password for invalid user root from 47.97.5.66 port 32890 ssh2
2026-06-11T22:06:07.599888+00:00 seraph sshd[976624]: Disconnecting invalid user root 47.97.5.66 port 32890: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
...
show less
anomaly: tcp_port_scan, 501 > threshold 500, repeats 1159 times
Port Scan
Anonymous
2026-06-11T19:21:28.915797+00:00 subaru sshd-session[2107944]: Failed password for root from 47.97.5 ...
show more2026-06-11T19:21:28.915797+00:00 subaru sshd-session[2107944]: Failed password for root from 47.97.5.66 port 34466 ssh2
2026-06-11T19:21:31.604287+00:00 subaru sshd-session[2107944]: Failed password for root from 47.97.5.66 port 34466 ssh2
2026-06-11T19:21:33.923211+00:00 subaru sshd-session[2107944]: Failed password for root from 47.97.5.66 port 34466 ssh2
2026-06-11T19:21:36.313207+00:00 subaru sshd-session[2107944]: Failed password for root from 47.97.5.66 port 34466 ssh2
2026-06-11T19:21:37.982791+00:00 subaru sshd-session[2107944]: Failed password for root from 47.97.5.66 port 34466 ssh2
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
2026-06-09T20:10:47.882854+02:00 ns3136794 sshd[1101898]: Failed password for root from 47.97.5.66 p ...
show more2026-06-09T20:10:47.882854+02:00 ns3136794 sshd[1101898]: Failed password for root from 47.97.5.66 port 58584 ssh2
2026-06-09T20:10:50.554329+02:00 ns3136794 sshd[1101898]: Failed password for root from 47.97.5.66 port 58584 ssh2
2026-06-09T20:10:54.480048+02:00 ns3136794 sshd[1101898]: Failed password for root from 47.97.5.66 port 58584 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
12
of 12 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩