JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.100.75.221

39.100.75.221 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 64%: ?

64%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.100.75.221

Whois 39.100.75.221

IP Abuse Reports for 39.100.75.221:

This IP address has been reported a total of 28 times from 20 distinct sources. 39.100.75.221 was first reported on May 7th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 anycast_ac	2026-06-21 05:49:38 (3 days ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/6080 (novnc). Family fingerprin ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/6080 (novnc). Family fingerprint: vnc-scanner Commands captured: $ http: GET / HTTP/1.1 $ ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36 $ served fake noVNC index (no upgrade) show less	DDoS Attack
🇩🇪 anycast_ac	2026-06-21 05:33:10 (3 days ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/6080 (novnc). Family fingerprin ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/6080 (novnc). Family fingerprint: vnc-scanner Commands captured: $ http: GET /favicon.ico HTTP/1.1 $ ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36 $ served fake noVNC index (no upgrade) show less	DDoS Attack
🇫🇷 Fasetech	2026-06-18 11:41:34 (6 days ago)	SecLedge detected suspicious activity. Score: 113.76. Sensor: T-Pot.	Brute-Force
🇺🇸 mutebot.net	2026-06-14 17:02:41 (1 week ago)	SRC=39.100.75.221, PROTO=TCP, SPT=56557, DPT=24870 SRC=39.100.75.221, PROTO=TCP, SPT=56557, DPT=1676 ... show more SRC=39.100.75.221, PROTO=TCP, SPT=56557, DPT=24870 SRC=39.100.75.221, PROTO=TCP, SPT=56557, DPT=16760 SRC=39.100.75.221, PROTO=TCP, SPT=56557, DPT=29969 SRC=39.100.75.221, PROTO=TCP, SPT=56557, DPT=49293 SRC=39.100.75.221, PROTO=TCP, SPT=56557, DPT=58506 show less	Port Scan
Anonymous	2026-06-14 15:18:24 (1 week ago)	Port Scan detected from 39.100.75.221 (CN/China/-). 16 hits in the last 100 seconds	Web App Attack
🇩🇪 kingjan1999	2026-06-14 12:31:43 (1 week ago)	Blocked by UFW [19458/tcp] \| SPT: 40293 \| TTL: 231 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/s ... show more Blocked by UFW [19458/tcp] \| SPT: 40293 \| TTL: 231 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 baltic-lab.com	2026-06-11 06:25:09 (1 week ago)	2026-06-11T08:23:44.653455+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-06-11T08:23:44.653455+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=39.100.75.221 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=240 ID=11437 PROTO=TCP SPT=59017 DPT=38724 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-11T08:24:15.303423+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=39.100.75.221 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=240 ID=10831 PROTO=TCP SPT=59017 DPT=24724 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-11T08:24:33.784950+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=39.100.75.221 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=240 ID=23419 PROTO=TCP SPT=59017 DPT=46046 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-11T08:25:01.868642+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=39.100.75.221 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=240 ID=7215 PROTO=TCP SPT=59017 DPT=36144 WINDOW ... show less	Brute-Force Hacking
🇬🇧 PeravixGroup	2026-06-08 08:13:31 (2 weeks ago)	Honeypot detection: X11 display server unauthorized access / probing attempt on port 6000. Severity: ... show more Honeypot detection: X11 display server unauthorized access / probing attempt on port 6000. Severity: MEDIUM. Aaran.cloud show less	Port Scan Brute-Force
🇬🇧 PeravixGroup	2026-06-06 21:25:44 (2 weeks ago)	Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDI ... show more Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇦🇺 LiftUp Hosting	2026-06-02 23:30:55 (3 weeks ago)	Honeypot hit: HTTP request on 8450	Hacking Bad Web Bot
🇬🇧 PeravixGroup	2026-06-02 16:34:33 (3 weeks ago)	Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. A ... show more Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. Aaran.cloud show less	DDoS Attack Hacking
🇨🇦 Blinker73	2026-06-01 20:37:24 (3 weeks ago)	2026-06-01T16:37 kernel: OUT= SRC=39.100.75.221 LEN=40 TOS=0x00 PREC=0xA0 TTL=229 ID=37274 PRO ... show more 2026-06-01T16:37 kernel: OUT= SRC=39.100.75.221 LEN=40 TOS=0x00 PREC=0xA0 TTL=229 ID=37274 PROTO=TCP SPT=46235 DPT=20111 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-01T16:37 kernel: OUT= SRC=39.100.75.221 LEN=40 TOS=0x00 PREC=0xA0 TTL=229 ID=52344 PROTO=TCP SPT=46235 DPT=903 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-01T16:37 kernel: OUT= SRC=39.100.75.221 LEN=40 TOS=0x00 PREC=0xA0 TTL=229 ID=63664 PROTO=TCP SPT=46235 DPT=6060 WINDOW=1024 RES=0x00 SYN URGP= show less	Port Scan
🇨🇳 pengpeng	2026-05-27 21:29:50 (3 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 32086 \| ttl: 243 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 32086 \| ttl: 243 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 pearbright	2026-05-26 02:54:03 (4 weeks ago)	2026-05-26T02:53:57.919100+00:00 srv1093252 kernel: [510036.503212] [UFW BLOCK] IN=eth0 OUT= MAC=28: ... show more 2026-05-26T02:53:57.919100+00:00 srv1093252 kernel: [510036.503212] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=39.100.75.221 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=224 ID=13758 PROTO=TCP SPT=44034 DPT=27963 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-26T02:53:58.622081+00:00 srv1093252 kernel: [510037.206407] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=39.100.75.221 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=224 ID=46965 PROTO=TCP SPT=44034 DPT=14374 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-26T02:53:58.910445+00:00 srv1093252 kernel: [510037.494538] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=39.100.75.221 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=224 ID=40451 PROTO=TCP SPT=44034 DPT=57701 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-26T02:53:59.139706+00:00 srv1093252 kernel: [510037.723743] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=39.100.75.221 DST ... show less	Port Scan
🇫🇷 Little Iguana	2026-05-25 19:36:46 (4 weeks ago)	trying to access non-authorized port	Port Scan

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 35.187.231.181

🇬🇧 195.96.139.72

🇺🇸 174.57.71.190

🇺🇸 141.11.88.12

🇹🇼 114.34.106.146

🇧🇬 92.247.121.56

🇪🇸 79.154.20.146

🇭🇰 202.82.20.241

🇷🇺 178.129.207.102

🇺🇸 172.245.21.30

🇭🇰 118.193.38.134

🇱🇹 62.60.130.219

🇫🇷 51.178.46.16

🇺🇸 43.153.59.240

🇸🇳 41.82.50.218

🇬🇧 185.249.74.198

🇺🇸 142.215.164.108

🇸🇬 103.189.234.244

🇮🇳 38.188.183.100

🇺🇸 35.238.186.152