JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.100.85.165

39.100.85.165 was found in our database!

This IP was reported 116 times. Confidence of Abuse is 100%: ?

100%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.100.85.165

Whois 39.100.85.165

IP Abuse Reports for 39.100.85.165:

This IP address has been reported a total of 116 times from 61 distinct sources. 39.100.85.165 was first reported on May 6th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 helouism	2026-10-22 07:09:00 (13 hours ago)	Fail2Ban: Blocked by UFW for port scanning.	Port Scan DDoS Attack
🇨🇳 鹏鹏	2026-10-22 00:35:55 (20 hours ago)	monitor: on VM-0-7-ubuntu \| port: 3702 \| ttl: 243 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇹🇷 neron	2026-10-21 16:34:58 (1 day ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇧🇷 radardatelecom	2026-10-20 14:18:05 (2 days ago)	Blocked by Radar da Telecom firewall — abuseipdb	Bad Web Bot Web App Attack
🇫🇮 xela_uvas	2026-10-20 13:34:40 (2 days ago)	SSH attack	Brute-Force SSH
🇹🇷 neron	2026-10-20 08:00:21 (2 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇫🇷 agroman93	2026-10-20 01:40:00 (2 days ago)	T-Pot honeypot: 960 hits on ports [1273, 1768, 2613, 4195, 4590, 4849, 7448, 10565, 12499, 13044] (a ... show more T-Pot honeypot: 960 hits on ports [1273, 1768, 2613, 4195, 4590, 4849, 7448, 10565, 12499, 13044] (automated) show less	Port Scan
🇩🇪 evvsk	2026-10-18 05:53:01 (4 days ago)	UFW blocked port scan: 3 attempts against ports 56166, 56076, 57063	Port Scan
🇹🇷 Threat.live	2026-10-17 20:05:03 (5 days ago)	Port Scan Detected	Port Scan
🇫🇷 Hostynet	2026-10-15 06:54:14 (1 week ago)	Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single s ... show more Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single source). Source automatically blacklisted for 1 week. show less	Port Scan
🇧🇷 ICS Labs	2026-10-14 15:20:40 (1 week ago)	ICS Labs threat intelligence (ICS Feeds): Port Scan, Brute-Force. Last observed 2026-10-14 UTC.	Port Scan Brute-Force
🇫🇷 Hostynet	2026-10-14 06:43:14 (1 week ago)	Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single s ... show more Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single source). Source automatically blacklisted for 1 week. show less	Port Scan
🇺🇸 baltic-lab.com	2026-10-14 05:36:43 (1 week ago)	2026-10-14T07:34:33.811244+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-10-14T07:34:33.811244+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=39.100.85.165 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=240 ID=37192 PROTO=TCP SPT=56070 DPT=44311 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-14T07:34:53.428743+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=39.100.85.165 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=240 ID=45241 PROTO=TCP SPT=56070 DPT=25681 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-14T07:35:03.538786+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=39.100.85.165 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=240 ID=48096 PROTO=TCP SPT=56070 DPT=14573 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-14T07:35:05.515573+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=39.100.85.165 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0xA0 TTL=240 ID=65344 PROTO=TCP SPT=56070 DPT=43982 WINDO ... show less	Brute-Force Hacking
🇩🇪 baltic-lab.com	2026-10-13 06:45:14 (1 week ago)	Firewall Detection, DE, Either a port scan or continued brute-force attack by a previously blocked o ... show more Firewall Detection, DE, Either a port scan or continued brute-force attack by a previously blocked offender ... show less	Brute-Force Port Scan
🇫🇷 Hostynet	2026-10-13 06:34:14 (1 week ago)	Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single s ... show more Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single source). Source automatically blacklisted for 1 week. show less	Port Scan

Showing 1 to 15 of 116 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.178.210.188

🇬🇧 193.163.125.70

🇵🇰 137.59.230.227

🇮🇳 117.194.62.186

🇵🇱 80.238.118.34

🇧🇬 79.124.58.118

🇺🇦 78.154.179.192

🇨🇳 61.142.255.146

🇺🇸 20.42.89.33

🇩🇪 213.209.159.242

🇨🇦 192.175.111.237

🇲🇽 187.188.116.129

🇨🇿 187.14.124.95

🇺🇸 185.251.19.40

🇺🇸 184.83.116.219

🇺🇸 172.110.223.173

🇫🇮 147.185.133.94

🇺🇦 143.244.45.239

🇻🇳 123.31.31.125

🇮🇩 103.113.170.231