JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.100.85.171

39.100.85.171 was found in our database!

This IP was reported 52 times. Confidence of Abuse is 78%: ?

78%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.100.85.171

Whois 39.100.85.171

IP Abuse Reports for 39.100.85.171:

This IP address has been reported a total of 52 times from 33 distinct sources. 39.100.85.171 was first reported on May 6th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 sandra361	2026-09-16 06:40:31 (13 hours ago)	Port scan detected: 22 attempts across 8 ports (5061, 5757, 8210, 9081, 9103, 12111, 28899, 49185). ... show more Port scan detected: 22 attempts across 8 ports (5061, 5757, 8210, 9081, 9103, 12111, 28899, 49185). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=39.100.85.171 LEN=40 TOS=0x00 PREC=0x00 TTL=231 ID=62237 PROTO=TCP SPT=40809 DPT=49185 WINDOW=1200 RES=0x00 RST URGP=0 show less	Port Scan
Anonymous	2026-09-16 05:00:03 (14 hours ago)	39.100.85.171 detected on srv01	Port Scan
🇹🇷 neron	2026-09-15 22:14:33 (21 hours ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 chronos	2026-09-14 06:34:49 (2 days ago)	[AUTORAVALT][[14/09/2026 - 03:34:48 -03:00 UTC] Attack from [Li Jia] [39.100.85.171]-[RANGE:39.96.0. ... show more [AUTORAVALT][[14/09/2026 - 03:34:48 -03:00 UTC] Attack from [Li Jia] [39.100.85.171]-[RANGE:39.96.0.0 - 39.108.255.255] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force ->] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇹🇷 Threat.live	2026-09-13 15:30:03 (3 days ago)	Threat.live: Web Scan	Web App Attack
🇹🇷 neron	2026-09-13 12:55:32 (3 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 chronos	2026-09-12 09:48:26 (4 days ago)	[AUTORAVALT][[12/09/2026 - 06:48:26 -03:00 UTC] Attack from [Li Jia] [39.100.85.171]-[RANGE:39.96.0. ... show more [AUTORAVALT][[12/09/2026 - 06:48:26 -03:00 UTC] Attack from [Li Jia] [39.100.85.171]-[RANGE:39.96.0.0 - 39.108.255.255] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force ->] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇨🇦 Arpan Sen	2026-09-12 06:20:00 (4 days ago)	Network port/address scan: probed 191 distinct port(s) across 2 host(s); 99% of connections received ... show more Network port/address scan: probed 191 distinct port(s) across 2 host(s); 99% of connections received no service (SYN, no reply) -- passive network sensor. show less	Port Scan
🇫🇷 Little Iguana	2026-09-09 17:24:48 (1 week ago)	trying to access non-authorized port	Port Scan
🇫🇮 xela_uvas	2026-09-09 05:38:42 (1 week ago)	SSH attack	Brute-Force SSH
🇺🇸 uchat-ai.com	2026-09-08 15:58:07 (1 week ago)	IP 39.100.85.171 在过去24小时内进行了 4 次攻击。详细信息: 攻击类型: Found User-Agent associated with security scanner, 攻击 ... show more IP 39.100.85.171 在过去24小时内进行了 4 次攻击。详细信息: 攻击类型: Found User-Agent associated with security scanner, 攻击信息: No matched data found; 攻击类型: Found User-Agent associated with security scanner, 攻击信息: No matched data found; 攻击类型: Found User-Agent associated with security scanner, 攻击信息: No matched data found; 攻击类型: Found User-Agent associated with security scanner, 攻击信息: No matched data found show less	Port Scan
🇹🇷 neron	2026-09-08 14:55:39 (1 week ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇨🇳 PrivateLiu	2026-09-07 02:19:03 (1 week ago)	[AbuseIPDB auto-report] Rules: Rule4. Region: CN. Unsupported/malformed requests: HTTP 400 responses ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 301, 400. Methods: GET. UA: N/A show less	Bad Web Bot Web App Attack
🇩🇪 london2038.com	2026-09-06 07:34:36 (1 week ago)	Connection atttempts against closed TCP ports Sep 6 09:34:06 BLOCK SRC=39.100.85.171 LEN=40 TOS=0x1 ... show more Connection atttempts against closed TCP ports Sep 6 09:34:06 BLOCK SRC=39.100.85.171 LEN=40 TOS=0x18 PREC=0xA0 TTL=236 ID=14488 PROTO=TCP SPT=40044 DPT=10038 WINDOW=1024 RES=0x00 SYN Sep 6 09:34:17 BLOCK SRC=39.100.85.171 LEN=40 TOS=0x00 PREC=0xA0 TTL=236 ID=24305 PROTO=TCP SPT=40044 DPT=20224 WINDOW=1024 RES=0x00 SYN Sep 6 09:34:35 BLOCK SRC=39.100.85.171 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=53743 PROTO=TCP SPT=40044 DPT=7333 WINDOW=1024 RES=0x00 SYN show less	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-09-04 11:22:56 (1 week ago)	Honeypot hit: HTTP request on 7020	Web App Attack

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 84.44.39.47

🇺🇸 216.150.1.223

🇲🇬 153.67.85.206

🇨🇳 117.35.158.142

🇨🇳 115.191.40.50

🇷🇺 77.94.99.50

🇫🇷 51.159.125.200

🇲🇩 45.15.227.120

🇩🇪 213.209.159.19

🇧🇷 177.68.13.195

🇦🇿 158.181.42.203

🇮🇳 122.15.129.26

🇧🇷 45.84.243.11

🇸🇬 43.163.6.201

🇺🇦 188.163.51.107

🇻🇳 157.66.80.124

🇺🇸 146.190.166.168

🇰🇷 119.203.223.36

🇻🇳 103.78.0.229

🇷🇴 92.118.39.49