JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.103.198.31

39.103.198.31 was found in our database!

This IP was reported 217 times. Confidence of Abuse is 92%: ?

92%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.103.198.31

Whois 39.103.198.31

IP Abuse Reports for 39.103.198.31:

This IP address has been reported a total of 217 times from 87 distinct sources. 39.103.198.31 was first reported on October 18th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 LotPhantom	2026-06-26 14:33:29 (1 day ago)	2026-06-26T14:33:28.537257+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-06-26T14:33:28.537257+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=39.103.198.31 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=17329 DF PROTO=TCP SPT=51768 DPT=2222 WINDOW=29200 RES=0x00 SYN URGP=0 2026-06-26T14:33:29.537276+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=39.103.198.31 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=17330 DF PROTO=TCP SPT=51768 DPT=2222 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇨🇿 kronos	2026-06-26 14:18:31 (1 day ago)	IDS: FlowIntel scan-like source \| SID:9900001 \| session_sigs:2 \| alerts5m:26	Port Scan
🇳🇱 BIV	2026-06-26 02:20:10 (1 day ago)	Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 2222. Automated ti ... show more Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 2222. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking Brute-Force SSH
🇷🇺 Agrohim	2026-06-24 22:10:04 (2 days ago)	Gate I blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇺🇸 xmission.com	2026-06-23 21:17:23 (3 days ago)	Blocked by UFW (TCP on 2222) Source port: 37428 TTL: 45 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 2222) Source port: 37428 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 39.103.198.31) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-23 09:22:21 (4 days ago)	tcp/2222 (8 or more attempts)	Port Scan
🇺🇸 cwytech	2026-06-22 16:31:55 (5 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.	Hacking
Anonymous	2026-06-22 00:28:01 (5 days ago)	Jun 21 20:27:59 localhost kernel: [110433357.642923] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 21 20:27:59 localhost kernel: [110433357.642923] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=39.103.198.31 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=46066 DF PROTO=TCP SPT=59456 DPT=2222 WINDOW=29200 RES=0x00 SYN URGP=0 Jun 21 20:27:59 localhost kernel: [110433357.642950] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=39.103.198.31 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=46066 DF PROTO=TCP SPT=59456 DPT=2222 SEQ=2769122691 ACK=0 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A3D0AC6710000000001030307) Jun 21 20:28:00 localhost kernel: [110433358.261601] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=39.103.198.31 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=48476 DF PROTO=TCP SPT=60130 DPT=2222 WINDOW=29200 RES=0x00 SYN URGP=0 Jun 21 20:28:00 localhost kernel: [110433358.261612] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0 show less	Port Scan
🇺🇸 xmission.com	2026-06-20 02:16:22 (1 week ago)	Blocked by UFW (TCP on 2222) Source port: 33352 TTL: 49 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2222) Source port: 33352 TTL: 49 Packet length: 60 TOS: 0x00 This report (for 39.103.198.31) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-19 06:44:42 (1 week ago)	tcp/2222 (8 or more attempts)	Port Scan
🇨🇦 senkodev	2026-06-19 01:10:49 (1 week ago)	2026-06-19T01:10:42.768305Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 39.103.198.31:5381 ... show more 2026-06-19T01:10:42.768305Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 39.103.198.31:53816 (158.69.22.11:2222) [session: 701e43b3002f] 2026-06-19T01:10:48.430906Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 39.103.198.31:60462 (158.69.22.11:2222) [session: fb3b5e2855a8] ... show less	Brute-Force SSH
🇩🇪 iNetWorker	2026-06-14 06:10:38 (1 week ago)	firewall-block, port(s): 2222/tcp	Port Scan
Anonymous	2026-06-13 09:30:11 (2 weeks ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇫🇮 6kilowatti	2026-06-12 17:11:19 (2 weeks ago)	2026-06-12T20:11:18.638499+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-06-12T20:11:18.638499+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=39.103.198.31 DST=83.148.240.21 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=60052 DF PROTO=TCP SPT=40028 DPT=2222 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 MPL	2026-06-08 08:08:45 (2 weeks ago)	tcp/2222 (8 or more attempts)	Port Scan

Showing 1 to 15 of 217 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.149.235.152

🇬🇧 195.206.182.194

🇩🇪 164.90.190.102

🇮🇹 93.92.73.150

🇭🇺 85.67.39.52

🇸🇬 20.212.52.137

🇬🇧 195.206.182.206

🇺🇸 185.98.168.28

🇺🇸 173.239.211.40

🇺🇸 172.203.134.70

🇰🇷 150.109.241.177

🇪🇸 80.24.1.119

🇺🇸 52.177.169.196

🇧🇪 35.210.61.208

🇨🇿 91.224.90.50

🇩🇪 207.154.230.149

🇳🇱 195.178.110.217

🇳🇱 176.65.148.244

🇨🇳 113.25.249.100

🇺🇸 107.173.212.133