JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.100.138.192

47.100.138.192 was found in our database!

This IP was reported 974 times. Confidence of Abuse is 100%: ?

100%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.100.138.192

Whois 47.100.138.192

IP Abuse Reports for 47.100.138.192:

This IP address has been reported a total of 974 times from 213 distinct sources. 47.100.138.192 was first reported on October 22nd 2025, and the most recent report was 22 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-25 04:05:44 (1 week ago)	Failed login attempt detected by Fail2Ban in plesk-proftpd jail	Brute-Force
🇩🇪 LRob.fr	2026-05-25 00:30:24 (1 week ago)	FTP brute-force attack detected by Fail2Ban in plesk-proftpd jail	FTP Brute-Force
🇦🇹 urnilxfgbez	2026-05-24 22:45:00 (1 week ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 Nerdscave Hosting	2026-05-24 22:40:17 (1 week ago)	FTP brute-force attack detected by Fail2Ban in plesk-proftpd jail	FTP Brute-Force
🇩🇪 ghostwarriors	2026-05-24 22:20:17 (1 week ago)	Unauthorized connection to FTP port 21	FTP Brute-Force Brute-Force
🇩🇪 Melle	2026-05-24 22:15:16 (1 week ago)	Unauthorized connection attempt detected from IP address 47.100.138.192	FTP Brute-Force
🇫🇷 SimonB	2026-05-23 23:16:53 (1 week ago)	SSH bruteforce attempt	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-05-16 23:20:38 (2 weeks ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/47.100.138.192	FTP Brute-Force
🇩🇪 LRob.fr	2026-05-16 03:15:09 (2 weeks ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇩🇪 gadix	2026-05-15 20:44:23 (2 weeks ago)	May 15 19:54:29 srv05 proftpd[3759412]: 136.243.127.48 (47.100.138.192[47.100.138.192]) - USER draht ... show more May 15 19:54:29 srv05 proftpd[3759412]: 136.243.127.48 (47.100.138.192[47.100.138.192]) - USER drahtblum: no such user found from 47.100.138.192 [47.100.138.192] to 136.243.127.48:21 May 15 20:39:14 srv05 proftpd[3763473]: 136.243.127.48 (47.100.138.192[47.100.138.192]) - USER drahtblum: no such user found from 47.100.138.192 [47.100.138.192] to 136.243.127.48:21 May 15 21:22:28 srv05 proftpd[3776094]: 136.243.127.48 (47.100.138.192[47.100.138.192]) - USER drahtblum: no such user found from 47.1 ... show less	FTP Brute-Force Brute-Force
🇩🇪 LRob.fr	2026-05-15 19:00:15 (2 weeks ago)	FTP brute-force attack detected by Fail2Ban in plesk-proftpd jail	FTP Brute-Force
🇩🇪 ghostwarriors	2026-05-15 18:50:11 (2 weeks ago)	Unauthorized connection to FTP port 21	FTP Brute-Force Brute-Force
🇫🇷 Campus France	2026-05-12 16:22:04 (3 weeks ago)	2026-05-12T14:23:55.558124+02:00 server9 dovecot[1849348]: pop3-login: Disconnected: Connection clos ... show more 2026-05-12T14:23:55.558124+02:00 server9 dovecot[1849348]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=47.100.138.192, lip=62.210.65.21, session=<6Gy4751ReK4vZIrA> 2026-05-12T14:50:22.065056+02:00 server9 dovecot[1849348]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 3 secs): user=<[email protected]>, method=PLAIN, rip=47.100.138.192, lip=62.210.65.21, session=<qyw2Tp5RWuUvZIrA> 2026-05-12T15:17:14.720672+02:00 server9 dovecot[1849348]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=47.100.138.192, lip=62.210.65.21, session=<Qtlnrp5RRukvZIrA> 2026-05-12T15:43:44.596809+02:00 server9 dovecot[1849348]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=47.100.138.192, lip=62.210.65.21, session=<wGIrDZ9RYNEvZIrA> 2026-05-12T16:10:10. ... show less	Brute-Force Exploited Host
🇫🇷 Campus France	2026-05-12 11:03:39 (3 weeks ago)	2026-05-12T09:08:45.709176+02:00 server9 dovecot[1849348]: pop3-login: Disconnected: Connection clos ... show more 2026-05-12T09:08:45.709176+02:00 server9 dovecot[1849348]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=47.100.138.192, lip=62.210.65.21, session=<k/uaiJlRVOwvZIrA> 2026-05-12T09:34:31.249169+02:00 server9 dovecot[1849348]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=47.100.138.192, lip=62.210.65.21, session=<lWey5JlR9skvZIrA> 2026-05-12T10:01:12.379185+02:00 server9 dovecot[1849348]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=47.100.138.192, lip=62.210.65.21, session=<NUMoRJpRvKIvZIrA> 2026-05-12T10:28:09.461041+02:00 server9 dovecot[1849348]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=47.100.138.192, lip=62.210.65.21, session=<5nyEpJpR1OQvZIrA> 2026-05-12T10:53:05. ... show less	Brute-Force Exploited Host
🇫🇷 Campus France	2026-05-12 05:52:17 (3 weeks ago)	2026-05-12T04:15:27.342365+02:00 server9 dovecot[1849348]: pop3-login: Disconnected: Connection clos ... show more 2026-05-12T04:15:27.342365+02:00 server9 dovecot[1849348]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=47.100.138.192, lip=62.210.65.21, session=<qeugb5VR4rMvZIrA> 2026-05-12T04:39:34.512650+02:00 server9 dovecot[1849348]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=47.100.138.192, lip=62.210.65.21, session=<VYXjxZVRbtgvZIrA> 2026-05-12T05:03:25.277151+02:00 server9 dovecot[1849348]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=47.100.138.192, lip=62.210.65.21, session=<QkorG5ZRNuwvZIrA> 2026-05-12T05:27:03.559294+02:00 server9 dovecot[1849348]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=47.100.138.192, lip=62.210.65.21, session=<I1+8b5ZRfMQvZIrA> 2026-05-12T05:50:46 ... show less	Brute-Force Exploited Host

Showing 136 to 150 of 974 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.181.164.232

🇨🇳 180.143.166.97

🇨🇳 120.227.137.100

🇨🇳 116.149.251.15

🇨🇳 116.22.31.142

🇮🇳 103.123.53.88

🇨🇳 14.212.216.15

🇬🇧 193.163.125.135

🇧🇷 191.243.242.2

🇨🇳 183.7.15.52

🇭🇰 156.245.246.50

🇭🇰 152.32.251.182

🇺🇸 152.32.205.153

🇨🇳 112.103.94.101

🇧🇩 103.42.5.132

🇺🇸 66.240.223.208

🇯🇵 35.78.242.100

🇮🇳 2409:40f2:101a:7969:bc9b:b4df:3502:b82

🇨🇳 220.187.15.84

🇨🇳 183.7.131.152