47.108.139.252
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Aliyun Computing Co., LTD
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS37963
- Domain Name
- alibabacloud.com
- Country
- 🇨🇳 China
- City
- Chengdu, Sichuan
Abuse Reports
Total reports
31 from
22 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/8000 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
|
Port Scan | |
| 🇺🇸 heyzg |
HTTP secret_harvesting (observed): 4 HTTP, 2s
|
Brute-Force | |
| 🇩🇪 Marco711 |
port/URL scanning
|
Port Scan Web App Attack | |
| 🇺🇸 HamSammich |
Automated sensor: 3 HTTP connection/probe attempts over the last 24h (latest 2026-10-19T23:13Z).
|
Brute-Force Web App Attack | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/8888 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
|
Port Scan | |
| 🇺🇸 sandra361 |
Port scan detected: 44 attempts across 3 ports (5000, 8000, 9000). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=47.108.139.252 LEN=40 TOS=0x00 PREC=0x00 TTL=35 ID=41423 DF PROTO=TCP SPT=37792 DPT=5000 WINDOW=29200 RES=0x00 ACK URGP=0
|
Port Scan | |
| 🇺🇸 HamSammich |
Automated sensor: 1 HTTPS connection/probe attempts over the last 24h (latest 2026-10-18T18:36Z).
|
Brute-Force Web App Attack | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/8000 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
|
Port Scan | |
| 🇫🇷 MaxExcis |
Web vulnerability scanning: repeated requests for sensitive paths (.env, .git, wp-login, config/backup files). Automated report.
|
Web App Attack Bad Web Bot | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/3000 (HTTP/API); 4 application-level events across 4 source port(s). Sensor(s): Honeyaml.
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 10 application-level events across 2 target ports and 2 source port(s). Ports: 3000/HTTP/API, 8000/service. Sensors: Honeyaml, Honeytrap.
|
Port Scan | |
| 🇫🇮 sibahota |
47.108.139.252 - - [15/Oct/2026:01:25:19 +0000] 157.180.42.246:80 "GET /.env HTTP/1.1" 403 37 0.000 "-" "Mozilla/5.0" - - - "http://157.180.42.246:80"
...
|
Web App Attack Brute-Force | |
| 🇩🇪 loveprod |
47.108.139.252 - - [14/Oct/2026:16:41:53 +0300] "GET /.env HTTP/1.1" 301 559 "-" "Mozilla/5.0"
47.108.139.252 - - [14/Oct/2026:16:41:53 +0300] "GET /.git/HEAD HTTP/1.1" 301 569 "-" "Mozilla/5.0"
...
|
Bad Web Bot | |
| Anonymous |
47.108.139.252 - - [13/Oct/2026:09:16:14 +0000] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0" "-" "91.98.135.170"
...
|
Hacking Bad Web Bot Web App Attack | |
| Anonymous |
Web App Attack
|
Brute-Force Exploited Host Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown