47.238.227.245
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- ALIBABA CLOUD - HK
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS45102
- Domain Name
- alibabacloud.com
- Country
- 🇭🇰 Hong Kong
- City
- Hong Kong
Abuse Reports
Total reports
48 from
39 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇯🇵 tttomomi |
Unsolicited SMTP connection scanning: repeated connect and disconnect with no SMTP command issued, rate-limited and banned by our filter. Reported as an observation; the intent (research or reconnaissance) is not determined.
|
Port Scan | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: Empty payload (likely service probe); 47335 [1] TCP
|
Port Scan | |
| 🇩🇪 mailox |
SSH Unauthorized connection attempt
...
|
Brute-Force SSH | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: SSH/Telnet brute-force; port scan / service probe. 3 events observed. 4 distinct ports targeted. Reported automatically from a honeypot sensor.
|
Port Scan Brute-Force SSH | |
| 🇫🇷 Provost-info |
mail server - multiple authentication attempt with unknown username or bad password
|
Brute-Force Spoofing | |
| 🇨🇦 eGuest |
Fail2Ban - \[POSTFIX\] too many errors
...
|
Brute-Force | |
| 🇸🇬 pusathosting.com |
imap1 failed login
|
Brute-Force | |
| Anonymous |
(eximsyntax) Exim syntax errors from 47.238.227.245 (HK/Hong Kong/-): 10 in the last 3600 secs
|
Brute-Force | |
| 🇺🇸 ShadowWhisperer |
SMB port scan / probe. SMB1 Negotiate
|
Port Scan Hacking | |
| 🇫🇮 23p02732 |
Mailserver and mailaccount attacks
|
Brute-Force Bad Web Bot Exploited Host Web App Attack | |
| Anonymous |
postfix
|
Email Spam Web App Attack | |
| 🇫🇷 Kejult |
|
Port Scan | |
| 🇺🇸 withfallback.com |
sends \r\n\r\n and waits; probably looking for telnet
|
Port Scan | |
| Anonymous |
$f2bV_matches
|
Brute-Force SSH | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-24 UTC.
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown