AbuseIPDB » 47.239.103.141
47.239.103.141
This IP was reported 6 times. Confidence of
Abuse
is 41% : ?
ISP
ALIBABA CLOUD - HK
Usage Type
Data Center/Web Hosting/Transit
ASN
AS45102
Domain Name
alibabacloud.com
Country
🇭🇰
Hong Kong
City
Hong Kong
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 47.239.103.141 :
This IP address has been reported a total of
6
times from
6 distinct
sources.
47.239.103.141 was first reported on
July 6th 2026 , and the most recent report was
6 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-07-07 13:28:39
(6 hours ago)
Jul 7 09:28:39 localhost kernel: [111776165.930166] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ...
show more
Jul 7 09:28:39 localhost kernel: [111776165.930166] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.239.103.141 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x40 TTL=112 ID=3703 DF PROTO=TCP SPT=52053 DPT=53 WINDOW=4272 RES=0x00 SYN URGP=0
Jul 7 09:28:39 localhost kernel: [111776165.930184] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.239.103.141 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x40 TTL=112 ID=3703 DF PROTO=TCP SPT=52053 DPT=53 SEQ=3166741336 ACK=0 WINDOW=4272 RES=0x00 SYN URGP=0 OPT (020405B40101040201030306)
Jul 7 09:28:39 localhost kernel: [111776166.193914] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.239.103.141 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x40 TTL=109 ID=6242 DF PROTO=TCP SPT=52061 DPT=23 WINDOW=4400 RES=0x00 SYN URGP=0
Jul 7 09:28:39 localhost kernel: [111776166.193932] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=47.239.1
show less
Port Scan
🇺🇸
johuang92
2026-07-07 13:09:58
(6 hours ago)
Cowrie SSH honeypot: session 062b51b1ba76
SSH
🇸🇪
SkyDancer
2026-07-07 09:15:15
(10 hours ago)
Multiple intrusion attempts via RDP. Attack automatically blocked by SkyDancer Ai(RDP-X).
Hacking
Brute-Force
🇳🇱
ByeByte API
2026-07-07 05:29:14
(14 hours ago)
byebyte.space auth: TCP packet to port 21 (high-risk service) at 2026-07-07T05:29:14Z. Source port 5 ...
show more
byebyte.space auth: TCP packet to port 21 (high-risk service) at 2026-07-07T05:29:14Z. Source port 57175. TCP flags: SYN. Packet: 52B, TTL 112, window 6832, IP id 327. Single packet, dropped at firewall. p0f: OS Linux 2.2.x-3.x (no timestamps) (generic match), 16 hops, link Ethernet or modem.
show less
Port Scan
🇫🇷
Quarks Solutions
2026-07-06 22:50:31
(20 hours ago)
crowdsecurity/iptables-scan-multi_ports
Port Scan
🇪🇸
masterguru
2026-07-06 17:51:53
(1 day ago)
*Port Scan* detected from 47.239.103.141 (HK/Hong Kong/-). 11 hits in the last 20 seconds (0-122)
Port Scan
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: