47.239.40.220
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- ALIBABA CLOUD - HK
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS45102
- Domain Name
- alibabacloud.com
- Country
- 🇭🇰 Hong Kong
- City
- Hong Kong
Abuse Reports
Total reports
27 from
20 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-10T12:02:16.935Z ACCEPT host=47.239.40.220 port=43384 fd=6 n=6/8192
|
Brute-Force SSH | |
| 🇫🇷 Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 10 application-level events across 3 target ports and 10 source port(s). Ports: 6467/service, 8008/service, 8887/service. Sensors: Honeytrap.
|
Port Scan | |
| 🇩🇪 vanlueckn |
|
Brute-Force SSH | |
| 🇫🇷 uthul |
T-Pot honeypot: 48 hits on ports [1024, 3128, 20000] (automated)
|
Port Scan | |
| 🇳🇱 Alt255 |
[cb-10al] Mail server brute-force: 5 failed attempts detected by fail2ban jail exim-iptables.
|
Brute-Force | |
| 🇫🇷 Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 7 application-level events across 4 target ports and 7 source port(s). Ports: 6060/service, 8083/service, 49152/service, 5001/service. Sensors: Honeytrap.
|
Port Scan | |
| 🇩🇪 sojan |
|
Bad Web Bot | |
| Anonymous |
Reported by RattusGuard: Honeypot: sip emulator (port 5060/tcp)
|
Port Scan Hacking | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-04 UTC.
|
Brute-Force | |
| 🇳🇱 BellFix |
Fail2ban reported 47.239.40.220 for npm-docker
|
Web App Attack | |
| 🇧🇷 tiwanetbr |
Fail2Ban: Unauthorized connection / brute-force attempt detected (protocol: Web, failed attempts: 2).
|
Bad Web Bot Web App Attack | |
| 🇷🇺 genokrad |
Website scan TCP 80/443 "/" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0;"
|
Port Scan Web App Attack | |
| Anonymous |
abuse ssl access
|
Hacking Brute-Force Web App Attack | |
| 🇺🇸 chronos |
|
DDoS Attack Phishing Web Spam Blog Spam Web App Attack | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (80/tcp)
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown