JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.239.70.186

47.239.70.186 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 97%: ?

97%

ISP	ALIBABA CLOUD - HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibabacloud.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.239.70.186

Whois 47.239.70.186

IP Abuse Reports for 47.239.70.186:

This IP address has been reported a total of 31 times from 22 distinct sources. 47.239.70.186 was first reported on July 6th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 /dev/null	2026-07-18 23:45:58 (6 hours ago)	RouterOS: Portscanner detected.	Port Scan Brute-Force
🇷🇴 /dev/null	2026-07-15 23:45:58 (3 days ago)	RouterOS: Portscanner detected.	Port Scan Brute-Force
🇨🇭 Peter-Johann Sarbach	2026-07-14 04:07:22 (5 days ago)	2026-07-13T09:59:01.300052+02:00 "xxx" postfix/submission/smtpd[2956219]: connect from unknown[47.23 ... show more 2026-07-13T09:59:01.300052+02:00 "xxx" postfix/submission/smtpd[2956219]: connect from unknown[47.239.70.186] 2026-07-13T09:59:02.276890+02:00 "xxx" postfix/submission/smtpd[2956219]: lost connection after CONNECT from unknown[47.239.70.186] 2026-07-13T09:59:02.277109+02:00 "xxx" postfix/submission/smtpd[2956219]: disconnect from unknown[47.239.70.186] commands=0/0 show less	Port Scan
🇺🇸 caydenno1	2026-07-13 23:23:03 (5 days ago)	2026-07-13T19:23:01.993211-04:00 endlessh endlessh[4155]: 2026-07-13T23:23:01.993Z ACCEPT host=47.23 ... show more 2026-07-13T19:23:01.993211-04:00 endlessh endlessh[4155]: 2026-07-13T23:23:01.993Z ACCEPT host=47.239.70.186 port=55135 fd=4 n=1/4096 ... show less	Brute-Force SSH
🇫🇷 Hostynet	2026-07-13 10:36:12 (5 days ago)	Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single s ... show more Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single source). Source automatically blacklisted for 1 week. show less	Port Scan
🇵🇱 pshost.pl	2026-07-13 01:53:23 (6 days ago)	2026-07-13T01:53:23.252Z, an unauthorized access attempt was detected on port 22 (SSH) from source I ... show more 2026-07-13T01:53:23.252Z, an unauthorized access attempt was detected on port 22 (SSH) from source IP address 47.239.70.186. show less	Port Scan Brute-Force SSH
🇷🇺 Reaper	2026-07-13 00:45:05 (6 days ago)	SSH abuse or brute-force attack from 47.239.70.186	Brute-Force SSH
🇷🇴 /dev/null	2026-07-12 23:46:38 (6 days ago)	RouterOS: Portscanner detected.	Port Scan Brute-Force
🇫🇷 Hostynet	2026-07-12 10:28:42 (6 days ago)	Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single s ... show more Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single source). Source automatically blacklisted for 1 week. show less	Port Scan
🇩🇪 Da_tschek	2026-07-11 18:52:02 (1 week ago)	Port scanning	Port Scan Hacking
🇺🇦 llighthunter	2026-07-11 15:31:35 (1 week ago)	Jul 11 18:31:28 mail dovecot: pop3-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=47 ... show more Jul 11 18:31:28 mail dovecot: pop3-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=47.239.70.186, lip=192.168.1.80, session=<7cEKjVdWU9Uv70a6> Jul 11 18:31:32 mail dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=47.239.70.186, lip=192.168.1.80, session=<x25LjVdWVNUv70a6> Jul 11 18:31:33 mail dovecot: pop3-login: Disconnected (no auth attempts in 2 secs): user=<>, rip=47.239.70.186, lip=192.168.1.80, TLS handshaking: Connection closed, session=<9bhPjVdWXNUv70a6> show less	Port Scan Hacking Spoofing
🇫🇷 Soncraft	2026-07-11 15:01:05 (1 week ago)	Blocked by UFW on Jellyfin [5985/tcp] Source port: 50519 TTL: 110 Packet length: 52 TOS: 0x08 This ... show more Blocked by UFW on Jellyfin [5985/tcp] Source port: 50519 TTL: 110 Packet length: 52 TOS: 0x08 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇬 MazenHost	2026-07-11 14:56:41 (1 week ago)	1783781800 - 07/11/2026 17:56:40 Host: 47.239.70.186/47.239.70.186 Port: 2000 TCP Blocked ...	Port Scan
Anonymous	2026-07-11 14:51:29 (1 week ago)	Blocked by firewall on hugin [888/tcp] \| Rule: UFW \| SPT: 57173 \| TTL: 110 \| LEN: 52 \| TOS: 0x00 • R ... show more Blocked by firewall on hugin [888/tcp] \| Rule: UFW \| SPT: 57173 \| TTL: 110 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇱 spd.co.il	2026-07-11 13:01:29 (1 week ago)	Port scan detected on multiple ports	Port Scan

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 164.92.114.247

🇫🇷 85.217.140.40

🇬🇧 45.133.173.155

🇺🇸 208.109.39.19

🇭🇰 199.45.154.127

🇦🇷 190.244.178.249

🇳🇱 185.242.226.90

🇩🇪 165.245.209.243

🇨🇳 106.4.161.175

🇮🇳 103.134.180.245

🇫🇷 91.231.89.252

🇺🇸 66.132.186.194

🇺🇸 66.132.172.44

🇱🇹 62.60.130.219

🇬🇧 35.203.211.14

🇬🇧 5.252.83.239

🇺🇸 2604:a940:301:225:0:6::

🇨🇳 223.109.142.170

🇦🇴 197.148.41.114

🇳🇱 195.178.110.228