JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.254.39.239

47.254.39.239 was found in our database!

This IP was reported 127 times. Confidence of Abuse is 100%: ?

100%

ISP	Alibaba Cloud - US
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibabacloud.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.254.39.239

Whois 47.254.39.239

IP Abuse Reports for 47.254.39.239:

This IP address has been reported a total of 127 times from 65 distinct sources. 47.254.39.239 was first reported on June 9th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ecs.ge	2026-06-15 21:30:41 (2 weeks ago)	Automatic Fail2Ban report from jail plesk-dovecot: multiple matching events detected.	Brute-Force
🇬🇧 cticom.ms	2026-06-12 04:47:09 (3 weeks ago)	Email Auth Brute force attack 6/3 in last day	Brute-Force
🇬🇧 cticom.ms	2026-06-12 04:00:17 (3 weeks ago)	Email Auth Brute force attack 3/3 in last day	Brute-Force
🇬🇧 openstrike.co.uk	2026-06-11 22:51:27 (3 weeks ago)	Email auth failures (32)	Brute-Force
Anonymous	2026-06-11 16:30:53 (3 weeks ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇺🇸 mnogoweb	2026-06-11 05:37:16 (3 weeks ago)	(smtpauth) Failed SMTP AUTH login from 47.254.39.239 (US/United States/-): 5 in the last 3600 secs; ... show more (smtpauth) Failed SMTP AUTH login from 47.254.39.239 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-06-10 22:39:54 plain authenticator failed for (localhost) [47.254.39.239]: 535 Incorrect authentication data ([email protected]) 2026-06-10 22:39:55 plain authenticator failed for (localhost) [47.254.39.239]: 535 Incorrect authentication data ([email protected]) 2026-06-10 22:58:47 plain authenticator failed for (localhost) [47.254.39.239]: 535 Incorrect authentication data ([email protected]) 2026-06-10 22:58:47 plain authenticator failed for (localhost) [47.254.39.239]: 535 Incorrect authentication data ([email protected]) 2026-06-10 23:37:14 plain authenticator failed for (localhost) [47.254.39.239]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇸🇮 basing	2026-06-11 05:34:42 (3 weeks ago)	2026-06-11 06:34:42 bs SASL PLAIN auth failed: rhost=47.254.39.239...	Brute-Force
🇩🇪 Thomas	2026-06-11 04:54:33 (3 weeks ago)	Jun 11 06:54:26 v22016083778036931 postfix/submission/smtpd[3782546]: warning: unknown[47.254.39.239 ... show more Jun 11 06:54:26 v22016083778036931 postfix/submission/smtpd[3782546]: warning: unknown[47.254.39.239]: SASL PLAIN authentication failed: (reason unavailable), [email protected] Jun 11 06:54:33 v22016083778036931 postfix/smtps/smtpd[3780454]: warning: unknown[47.254.39.239]: SASL PLAIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force
🇩🇪 gadix	2026-06-11 04:47:14 (3 weeks ago)	Jun 11 05:27:51 srv05 postfix/smtpd[3224485]: warning: unknown[47.254.39.239]: SASL PLAIN authentica ... show more Jun 11 05:27:51 srv05 postfix/smtpd[3224485]: warning: unknown[47.254.39.239]: SASL PLAIN authentication failed: authentication failure Jun 11 05:27:52 srv05 postfix/smtpd[3224488]: warning: unknown[47.254.39.239]: SASL PLAIN authentication failed: authentication failure Jun 11 06:47:14 srv05 postfix/smtpd[3225863]: warning: unknown[47.254.39.239]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇬🇧 cticom.ms	2026-06-11 04:45:41 (3 weeks ago)	Email Auth Brute force attack 48/5 in last day	Brute-Force
🇩🇪 moosy	2026-06-11 04:27:16 (3 weeks ago)	2026-06-11T05:07:54.266777+02:00 scrat postfix/submission/smtpd[2789581]: warning: unknown[47.254.39 ... show more 2026-06-11T05:07:54.266777+02:00 scrat postfix/submission/smtpd[2789581]: warning: unknown[47.254.39.239]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=postmaster 2026-06-11T05:56:17.271964+02:00 scrat postfix/submission/smtpd[2789860]: warning: unknown[47.254.39.239]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=postmaster 2026-06-11T06:27:15.202206+02:00 scrat postfix/submission/smtpd[2790256]: warning: unknown[47.254.39.239]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=contact ... show less	Brute-Force
🇫🇷 [email protected]	2026-06-11 04:26:56 (3 weeks ago)	Jun 11 06:26:48 mail6 postfix/submission/smtpd[3544321]: warning: unknown[47.254.39.239]: SASL PLAIN ... show more Jun 11 06:26:48 mail6 postfix/submission/smtpd[3544321]: warning: unknown[47.254.39.239]: SASL PLAIN authentication failed: (reason unavailable), [email protected] Jun 11 06:26:55 mail6 postfix/smtps/smtpd[3534219]: warning: unknown[47.254.39.239]: SASL PLAIN authentication failed: (reason unavailable), [email protected] Jun 11 06:26:55 mail6 postfix/smtps/smtpd[3534219]: warning: unknown[47.254.39.239]: SASL PLAIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force
🇬🇧 cticom.ms	2026-06-11 03:59:50 (3 weeks ago)	Email Auth Brute force attack 24/5 in last day	Brute-Force
🇺🇸 mnogoweb	2026-06-11 02:41:21 (3 weeks ago)	(smtpauth) Failed SMTP AUTH login from 47.254.39.239 (US/United States/-): 5 in the last 3600 secs; ... show more (smtpauth) Failed SMTP AUTH login from 47.254.39.239 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-06-10 19:43:06 plain authenticator failed for (localhost) [47.254.39.239]: 535 Incorrect authentication data ([email protected]) 2026-06-10 19:43:07 plain authenticator failed for (localhost) [47.254.39.239]: 535 Incorrect authentication data ([email protected]) 2026-06-10 20:21:57 plain authenticator failed for (localhost) [47.254.39.239]: 535 Incorrect authentication data ([email protected]) 2026-06-10 20:21:57 plain authenticator failed for (localhost) [47.254.39.239]: 535 Incorrect authentication data ([email protected]) 2026-06-10 20:41:13 plain authenticator failed for (localhost) [47.254.39.239]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
Anonymous	2026-06-11 02:31:57 (3 weeks ago)	10x Postfix SASL LOGIN authentication failed	Brute-Force

Showing 1 to 15 of 127 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 103.209.60.185

🇦🇷 200.110.180.2

🇱🇻 196.196.53.94

🇺🇸 161.35.8.0

🇨🇳 120.48.32.130

🇷🇴 94.156.152.85

🇺🇸 91.230.168.5

🇵🇱 77.83.246.97

🇰🇷 43.155.207.136

🇨🇳 36.143.40.11

🇯🇵 207.56.227.35

🇩🇪 185.242.3.110

🇧🇴 181.115.147.5

🇨🇴 181.63.26.22

🇺🇸 172.172.196.177

🇨🇲 154.70.102.114

🇬🇧 154.16.44.246

🇫🇮 147.185.133.143

🇦🇺 119.252.26.82

🇸🇮 102.220.160.67