JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.84.139.248

47.84.139.248 was found in our database!

This IP was reported 821 times. Confidence of Abuse is 100%: ?

100%

ISP	Alibaba Cloud LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibaba-inc.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.84.139.248

Whois 47.84.139.248

IP Abuse Reports for 47.84.139.248:

This IP address has been reported a total of 821 times from 124 distinct sources. 47.84.139.248 was first reported on March 25th 2026, and the most recent report was 46 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-07-16 06:54:36 (46 minutes ago)	tcp/5223	Port Scan
Anonymous	2026-07-16 06:52:55 (47 minutes ago)	2026-07-16T08:52:54.370735+02:00 vps kernel: [555638.235583] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa ... show more 2026-07-16T08:52:54.370735+02:00 vps kernel: [555638.235583] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=47.84.139.248 DST=54.37.14.118 LEN=52 TOS=0x08 PREC=0x40 TTL=40 ID=37827 DF PROTO=TCP SPT=38851 DPT=8070 WINDOW=61690 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇩🇪 femboy.cat	2026-07-16 01:23:36 (6 hours ago)	Port scan to tcp/5984 from 47.84.139.248	Brute-Force
Anonymous	2026-07-16 00:25:04 (7 hours ago)	Blocked by firewall on hugin [830/tcp] \| Rule: UFW \| SPT: 28283 \| TTL: 53 \| LEN: 52 \| TOS: 0x00 • Re ... show more Blocked by firewall on hugin [830/tcp] \| Rule: UFW \| SPT: 28283 \| TTL: 53 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 gbzret4d	2026-07-15 21:21:50 (10 hours ago)	Honeypot [uk-production01]: Unauthorized traffic (28 bytes of payload); 8081 [6] TCP	Port Scan
🇸🇬 securejdprop	2026-07-15 20:03:49 (11 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET CINS Active Thr ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET CINS Active Threat Intelligence Poor Reputation IP group 85). show less	Hacking Web App Attack
🇸🇪 Tsumugi Kotobuki	2026-07-15 09:33:12 (22 hours ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 51 \| Len: 52B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 51 \| Len: 52B \| Win: 61690(1) \| F2B/ufw-honeypot@2026-07-15T09:33:11Z show less	Port Scan Hacking
🇭🇰 sandra361	2026-07-15 06:51:23 (1 day ago)	Port scan detected: 6 attempts across 1 port (3107). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=47.84.13 ... show more Port scan detected: 6 attempts across 1 port (3107). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=47.84.139.248 LEN=40 TOS=0x00 PREC=0x00 TTL=57 ID=65325 DF PROTO=TCP SPT=59826 DPT=3107 WINDOW=7300 RES=0x00 ACK RST URGP=0 show less	Port Scan
🇺🇸 donarev419	2026-07-15 01:23:40 (1 day ago)	Connection to port 1024 with data transfer. Data preview: OPTIONS / RTSP/1.0 CSeq: 1 User-Agent: l ... show more Connection to port 1024 with data transfer. Data preview: OPTIONS / RTSP/1.0 CSeq: 1 User-Agent: libmpv show less	Port Scan Hacking
🇺🇸 MPL	2026-07-15 01:23:32 (1 day ago)	tcp/12230 (2 or more attempts)	Port Scan
🇺🇸 technash	2026-07-14 20:25:32 (1 day ago)	Unauthorized network connection attempt(s) via TCP/UDP port(s) from TI-mapped IP entity detected [Fo ... show more Unauthorized network connection attempt(s) via TCP/UDP port(s) from TI-mapped IP entity detected [Fortinet/Sentinel] show less	Port Scan
🇬🇧 sandra361	2026-07-14 14:51:33 (1 day ago)	Port scan detected: 18 attempts across 1 port (943). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=47.8 ... show more Port scan detected: 18 attempts across 1 port (943). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=47.84.139.248 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=23164 DF PROTO=TCP SPT=48972 DPT=943 WINDOW=7300 RES=0x00 ACK RST URGP=0 show less	Port Scan
🇧🇷 diego	2026-07-14 11:31:39 (1 day ago)	[rede-168-134] 07/14/2026-08:31:38.841660, 47.84.139.248, Protocol: 6, ET CINS Active Threat Intelli ... show more [rede-168-134] 07/14/2026-08:31:38.841660, 47.84.139.248, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 88 show less	Hacking
🇦🇺 LiftUp Hosting	2026-07-14 09:33:54 (1 day ago)	Honeypot hit: Unauthorized traffic (243 bytes of payload); 2080 [3] TCP	Port Scan
🇺🇸 MPL	2026-07-14 05:20:00 (2 days ago)	tcp ports: 8406,6016 (3 or more attempts)	Port Scan

Showing 1 to 15 of 821 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 209.85.221.77

🇺🇸 198.41.227.47

🇫🇷 195.25.75.65

🇸🇳 154.125.81.28

🇳🇱 91.92.42.52

🇫🇷 85.217.140.26

🇧🇪 198.235.24.179

🇰🇪 197.248.207.139

🇬🇧 193.163.125.232

🇷🇺 178.141.148.161

🇺🇸 167.172.203.111

🇭🇰 156.225.1.10

🇨🇳 116.179.37.53

🇨🇳 116.179.32.71

🇻🇳 103.61.122.229

🇧🇬 78.128.114.166

🇺🇸 50.255.62.89

🇮🇳 35.207.243.61

🇬🇧 35.203.210.51

🇨🇦 15.156.234.60