JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.245.114.12

47.245.114.12 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 56%: ?

56%

ISP	Alibaba Cloud LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibaba-inc.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.245.114.12

Whois 47.245.114.12

IP Abuse Reports for 47.245.114.12:

This IP address has been reported a total of 26 times from 15 distinct sources. 47.245.114.12 was first reported on July 10th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-14 16:32:12 (1 week ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇿🇦 conure	2026-07-13 12:02:24 (1 week ago)	csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s	Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 05:16:59 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 47.245.114.12 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 47.245.114.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 01:16:55.801986 2026] [security2:error] [pid 24094:tid 24094] [client 47.245.114.12:56886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.beach98.com"] [uri "/.git/config"] [unique_id "alR0x9o4cKwvvcWheFiZKwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 04:41:39 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 47.245.114.12 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 47.245.114.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 00:41:34.378134 2026] [security2:error] [pid 17612:tid 17612] [client 47.245.114.12:42272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rdj.us"] [uri "/.git/config"] [unique_id "alRsfjSxLSDRohVY6L0WjwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 04:10:50 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 47.245.114.12 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 47.245.114.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 00:10:43.978329 2026] [security2:error] [pid 7197:tid 7197] [client 47.245.114.12:54296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "micro-analisis.com"] [uri "/.env"] [unique_id "alRlQzK_3tba6kbIyjqBgQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-13 04:05:43 (1 week ago)	Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=4	Hacking
🇺🇸 TPI-Abuse	2026-07-13 03:41:37 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 47.245.114.12 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 47.245.114.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 23:41:32.073960 2026] [security2:error] [pid 19664:tid 19664] [client 47.245.114.12:46506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "indiahouseportland.com"] [uri "/.env"] [unique_id "alRebKjYzG7hWXjJrXffPAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure	2026-07-13 03:34:20 (1 week ago)	csagent: score 17.5: 404 noise floor x2, secrets grab x2; 1 domain(s) in 1m0s	Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 03:22:46 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 47.245.114.12 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 47.245.114.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 23:22:39.815498 2026] [security2:error] [pid 4802:tid 4802] [client 47.245.114.12:35554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "galvez.cc"] [uri "/.env"] [unique_id "alRZ_xXjRpUePfSsvsfCrgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-13 03:18:09 (1 week ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇳🇱 BlueWire Hosting	2026-07-13 03:04:52 (1 week ago)	Probing websites for vulnerabilities	Web App Attack
🇫🇷 ✨	2026-07-13 02:47:06 (1 week ago)	Domain : redirect.netenergy.uk Rule : env 2026-07-13 02:44:36 217.194.210.152 GET /.env - 443 - 47.2 ... show more Domain : redirect.netenergy.uk Rule : env 2026-07-13 02:44:36 217.194.210.152 GET /.env - 443 - 47.245.114.12 HTTP/1.1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.1 - budehouse.co.uk 404 0 2 1552 242 199 - - show less	Hacking SQL Injection
🇺🇸 TPI-Abuse	2026-07-13 02:46:58 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 47.245.114.12 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 47.245.114.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 22:46:54.912020 2026] [security2:error] [pid 5494:tid 5494] [client 47.245.114.12:51636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cartiologyfilms.com"] [uri "/.env"] [unique_id "alRRnvMoLLMoqIE-qW6YaQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 02:30:17 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 47.245.114.12 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 47.245.114.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 22:30:12.862448 2026] [security2:error] [pid 22994:tid 22994] [client 47.245.114.12:57626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anniversaryweddingfavors.com"] [uri "/.git/config"] [unique_id "alRNtFralmo38Dv1deA6EAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-13 02:10:02 (1 week ago)	suspicious request in access.log	Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.40

🇺🇸 195.184.76.138

🇧🇷 186.251.40.91

🇷🇺 176.109.105.15

🇺🇸 162.216.149.209

🇨🇳 144.123.77.175

🇮🇩 103.82.93.80

🇮🇷 94.182.107.86

🇨🇦 85.217.149.10

🇨🇦 85.217.149.6

🇬🇧 72.56.148.99

🇺🇸 57.141.0.71

🇺🇸 34.106.113.229

🇩🇪 3.73.119.58

🇨🇳 223.104.155.137

🇧🇪 198.235.24.217

🇩🇪 194.88.98.126

🇨🇦 192.99.152.61

🇦🇺 170.64.128.91

🇺🇸 162.216.150.215