47.245.140.167

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
1,556 reports
172 reporters · latest 20 seconds ago
ISP
Alibaba Cloud LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS45102
Domain Name
alibaba-inc.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
1,556 from 172 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 154 🇫🇷 France 60 🇩🇪 Germany 49
Most common categories Port Scan 323 Hacking 68 Brute-Force 22 Web App Attack 14 Email Spam 9
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-10-23 08:10, Last: 2026-10-29 08:21 UTC. Triggers: unknown.
Port Scan
🇫🇷 fzc2000
Repeated TCP connections to unused ports on a honeypot
Port Scan
🇫🇷 Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 3 payload-bearing connection/event(s), 342 payload byte(s) total, maximum payload 243 byte(s). Target port(s): 8444.
Port Scan Hacking
🇫🇷 pcouy
Multiple portscan attempts
Port Scan
🇩🇪 ValtonTahiri
Port Scan
🇳🇱 StopAbuse
tcp/5985
Port Scan
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized traffic (243 bytes of payload); 4001 [3] TCP
Port Scan
🇧🇷 diego
[arem1] 2026-10-27 21:57:31, Client: 47.245.140.167, Protocol: 6, Unauthorized activity to HTTP: GET /
Web App Attack
🇫🇮 6kilowatti
Port Scan
🇫🇷 Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 3 payload-bearing connection/event(s), 344 payload byte(s) total, maximum payload 243 byte(s). Target port(s): 3108.
Port Scan Hacking
🇷🇺 Agrohim
Gate B blocked for categories:
DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Spoofing
🇭🇰 sandra361
Port scan detected: 18 attempts across 1 port (8190). | Evidence: REAPER_TARPIT: IN=eth0 SRC=47.245.140.167 LEN=40 TOS=0x14 PREC=0x00 TTL=56 ID=3702 DF PROTO=TCP SPT=17688 DPT=8190 WINDOW=7300 RES=0x00 ACK RST URGP=0
Port Scan
🇫🇷 Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 3 payload-bearing connection/event(s), 343 payload byte(s) total, maximum payload 243 byte(s). Target port(s): 2079.
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇱 201.215.32.20
🇧🇷 201.21.152.91
🇺🇸 98.175.40.49
🇳🇱 93.123.109.164
🇮🇪 54.216.240.164
🇨🇷 201.206.191.135
🇧🇷 201.2.135.235
🇺🇸 96.78.175.36
🇨🇦 85.217.149.33
🇫🇷 85.217.140.9
🇺🇸 20.163.13.5
🇮🇩 202.91.14.2
🇪🇨 201.183.42.20
🇧🇷 201.182.165.138
🇨🇳 183.243.131.82
🇮🇩 103.165.227.178
🇺🇿 94.158.55.14
🇨🇳 82.157.64.53
🇺🇸 70.166.65.160
🇨🇳 61.171.36.43
feedback