JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.245.61.81

47.245.61.81 was found in our database!

This IP was reported 5,274 times. Confidence of Abuse is 0%: ?

ISP	Alibaba Cloud - JP
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibabacloud.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.245.61.81

Whois 47.245.61.81

IP Abuse Reports for 47.245.61.81:

This IP address has been reported a total of 5,274 times from 252 distinct sources. 47.245.61.81 was first reported on October 18th 2023, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Sub-Lime	2025-10-11 12:56:28 (9 months ago)	2025-02-14 03:55:44,917 fail2ban.actions [1082]: NOTICE [nginx-ip] Ban 47.245.61.81 2025-04- ... show more 2025-02-14 03:55:44,917 fail2ban.actions [1082]: NOTICE [nginx-ip] Ban 47.245.61.81 2025-04-18 16:12:26,527 fail2ban.actions [1004]: NOTICE [nginx-444] Ban 47.245.61.81 2025-01-25 01:14:26,139 fail2ban.actions [1018]: NOTICE [nginx-ip] Ban 47.245.61.81 ... show less	Brute-Force
🇫🇮 nNordic	2025-05-16 06:53:26 (1 year ago)	Connection attempt blocked by IDS/IPS from IP 47.245.61.81/32	Hacking
🇫🇮 nNordic	2025-05-14 07:21:26 (1 year ago)	Connection attempt blocked by IDS/IPS from IP 47.245.61.81/32	Hacking
🇳🇱 Linuxmalwarehuntingnl	2025-05-04 10:17:59 (1 year ago)	Suspicious web activity: Multiple 404 status codes detected. Example request: "GET /dns-query?dns=64 ... show more Suspicious web activity: Multiple 404 status codes detected. Example request: "GET /dns-query?dns=640BAAABAAAAAAAABmdvb2dsZQNjb20AAAEAAQ HTTP/1.1" show less	Brute-Force Web App Attack
🇳🇱 Linuxmalwarehuntingnl	2025-04-28 11:22:55 (1 year ago)	Suspicious web activity: Multiple 404 status codes detected. Example request: "GET /dns-query?dns=64 ... show more Suspicious web activity: Multiple 404 status codes detected. Example request: "GET /dns-query?dns=640BAAABAAAAAAAABmdvb2dsZQNjb20AAAEAAQ HTTP/1.1" show less	Brute-Force Web App Attack
🇳🇱 Linuxmalwarehuntingnl	2025-04-22 13:56:00 (1 year ago)	Suspicious web activity: Multiple 404 status codes detected. Example request: "GET /dns-query?dns=64 ... show more Suspicious web activity: Multiple 404 status codes detected. Example request: "GET /dns-query?dns=640BAAABAAAAAAAABmdvb2dsZQNjb20AAAEAAQ HTTP/1.1" show less	Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2025-04-21 01:31:40 (1 year ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/47.245.61.81 2025-0 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/47.245.61.81 2025-04-20 00:44:26 /dns-query?dns=F8wBAAABAAAAAAAABmdvb2dsZQNjb20AAAEAAQ 2025-04-20 00:44:33 /dns-query,{"body":"��\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0006google\u0003com\u0000\u0000\u0001\u0000\u0001","content_type":"application/dns-message","header":{"Accept":["application/dns-message"],"Accept-Encoding":["identity"],"Connection":["keep-alive"],"Content-Length":["28"],"Content-Type":["application/dns-message"],"User-Agent":["Chrome"],"X-Forwarded-For":["47.245.61.81"]},"host":"58.247.153.155","method":"POST","proto":"HTTP/1.1","remote_addr":"10.90.104.20:45667","status_code":200,"url":"/dns-query","user_agent":"Chrome"} show less	Web App Attack
🇫🇷 geot	2025-04-20 12:22:00 (1 year ago)	GET /dns-query?dns=<<removed>> HTTP/1.1 POST /dns-query HTTP/1.1	Hacking Bad Web Bot Web App Attack
Anonymous	2025-04-20 09:53:31 (1 year ago)	[19/Apr/2025:12:33:04 -0400] "GET /dns-query?dns=mLoBAAABAAAAAAAABmdvb2dsZQNjb20AAAEAAQ HTTP/1.1" "C ... show more [19/Apr/2025:12:33:04 -0400] "GET /dns-query?dns=mLoBAAABAAAAAAAABmdvb2dsZQNjb20AAAEAAQ HTTP/1.1" "Chrome" [19/Apr/2025:12:33:12 -0400] "POST /dns-query HTTP/1.1" "Chrome" show less	Hacking
🇨🇳 ThreatBook.io	2025-04-20 02:00:36 (1 year ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/47.245.61.81 2025-0 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/47.245.61.81 2025-04-19 01:26:06 /dns-query?dns=YcwBAAABAAAAAAAABmdvb2dsZQNjb20AAAEAAQ 2025-04-19 01:26:18 /dns-query,{"body":"Ň\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0006google\u0003com\u0000\u0000\u0001\u0000\u0001","content_type":"application/dns-message","header":{"Accept":["application/dns-message"],"Accept-Encoding":["identity"],"Connection":["keep-alive"],"Content-Length":["28"],"Content-Type":["application/dns-message"],"User-Agent":["Chrome"]},"host":"1.95.151.216","method":"POST","proto":"HTTP/1.1","remote_addr":"47.245.61.81:37252","status_code":200,"url":"/dns-query","user_agent":"Chrome"} show less	Web App Attack
🇺🇸 X Y	2025-04-19 21:42:00 (1 year ago)	47.245.61.81 - - [18/Apr/2025:15:34:48 -0700] "POST /dns-query HTTP/1.1" 403 199 "-" "Chrome" 47.24 ... show more 47.245.61.81 - - [18/Apr/2025:15:34:48 -0700] "POST /dns-query HTTP/1.1" 403 199 "-" "Chrome" 47.245.61.81 - - [18/Apr/2025:15:34:52 -0700] "GET /dns-query?dns=TokB show less	Hacking Web App Attack
🇬🇧 CrystalMaker	2025-04-19 16:46:29 (1 year ago)	Vulnerability scan - GET /dns-query?dns=rCsBAAABAAAAAAAABmdvb2dsZQNjb20AAAEAAQ; POST /dns-query	Hacking
🇨🇿 ddw	2025-04-19 16:16:30 (1 year ago)	ModSecurity detection - Rules: 920420(Request content type is not allowed by policy)	Web App Attack
🇩🇪 ut-addicted.com	2025-04-19 16:14:45 (1 year ago)	\[Sat Apr 19 18:14:43.134314 2025\] \[:error\] \[pid 5682:tid 140571901335296\] \[client 47.245.61.8 ... show more \[Sat Apr 19 18:14:43.134314 2025\] \[:error\] \[pid 5682:tid 140571901335296\] \[client 47.245.61.81:39352\] \[client 47.245.61.81\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 8\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/dns-query"\] \[unique_id "aAPL8@4BrFk9Lk4K5IWgDwAAANg"\] show less	Brute-Force Web App Attack
🇵🇹 WebTejo	2025-04-19 16:01:48 (1 year ago)	Detected multiple authentication failures and invalid user attempts from IP address 47.245.61.81 on ... show more Detected multiple authentication failures and invalid user attempts from IP address 47.245.61.81 on [PT] A01 Node show less	Brute-Force SSH

Showing 1 to 15 of 5274 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 213.230.93.13

🇺🇦 185.138.230.31

🇺🇸 107.128.146.194

🇸🇮 102.220.160.200

🇧🇷 20.195.181.10

🇳🇱 176.65.148.244

🇬🇧 165.22.127.57

🇬🇭 143.105.209.123

🇮🇳 125.99.212.194

🇸🇬 94.231.206.36

🇫🇷 85.217.140.40

🇺🇸 47.254.69.213

🇳🇱 45.148.10.240

🇺🇸 20.55.84.43

🇬🇧 5.252.83.103

🇸🇬 165.154.200.214

🇩🇪 64.225.108.207

🇸🇪 31.208.53.209

🇺🇸 172.172.30.7

🇷🇺 151.252.84.225