47.252.11.47
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Alibaba Cloud - US
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS45102
- Domain Name
- alibabacloud.com
- Country
- 🇺🇸 United States of America
- City
- Virginia Beach, Virginia
Abuse Reports
Total reports
15 from
12 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇿 lp |
anomaly: icmp_sweep, 76 > threshold 50, repeats 2823 times
|
Port Scan | |
| 🇨🇿 lp |
anomaly: icmp_src_session, 161 > threshold 160, repeats 1644 times
|
Port Scan | |
| 🇮🇪 AutosOnShow |
blocked for webapp attack | path requested: /favicon.ico | seen at 2026-11-10 02:19:35.227 |
|
Web App Attack | |
| 🇬🇧 essinghigh |
IPS Detection: 47.252.11.47 -> DPT: 8080
|
Port Scan | |
| 🇨🇦 alexbfr |
Fail2Ban report from custom-honeypot; service=RDP; application_protocol=RDP; transport=TCP; destination_port=3389; observed_at=2026-11-09T16:24:34Z; reported_at=2026-11-09T16:24:35Z
2026-11-09T16:24:34Z activity=connection accepted
|
Brute-Force | |
| 🇨🇿 lp |
anomaly: icmp_src_session, 161 > threshold 160, repeats 581 times
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 3 application-level events across 3 source port(s). Sensor(s): Tanner.
|
Port Scan | |
| 🇺🇸 NXTwoThou |
64.207
|
Web App Attack | |
| 🇳🇱 knock |
Knock-Knock honeypot brute-force: HTTP (1 total hits)
|
Web App Attack | |
| 🇯🇵 gomasy |
_:80 47.252.11.47 - - [02/Oct/2026:15:29:46 +0900] "l\x00\x0B\x00\x00\x00\x00\x00\x00\x00\x00\x00" 500 170 "-" "-"
...
|
Web App Attack | |
| Anonymous |
Web application attack detected.
|
Web App Attack | |
| 🇨🇭 GAS |
|
Port Scan Web App Attack | |
| 🇸🇪 Juha Jurvanen |
Blocked by Scantide Guard on custom:ce9a4bb4dda8493eb1dcc4b93e3487ab. Rule: 5 event(s) in correlation window.
|
Brute-Force | |
| 🇹🇼 kk_it_man |
|
Port Scan | |
| 🇹🇼 kk_it_man |
honey catch
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown