JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

47.253.145.161

Neutral Activity

Abuse confidence score ?

0% Low Risk

52 reports

33 reporters · latest 1 year ago

ISP	Alibaba Cloud - US
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibabacloud.com
Country	🇺🇸 United States of America
City	Virginia Beach, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

47.253.145.161 has been reported 52 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 47.253.145.161

Export CSV

This IP address has been reported a total of 52 times from 33 distinct sources. 47.253.145.161 was first reported on March 16th 2025, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 gohardorgohome	2025-05-16 10:48:47 (1 year ago)	2025-05-16T04:48:47.525122-06:00 plex sshd[59209]: error: kex_exchange_identification: Connection cl ... show more 2025-05-16T04:48:47.525122-06:00 plex sshd[59209]: error: kex_exchange_identification: Connection closed by remote host 2025-05-16T04:48:47.525133-06:00 plex sshd[59209]: Connection closed by 47.253.145.161 port 49619 ... show less	Brute-Force SSH
🇨🇦 SecondBanana	2025-05-15 19:00:47 (1 year ago)	May 15 14:00:39 kermit sshd[21430]: error: Received disconnect from 47.253.145.161 port 52452:3: com ... show more May 15 14:00:39 kermit sshd[21430]: error: Received disconnect from 47.253.145.161 port 52452:3: com.jcraft.jsch.JSchException: Auth fail [preauth] ... show less	Brute-Force SSH
🇨🇦 gohardorgohome	2025-05-15 17:11:48 (1 year ago)	2025-05-15T11:11:46.774195-06:00 plex sshd[45756]: error: kex_exchange_identification: Connection cl ... show more 2025-05-15T11:11:46.774195-06:00 plex sshd[45756]: error: kex_exchange_identification: Connection closed by remote host 2025-05-15T11:11:46.774204-06:00 plex sshd[45756]: Connection closed by 47.253.145.161 port 52917 2025-05-15T11:11:47.734283-06:00 plex sshd[45757]: Unable to negotiate with 47.253.145.161 port 53045: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ... show less	Brute-Force SSH
🇨🇦 gohardorgohome	2025-05-15 05:40:12 (1 year ago)	2025-05-14T23:40:08.161875-06:00 plex sshd[33679]: Connection closed by 47.253.145.161 port 52425 20 ... show more 2025-05-14T23:40:08.161875-06:00 plex sshd[33679]: Connection closed by 47.253.145.161 port 52425 2025-05-14T23:40:09.273764-06:00 plex sshd[33680]: Unable to negotiate with 47.253.145.161 port 52520: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] 2025-05-14T23:40:10.994953-06:00 plex sshd[33682]: Unable to negotiate with 47.253.145.161 port 53457: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ... show less	Brute-Force SSH
🇧🇪 Ivo Vynckier	2025-04-02 16:54:00 (1 year ago)	47.253.145.161 - - [02/Apr/2025:17:52:50 +0200] "GET /.env HTTP/1.1" 403 117 "-" "python-requests/2. ... show more 47.253.145.161 - - [02/Apr/2025:17:52:50 +0200] "GET /.env HTTP/1.1" 403 117 "-" "python-requests/2.26.0" 47.253.145.161 - - [02/Apr/2025:17:52:50 +0200] "POST / HTTP/1.1" 301 245 "-" "python-requests/2.26.0" show less	Hacking
Anonymous	2025-03-30 19:49:30 (1 year ago)	$f2bV_matches	Brute-Force
🇺🇸 Epimetheus	2025-03-27 19:31:01 (1 year ago)	Unauthorized access attempts: From: 47.253.145.161 Method: HTTP GET URI Path: /.env UA: "pyt ... show more Unauthorized access attempts: From: 47.253.145.161 Method: HTTP GET URI Path: /.env UA: "python-requests/2.26.0" show less	Web App Attack
🇪🇸 el-brujo	2025-03-27 18:47:14 (1 year ago)	Cloudflare WAF: Request Path: /.env Request Query: Host: forum.elhacker.net userAgent: python-reque ... show more Cloudflare WAF: Request Path: /.env Request Query: Host: forum.elhacker.net userAgent: python-requests/2.26.0 Action: block Source: firewallManaged ASN Description: ALIBABA-CN-NET Alibaba US Technology Co., Ltd. Country: US Method: GET Timestamp: 2025-03-27T18:47:14Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2025-03-27 18:38:26 (1 year ago)	27/Mar/2025:19:38:26.394290 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 27/Mar/2025:19:38:26.394290 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 47.253.145.161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.hostench.eu"] [uri "/.env"] [unique_id "Z-WbIsDblweJN6F5B_E35wACzx0"] ... show less	Hacking Web App Attack
🇹🇷 hostopya.com	2025-03-23 14:43:17 (1 year ago)	AUTOMATED REPORT: Tried to access .env file	Hacking
🇧🇪 cmbplf	2025-03-23 06:22:32 (1 year ago)	107 requests to *.env	Brute-Force Bad Web Bot
🇩🇪 Gwyneth Llewelyn	2025-03-23 06:08:12 (1 year ago)	2025/03/23 06:08:10 [error] 2586933#2586933: 8103771 access forbidden by rule, client: 47.253.145.1 ... show more 2025/03/23 06:08:10 [error] 2586933#2586933: 8103771 access forbidden by rule, client: 47.253.145.161, server: zonadetestes.com, request: "GET /.env HTTP/2.0", host: "zonadetestes.com" 47.253.145.161 - - [23/Mar/2025:06:08:09 +0000] "GET /.env HTTP/2.0" 301 162 "-" "python-requests/2.26.0" 47.253.145.161 - - [23/Mar/2025:06:08:10 +0000] "GET /.env HTTP/2.0" 403 1045 "-" "python-requests/2.26.0" show less	Web App Attack
🇵🇱 sefinek.net	2025-03-23 06:00:10 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 45102 (ALIBABA-CN-NET Al ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 45102 (ALIBABA-CN-NET Alibaba US Technology Co., Ltd.) Protocol: HTTP/1.1 (GET method) Endpoint: /.env Timestamp: 2025-03-23T05:32:51Z Ray ID: 924b8cf7c9953b3e UA: python-requests/2.26.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-03-23 03:45:46 (1 year ago)	$f2bV_matches	Brute-Force
🇺🇸 Epimetheus	2025-03-23 02:26:41 (1 year ago)	Unauthorized access attempts: From: 47.253.145.161 Method: HTTP GET URI Path: /.env UA: "pyt ... show more Unauthorized access attempts: From: 47.253.145.161 Method: HTTP GET URI Path: /.env UA: "python-requests/2.26.0" show less	Web App Attack

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.136

🇨🇳 183.230.54.87

🇳🇱 92.119.165.164

🇺🇸 91.230.168.188

🇷🇺 86.102.1.217

🇨🇦 85.217.149.49

🇬🇧 35.203.210.10

🇳🇱 2400:cb00:996:1000:f48d:ba2c:147b:64eb

🇧🇪 207.175.22.38

🇧🇪 198.235.24.173

🇹🇼 198.235.24.121

🇳🇱 185.223.235.31

🇨🇴 181.119.84.93

🇹🇼 125.229.194.81

🇭🇰 123.58.210.106

🇻🇳 103.9.204.47

🇧🇬 78.128.114.174

🇺🇸 72.253.251.7

🇺🇸 70.167.234.41

🇩🇪 213.209.159.21