JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

47.254.152.234

Recent Activity

Abuse confidence score ?

10% Caution

33 reports

14 reporters · latest 20 hours ago

ISP	Alibaba Cloud - DE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibabacloud.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 47.254.152.234

Export CSV

This IP address has been reported a total of 33 times from 14 distinct sources. 47.254.152.234 was first reported on November 23rd 2021, and the most recent report was 20 hours ago. In the last 60 days, the top reporter locations were: Germany with 2 reports; Romania with 1 report. The most common categories in these recent reports were: Brute-Force 3 times; Hacking 1 time; SSH 1 time; DNS Poisoning 1 time; DDoS Attack 1 time; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 moretrix	2026-10-19 02:27:55 (20 hours ago)	2026-10-19T04:27:54.888768+02:00 ieyasu.moretrix.com named[1428]: client @0x7f3bcc667000 47.254.152. ... show more 2026-10-19T04:27:54.888768+02:00 ieyasu.moretrix.com named[1428]: client @0x7f3bcc667000 47.254.152.234#53627 (wakkerhasselt.worldshake.org): view external: query (cache) 'wakkerhasselt.worldshake.org/A/IN' denied (allow-query-cache did not match) ... show less	Brute-Force
🇷🇴 TerraCorp Global Solutions	2026-09-13 12:23:48 (1 month ago)	2026-09-13T15:14:38.076569+03:00 honeypot.terracorpglobalsolutions.com named[2444]: client @0x7cdc10 ... show more 2026-09-13T15:14:38.076569+03:00 honeypot.terracorpglobalsolutions.com named[2444]: client @0x7cdc10c3cc00 47.254.152.234#57600 (terracorpglobalsolutions.com): query (cache) 'terracorpglobalsolutions.com/A/IN' denied (allow-query-cache did not match) ... show less	DNS Compromise DNS Poisoning DDoS Attack Hacking Brute-Force Exploited Host Web App Attack SSH
🇩🇪 moretrix	2026-09-11 12:17:45 (1 month ago)	2026-09-11T14:17:44.994675+02:00 ieyasu.moretrix.com named[1376]: client @0x7f8d53e14800 47.254.152. ... show more 2026-09-11T14:17:44.994675+02:00 ieyasu.moretrix.com named[1376]: client @0x7f8d53e14800 47.254.152.234#54161 (portal.worldshake.org): view external: query (cache) 'portal.worldshake.org/CNAME/IN' denied (allow-query-cache did not match) ... show less	Brute-Force
🇩🇪 moretrix	2026-08-02 16:31:16 (2 months ago)	2026-08-02T18:31:15.431815+02:00 ieyasu.moretrix.com named[657093]: client @0x7f6da2c98c00 47.254.15 ... show more 2026-08-02T18:31:15.431815+02:00 ieyasu.moretrix.com named[657093]: client @0x7f6da2c98c00 47.254.152.234#48032 (worldshake.org): view external: query (cache) 'worldshake.org/A/IN' denied (allow-query-cache did not match) ... show less	Brute-Force
🇨🇭 Mario Bretscher	2026-07-10 05:47:30 (3 months ago)	10-Jul-2026 07:47:17.809 security: info: client @0x79b548021c98 47.254.152.234#31292 (hades.letsbuil ... show more 10-Jul-2026 07:47:17.809 security: info: client @0x79b548021c98 47.254.152.234#31292 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/A/IN' denied 10-Jul-2026 07:47:22.893 security: info: client @0x79b555cf4398 47.254.152.234#29513 (imap.letsbuild.ch): view Extern: query 'imap.letsbuild.ch/A/IN' denied 10-Jul-2026 07:47:25.136 security: info: client @0x79b540072a58 47.254.152.234#30363 (ns2.letsbuild.ch): view Extern: query 'ns2.letsbuild.ch/A/IN' denied 10-Jul-2026 07:47:29.375 security: info: client @0x79b54c018288 47.254.152.234#34584 (ns3.letsbuild.ch): view Extern: query 'ns3.letsbuild.ch/A/IN' denied 10-Jul-2026 07:47:29.476 security: info: client @0x79b540072a58 47.254.152.234#14474 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/A/IN' denied ... show less	Web App Attack
🇨🇭 Mario Bretscher	2026-07-03 01:36:03 (3 months ago)	03-Jul-2026 03:35:49.266 security: info: client @0x7ae1b01379a8 47.254.152.234#41181 (hades.letsbuil ... show more 03-Jul-2026 03:35:49.266 security: info: client @0x7ae1b01379a8 47.254.152.234#41181 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/A/IN' denied 03-Jul-2026 03:35:58.808 security: info: client @0x7ae1bdd8a018 47.254.152.234#43825 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/A/IN' denied 03-Jul-2026 03:36:00.560 security: info: client @0x7ae1ac0aec38 47.254.152.234#55811 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/AAAA/IN' denied 03-Jul-2026 03:36:01.489 security: info: client @0x7ae1ac0aec38 47.254.152.234#16614 (ns3.letsbuild.ch): view Extern: query 'ns3.letsbuild.ch/A/IN' denied 03-Jul-2026 03:36:02.027 security: info: client @0x7ae1b416ffe8 47.254.152.234#8712 (ns4.letsbuild.ch): view Extern: query 'ns4.letsbuild.ch/A/IN' denied ... show less	Web App Attack
🇨🇭 Mario Bretscher	2026-07-02 15:53:16 (3 months ago)	02-Jul-2026 17:53:08.079 security: info: client @0x7ae1bdd8a018 47.254.152.234#65278 (hades.letsbuil ... show more 02-Jul-2026 17:53:08.079 security: info: client @0x7ae1bdd8a018 47.254.152.234#65278 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/A/IN' denied 02-Jul-2026 17:53:09.749 security: info: client @0x7ae1b4000e98 47.254.152.234#28276 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/A/IN' denied 02-Jul-2026 17:53:10.960 security: info: client @0x7ae1b0009918 47.254.152.234#42303 (ns4.letsbuild.ch): view Extern: query 'ns4.letsbuild.ch/A/IN' denied 02-Jul-2026 17:53:11.926 security: info: client @0x7ae1bdd8a018 47.254.152.234#61857 (ns2.letsbuild.ch): view Extern: query 'ns2.letsbuild.ch/A/IN' denied 02-Jul-2026 17:53:15.327 security: info: client @0x7ae1b0009918 47.254.152.234#52447 (ns3.letsbuild.ch): view Extern: query 'ns3.letsbuild.ch/A/IN' denied ... show less	Web App Attack
Anonymous	2026-06-27 03:59:05 (3 months ago)	Port scan on port 53/UDP to unused IP	Port Scan
🇩🇪 moretrix	2026-06-16 18:37:06 (4 months ago)	2026-06-16T20:37:05.865785+02:00 ieyasu.moretrix.com named[1509]: client @0x7fc831ac9400 47.254.152. ... show more 2026-06-16T20:37:05.865785+02:00 ieyasu.moretrix.com named[1509]: client @0x7fc831ac9400 47.254.152.234#59415 (worldshake.org): view external: query (cache) 'worldshake.org/MX/IN' denied (allow-query-cache did not match) ... show less	Brute-Force
🇿🇦 rb-sys	2026-05-18 06:20:22 (5 months ago)	2026-05-18T06:20:22.081749+00:00 rbdns kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:65:b4:ae:e8:eb: ... show more 2026-05-18T06:20:22.081749+00:00 rbdns kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:65:b4:ae:e8:eb:d3:b1:0a:77:08:00 SRC=47.254.152.234 DST=102.214.10.82 LEN=72 TOS=0x00 PREC=0x00 TTL=51 ID=47298 PROTO=UDP SPT=7368 DPT=53 LEN=52 ... show less	Port Scan
🇩🇪 moretrix	2026-05-12 18:20:47 (5 months ago)	2026-05-12T20:20:46.580488+02:00 ieyasu.moretrix.com named[1396]: client @0x7fcef8d28800 47.254.152. ... show more 2026-05-12T20:20:46.580488+02:00 ieyasu.moretrix.com named[1396]: client @0x7fcef8d28800 47.254.152.234#61601 (worldshake.org): view external: query (cache) 'worldshake.org/A/IN' denied (allow-query-cache did not match) ... show less	Brute-Force
🇩🇪 moretrix	2026-05-12 00:18:28 (5 months ago)	2026-05-12T00:18:37.114416+02:00 ieyasu.moretrix.com named[1396]: client @0x7fcefe65dc00 47.254.152. ... show more 2026-05-12T00:18:37.114416+02:00 ieyasu.moretrix.com named[1396]: client @0x7fcefe65dc00 47.254.152.234#21616 (worldshake.org): view external: query (cache) 'worldshake.org/A/IN' denied (allow-query-cache did not match) 2026-05-12T02:18:28.189534+02:00 ieyasu.moretrix.com named[1396]: client @0x7fcef94ba000 47.254.152.234#6819 (worldshake.org): view external: query (cache) 'worldshake.org/A/IN' denied (allow-query-cache did not match) ... show less	Brute-Force
🇩🇪 moretrix	2026-05-09 20:29:03 (5 months ago)	2026-05-09T21:24:42.988323+02:00 ieyasu.moretrix.com named[1361]: client @0x7fc1fa655000 47.254.152. ... show more 2026-05-09T21:24:42.988323+02:00 ieyasu.moretrix.com named[1361]: client @0x7fc1fa655000 47.254.152.234#40989 (worldshake.org): view external: query (cache) 'worldshake.org/A/IN' denied (allow-query-cache did not match) 2026-05-09T22:29:00.707432+02:00 ieyasu.moretrix.com named[1361]: client @0x7fc1f11fac00 47.254.152.234#7033 (worldshake.org): view external: query (cache) 'worldshake.org/CNAME/IN' denied (allow-query-cache did not match) 2026-05-09T22:29:03.537487+02:00 ieyasu.moretrix.com named[1361]: client @0x7fc1f11fe400 47.254.152.234#4833 (worldshake.org): view external: query (cache) 'worldshake.org/CNAME/IN' denied (allow-query-cache did not match) ... show less	Brute-Force
🇩🇪 moretrix	2026-04-18 21:13:24 (6 months ago)	2026-04-18T19:13:36.431783+02:00 ieyasu.moretrix.com named[1379]: client @0x7fc407031c00 47.254.152. ... show more 2026-04-18T19:13:36.431783+02:00 ieyasu.moretrix.com named[1379]: client @0x7fc407031c00 47.254.152.234#48130 (worldshake.org): view external: query (cache) 'worldshake.org/A/IN' denied (allow-query-cache did not match) 2026-04-18T21:13:34.796041+02:00 ieyasu.moretrix.com named[1379]: client @0x7fc3f6fb1400 47.254.152.234#64745 (worldshake.org): view external: query (cache) 'worldshake.org/A/IN' denied (allow-query-cache did not match) 2026-04-18T23:13:24.246236+02:00 ieyasu.moretrix.com named[1379]: client @0x7fc3fc2f8400 47.254.152.234#64026 (worldshake.org): view external: query (cache) 'worldshake.org/A/IN' denied (allow-query-cache did not match) ... show less	Brute-Force
🇹🇷 Guardpot	2026-04-02 14:53:23 (6 months ago)	This IP address has been observed conducting malicious activity across 464 events involving 1 differ ... show more This IP address has been observed conducting malicious activity across 464 events involving 1 different attack vectors, first seen on 2024-04-24 19:28 UTC and last active on 2026-04-02 14:53 UTC. Observed activity includes: DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (464 events). Reported by Guardpot. show less	DNS Compromise

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 107.189.7.186

🇩🇪 82.165.60.187

🇫🇷 51.75.247.232

🇺🇸 40.124.117.9

🇰🇷 34.64.151.222

🇮🇳 20.198.89.82

🇪🇬 196.130.44.106

🇺🇾 179.29.11.120

🇸🇬 165.154.203.20

🇦🇺 158.178.141.16

🇲🇩 143.246.203.108

🇺🇸 143.42.1.201

🇺🇸 66.132.195.51

🇭🇰 43.128.42.119

🇺🇸 40.80.202.87

🇺🇸 35.184.219.162

🇨🇱 34.176.121.175

🇸🇬 34.126.112.70

🇹🇼 34.80.83.56

🇺🇸 24.144.113.30