47.254.64.221
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Alibaba Cloud - US
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS45102
- Domain Name
- alibabacloud.com
- Country
- 🇺🇸 United States of America
- City
- Los Angeles, California
No reports in the last 60 days
47.254.64.221 has been reported 41 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
41 from
40 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 RAP |
2026-08-23 21:45:12 UTC Unauthorized activity to TCP port 8443. Web App
|
Port Scan Web App Attack | |
| 🇮🇪 Coolnagour |
funnypot web honeypot, port 443: GET https://54.74.138.201:443/favicon.ico
|
Web App Attack | |
| 🇬🇧 Interceptor_HQ |
request_uri: / -- automatic report --
|
Brute-Force Hacking | |
| 🇫🇷 Security_Whaller |
Malicious activity detected on Honeypot.
|
Brute-Force Hacking Web App Attack | |
| Anonymous |
443/udp (1 or more attempts)
|
Port Scan | |
| Anonymous |
Http Port:443 (http_status:403) - Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
|
Web App Attack | |
| 🇯🇵 pixelboost.kr |
47.254.64.221 - - [22/Aug/2026:06:11:55 +0900] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
|
Bad Web Bot Web App Attack | |
| Anonymous |
1786645164 - 08/13/2026 20:19:24 Host: 47.254.64.221/47.254.64.221 Port: 161 TCP Blocked
...
|
Port Scan | |
| 🇨🇿 lp |
anomaly: udp_src_session, 2201 > threshold 2200, repeats 250 times
|
Port Scan | |
| 🇩🇪 iNetWorker |
trying to access non-authorized port
|
Port Scan | |
| 🇩🇪 Enno |
P04::Fail2Ban: automated bot scanning / credential probing detected.
|
Web App Attack Bad Web Bot | |
| Anonymous |
Reported from Nginx log analysis 16. Log: 47.254.64.221 - - [12/Aug/2026:xx:xx:xx 0200] "GET / HTTP/2.0" xxx xxx "-" "Go-http-client/2.0" "-" "US United States Santa Clara" "AS45102" "Alibaba (US) Technology Co., Ltd."
|
Port Scan Brute-Force SSH | |
| Anonymous |
Port Scanner
|
Port Scan | |
| 🇩🇪 RazorLabs.dev |
SSH: 47.254.64.221 made 2 rapid preauth connections
|
Brute-Force SSH | |
| 🇩🇪 EinfxchFinn |
Unauthorized connection attempt to port 22 from 47.254.64.221
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown