Check an IP Address, Domain Name, Subnet, or ASN

47.253.141.144 was found in our database!

$ whois 47.253.141.144

country·🇺🇸 United States

isp·Alibaba US Technology Co., Ltd.

asn·AS45102

network·Standard

$ sikker risk 47.253.141.144scoring →

confidence

93%Very High

first_seen·Mar 9, 2026

last_seen·32m ago

first_reported·Mar 14, 2026

last_reported·8d ago

sessions·73

events·73

reports·3

$ sikker protocols 47.253.141.144

SSH

37 / 37 / 2r

TELNET

19 / 19 / 1r

DOCKER

10 / 10

HTTPS

7 / 7

$ sikker summary 47.253.141.144

47.253.141.144 has a threat confidence score of 93%. This IP address from United States (AS45102, Alibaba US Technology Co., Ltd.) has been observed in 73 honeypot sessions and reported 3 times targeting SSH, TELNET, DOCKER, HTTPS protocols. First observed on March 9, 2026, most recently active March 26, 2026.

$ sikker primitives 47.253.141.144

telnet_echo_hex_escape_sequence_output37 docker_post_method30 docker_container_exec_path20 telnet_command_sh19 telnet_command_shell19 telnet_command_system19 telnet_wget_sh_no_check_certificate_quiet_stdout_exec19 telnet_command_enable18 https_body_wget_curl_pipe_to_sh_apache_selfrep12 https_php_ini_directive_injection_allow_url_include_auto_prepend_file12 docker_get_method10 docker_exec_start_endpoint10 docker_list_containers_endpoint10 https_path_root6 https_phpunit_eval_stdin_rce_probe6 https_query_thinkphp_invokefunction_md5_probe6 https_cgi_bin_percent_encoded_directory_traversal_bin_sh6

$ sikker reports 47.253.141.144submit →

Showing 3 of 3 reports from 1 contributor

Reporter	Date	Category	Protocol	Comment
User	Mar 17, 2026, 10:29	Brute Force	SSH	SikkerGuard: 2 blocked packets
User	Mar 15, 2026, 06:17	Brute Force	SSH	SikkerGuard: 2 blocked packets
User	Mar 14, 2026, 20:52	Brute Force	TELNET	SikkerGuard: 2 blocked packets

$ sikker related 47.253.141.144

🇺🇸·More threats fromUnited States→AS·More threats fromAlibaba US Technology Co., Ltd.→SSH·More threats targetingSSH→TELN·More threats targetingTELNET→DOCK·More threats targetingDOCKER→HTTP·More threats targetingHTTPS→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
8.209.207.219	94%	240
47.238.76.68	88%	7,389
8.222.132.244	98%	116
47.254.234.203	98%	403
43.99.78.85	86%	4,542

IP Address	Confidence	Events
205.210.31.15	83%	190
165.22.184.62	71%	347
162.254.3.130	86%	20,914
65.49.1.66	100%	1,753
64.62.197.47	100%	1,596