Check an IP Address, Domain Name, Subnet, or ASN

47.253.184.220 was found in our database!

$ whois 47.253.184.220

country·🇺🇸 United States

isp·Alibaba US Technology Co., Ltd.

asn·AS45102

network·Standard

$ sikker risk 47.253.184.220scoring →

confidence

95%Very High

first_seen·Mar 13, 2026

last_seen·2h ago

first_reported·Mar 13, 2026

last_reported·6h ago

sessions·67

events·67

reports·4

$ sikker protocols 47.253.184.220

SSH

32 / 32 / 2r

TELNET

16 / 16 / 2r

DOCKER

15 / 15

HTTPS

4 / 4

$ sikker summary 47.253.184.220

47.253.184.220 has a threat confidence score of 95%. This IP address from United States (AS45102, Alibaba US Technology Co., Ltd.) has been observed in 67 honeypot sessions and reported 4 times targeting SSH, TELNET, DOCKER, HTTPS protocols. First observed on March 13, 2026, most recently active March 17, 2026.

$ sikker primitives 47.253.184.220

docker_post_method43 docker_container_exec_path29 telnet_echo_hex_escape_sequence_output28 docker_get_method15 telnet_command_shell15 telnet_command_system15 docker_list_containers_endpoint15 telnet_command_sh14 telnet_command_enable14 docker_exec_start_endpoint14 telnet_wget_sh_no_check_certificate_quiet_stdout_exec14 https_query_thinkphp_invokefunction_md5_probe8 https_body_wget_curl_pipe_to_sh_apache_selfrep8 https_php_ini_directive_injection_allow_url_include_auto_prepend_file8 https_path_root4 https_phpunit_eval_stdin_rce_probe4 https_cgi_bin_percent_encoded_directory_traversal_bin_sh4

$ sikker reports 47.253.184.220submit →

Showing 4 of 4 reports from 1 contributor

Reporter	Date	Category	Protocol	Comment
User	Mar 16, 2026, 22:42	Brute Force	SSH	SikkerGuard: 2 blocked packets
User	Mar 14, 2026, 08:59	Brute Force	TELNET	SikkerGuard: 2 blocked packets
User	Mar 14, 2026, 05:42	Brute Force	TELNET	SikkerGuard: 2 blocked packets
User	Mar 13, 2026, 10:00	Brute Force	SSH	SikkerGuard: 2 blocked packets

$ sikker related 47.253.184.220

🇺🇸·More threats fromUnited States→AS·More threats fromAlibaba US Technology Co., Ltd.→SSH·More threats targetingSSH→TELN·More threats targetingTELNET→DOCK·More threats targetingDOCKER→HTTP·More threats targetingHTTPS→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
47.83.16.182	82%	13,036
47.83.121.132	83%	813
47.237.191.34	87%	18,549
43.119.33.143	85%	5,793
43.99.84.148	84%	1,065

IP Address	Confidence	Events
172.245.195.18	98%	4,100
3.130.168.2	100%	22,686
147.185.133.238	70%	196
20.106.32.192	68%	105
157.230.191.24	59%	23