IPMediumSignal 74/100
47.113.218.227
Location
ChinaShenzhen, GD
ASN
AS37963
Aliyun Computing Co., LTD
First Seen
Feb 22, 2025
Last Seen
Feb 15, 2026
Found in 16 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
74%
Signal Score
74 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryChina
ChinaRegionShenzhen, GD
ASNAS37963
OrganizationAliyun Computing Co., LTD
Feed Intelligence Summary
16 reports74% confidence
16
Source reports
74%
Confidence score
Category tags
abuseaccess controlactive scanningasiaattackbotnetbrute forcebrute force attackc2 communicationchinacncommand and controlcredential accesscredential stuffingdata exfiltrationddos participationdecoy systemdistributed attacksexploit activityimapimap attackindicatorlateral movementmalicious activitymalicious domainmalicious softwaremalwarenetworknetwork discoverynetwork reconnaissancenetwork scanningpassword attacksprocess injectionrdp exploitation attemptsreconnaissanceremote accessremote servicesresearchedscannersecurity policysmtpsmtp attackerssh attackt1021.001t1055t1071t1071.001t1076t1110t1110.001t1110.002t1110.003t1110.004t1190t1486t1496t1499.002t1499.003t1563t1565t1573t1573.001t1595t1595.001t1595.002t1595.003threat actorthreat intelligencethreat preventionunauthorized access
Activity Timeline
Feb 15Feb 15
Threat Activity Heatmap
· Peak: 2026-02-15LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Intelligence SummaryAI Generated
This Indicator of Compromise (IOC) is an IPv4 address, `47.113.218.227`, that has been flagged with a high severity score of 74.25 and is not whitelisted, indicating a significant and active threat. Its repeated inclusion across numerous reputable threat intelligence feeds, including AbuseIPDB, AlienVault OTX, and various Blocklist.de feeds, strongly suggests its involvement in malicious activities. The nature of associated threat intelligence points to this IP address being actively engaged in …
Threat ScoreHigh Risk
74
SIGNAL
Signal Score
74%
Confidence
16
Reports
First seenFeb 22, 2025
Last seenFeb 15, 2026
GeolocationCN
CountryChina
LocationShenzhen, GD
ASNAS37963
OrgAliyun Computing Co., LTD
Coords22.5318, 114.1374
VirusTotal
Not checked
WHOIS
- description
- RDP brute force authentication activity
- raw
- inetnum: 47.113.0.0 - 47.113.255.255 netname: ALISOFT descr: Aliyun Computing Co., LTD descr: 5F, Builing D, the West Lake International Plaza of S&T descr: No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099 country: CN admin-c: ZM1015-AP tech-c: ZM877-AP tech-c: ZM876-AP tech-c: ZM875-AP abuse-c: AC1601-AP status: ALLOCATED PORTABLE mnt-by: MAINT-CNNIC-AP mnt-irt: IRT-CNNIC-CN last-modified: 2022-09-04T21:44:44Z source: APNIC irt: IRT-CNNIC-CN address: Beijing, China e-mail: [email protected] abuse-mailbox: [email protected] admin-c: IP50-AP tech-c: IP50-AP auth: # Filtered remarks: Please note that CNNIC is not an ISP and is not remarks: empowered to investigate complaints of network abuse. remarks: Please contact the tech-c or admin-c of the network. mnt-by: MAINT-CNNIC-AP last-modified: 2021-06-16T01:39:57Z source: APNIC role: ABUSE CNNICCN country: ZZ address: Beijing, China phone: +000000000 e-mail: [email protected] admin-c: IP50-AP tech-c: IP50-AP nic-hdl: AC1601-AP remarks: Generated from irt object IRT-CNNIC-CN abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2024-07-30T11:55:46Z source: APNIC person: Li Jia address: NO.969 West Wen Yi Road, Yu Hang District, Hangzhou country: CN phone: +86-0571-85022088 e-mail: [email protected] nic-hdl: ZM1015-AP mnt-by: MAINT-CNNIC-AP last-modified: 2014-07-30T02:02:01Z source: APNIC person: Guoxin Gao address: 5F, Builing D, the West Lake International Plaza of S&T address: No.391 Wen'er Road, Hangzhou City address: Zhejiang, China, 310099 country: CN phone: +86-0571-85022600 fax-no: +86-0571-85022600 e-mail: [email protected] nic-hdl: ZM875-AP mnt-by: MAINT-CNNIC-AP last-modified: 2014-07-30T01:56:01Z source: APNIC person: security trouble e-mail: [email protected] address: 5th,floor,Building D,the West Lake International Plaza of S&T,391#Wen??r Road address: Hangzhou, Zhejiang, China phone: +86-0571-85022600 country: CN mnt-by: MAINT-CNNIC-AP nic-hdl: ZM876-AP last-modified: 2021-04-13T23:22:33Z source: APNIC person: Guowei Pan address: 5F, Builing D, the West Lake International Plaza of S&T address: No.391 Wen'er Road, Hangzhou City address: Zhejiang, China, 310099 country: CN phone: +86-0571-85022088-30763 fax-no: +86-0571-85022600 e-mail: [email protected] nic-hdl: ZM877-AP mnt-by: MAINT-CNNIC-AP last-modified: 2013-07-09T01:34:02Z source: APNIC route: 47.113.218.0/24 descr: Alibaba (US) Technology Co., Ltd. origin: AS45102 mnt-by: MAINT-CNNIC-AP last-modified: 2020-07-10T05:42:33Z source: APNIC
- references
- https://malware-filter.gitlab.io/malware-filter/botnet-filter.txt
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 4 months ago
Appeared in 16 threat reports