IPMediumSignal 29/100
47.236.5.219
Location
SingaporeSingapore, North West
ASN
AS45102
Alibaba.com LLC
First Seen
Jan 31, 2025
Last Seen
Apr 8, 2026
Found in 11 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
29%
Signal Score
29 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountrySingapore
SingaporeRegionSingapore, North West
ASNAS45102
OrganizationAlibaba.com LLC
IP Category
⟲
Proxy
Proxy server
Feed Intelligence Summary
11 reports29% confidence
11
Source reports
29%
Confidence score
Category tags
abuseaccessaccess controlactive scanactive scanningasiaattackbad reputationblacklist candidateblacklist ipbotnetbotnet activitybrute forcecommand and controlcommunication protocolconnectcowriecowrie honeypotcredential accesscredential harvestingcredential stuffingctadata exfiltrationdata store exposureddosddos attacksdecoy systemdionaeadionaea honeypotdistributed attacksemailexploitation activityftp brute forcegroupshoneytrap honeypothttp scanneridentity & access exploitationindicatorinjection activityinternet of thingsintrusion detectioniot botnetiot securityiot/ics attacklamplamp exploitation attemptsmailoney honeypotmalicious activitymalicious scanmalicious softwaremalwaremalware behaviourmalware capturemirai botnetnetworknetwork attacksnetwork reconnaissancenetwork scanningnetwork securitynorth americaphishingphishing attackphishing trappotential malware distributionprocess injectionprotocol exploitationproxyproxy protocolreconnaissancereconnaissance activityresearchedresource hijackingscanscannerscriptsecurity policysentrypeer botnetservice probingsftpsftp attacksgsingaporesipsip brute forcesip scanningslugsmtp brute forcesocial engineeringsshssh attackssh monitoringsurface webt1016t1018t1021t1040t1041t1046t1053t1055t1059t1071t1071.001t1078t1083t1110t1110.002t1133t1190t1486t1496t1499.001t1499.002t1499.003t1565t1566.001t1566.002t1566.003t1566.004t1583t1588t1589t1592t1595t1595.001t1595.002t1595.003tcptcp protocoltelecommunicationstelnet threatthreat actorthreat detectionthreat intelligencethreat preventiontor nodeunited statesvoipvoip attackweb traffic
Activity Timeline
Apr 8Apr 8
Threat Activity Heatmap
· Peak: 2026-04-08LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreLow Risk
29
SIGNAL
Signal Score
29%
Confidence
11
Reports
First seenJan 31, 2025
Last seenApr 8, 2026
GeolocationSG
CountrySingapore
LocationSingapore, North West
ASNAS45102
OrgAlibaba.com LLC
Coords37.7510, -97.8220
Proxy
VirusTotal
Not checked
WHOIS
- description
- 2025-02-09T03:42:13.028Z Honeypot : Dionaea : Source: 47.236.5.219 : Port: 3306 Connection: {'transport': 'tcp', 'type': 'accept', 'protocol': 'mysqld'}
- raw
- inetnum: 47.0.0.0 - 47.255.255.255 netname: IANA-NETBLOCK-47 descr: This network range is not allocated to APNIC. descr: descr: If your whois search has returned this message, then you have descr: searched the APNIC whois database for an address that is descr: allocated by another Regional Internet Registry (RIR). descr: descr: Please search the other RIRs at whois.arin.net or whois.ripe.net descr: for more information about that range. country: AU admin-c: IANA1-AP tech-c: IANA1-AP remarks: For general info on spam complaints email [email protected]. remarks: For general info on hacking & abuse complaints email [email protected]. mnt-by: MAINT-APNIC-AP mnt-lower: MAINT-APNIC-AP status: ALLOCATED PORTABLE last-modified: 2008-09-04T06:51:28Z source: APNIC role: Internet Assigned Numbers Authority address: see http://www.iana.org. admin-c: IANA1-AP tech-c: IANA1-AP nic-hdl: IANA1-AP remarks: For more information on IANA services remarks: go to IANA web site at http://www.iana.org. mnt-by: MAINT-APNIC-AP last-modified: 2018-06-22T22:34:30Z source: APNIC
- references
- https://raw.githubusercontent.com/ahamed-rizvan/IOCs/refs/heads/main/Malicous%20IP%20Address.txt, https://github.com/telekom-security/tpotce
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 2 months ago
Appeared in 11 threat reports