IPMediumSignal 44/100
47.83.16.182
Location
Hong KongHong Kong, Hong Kong
ASN
AS45102
IPXO LLC, Zenlayer Inc, Delta Centric LLC
First Seen
Feb 14, 2025
Last Seen
Mar 21, 2026
Found in 15 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
44%
Signal Score
44 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryHong Kong
Hong KongRegionHong Kong, Hong Kong
ASNAS45102
OrganizationIPXO LLC, Zenlayer Inc, Delta Centric LLC
Feed Intelligence Summary
15 reports44% confidence
15
Source reports
44%
Confidence score
Category tags
abuseactive scanningaptasiaattackauthentication attackauthentication attacksautomated attacksautomated threatblock listbotnetbrute forcebrute force attackbrute force attemptbrute force attemptsc2 communicationc2 serverchina mobilecisco devicecisco device targetingcivil servicescolumnscommand and controlcommunication protocolcompany limitedcompromised hostcompromised hostscowrie honeypotcredential accesscredential attackscredential brute forcecredential stuffingdata encryptiondata exfiltrationdata theftdatabase attackddosddos attackdecoy systemdenial of servicedevice managementdionaea honeypotdistributed attacksenterprise networkingenumerationexploitexploit attemptexploited hostexternal access attemptsfattftpftp brute forcegovernment technologyhackinghkhk abusehandlerhoneytrap honeypothong konghttp brute forcehttp scannerhttp scanninghttp/shttps scanningindicatorinformation technologyiocipv4it infrastructurelamplamp attacklamp stack attacklamp stack targetinglateral movementlinux serverslinux systemslogin attackmailoney honeypotmalicious activitymalicious network activitymalicious payload detectionmalicious softwaremalwaremalware behaviourmalware capturemalware distributionnetworknetwork attacksnetwork infrastructurenetwork intrusion attemptsnetwork probingnetwork protocolnetwork reconnaissancenetwork scanningnetwork securitynetwork servicesnetwork traffic analysisnorth americap0fpassword attackspgp signphishing attackphishing trapphp exploitation attemptspossible botnet activitypossible exploit attemptpotential exploit activityprocess injectionprotocol exploitationpublic administrationpublic infrastructurepublic policyreconnaissanceregulatory agenciesremote accessremote servicesresearchedresource hijackingscannerscanning activityscripting attackssecurity operationssensor-taggedsentrypeer botnetservice scanningsftp attacksmtpsmtp scanningsoftware developmentspamsql injection attemptsssh attackssh monitoringt1005t1016t1018t1021t1021.001t1021.002t1040t1041t1046t1055t1059t1059.001t1059.007t1068t1071t1071.001t1076t1077t1078t1083t1087t1105t1110t1110.001t1110.002t1110.003t1110.004t1133t1190t1203t1204.002t1210t1486t1496t1499.001t1499.002t1499.003t1563t1565t1573t1573.001t1590.006t1592t1592.002t1595t1595.001t1595.002t1595.003tannertcp protocoltcp scantcp scanningtelecommunicationstelnet threatthreat actorthreat detectionthreat feedthreat intelligencetpotudp scanunauthorized accessunited statesus abuseus nonevoipvoip attackvulnerability-exploitationweb application attackweb attackweb exploitationweb traffic
Activity Timeline
Mar 21Mar 21
Threat Activity Heatmap
· Peak: 2026-03-21LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreMedium Risk
44
SIGNAL
Signal Score
44%
Confidence
15
Reports
First seenFeb 14, 2025
Last seenMar 21, 2026
GeolocationHK
CountryHong Kong
LocationHong Kong, Hong Kong
ASNAS45102
OrgIPXO LLC, Zenlayer Inc, Delta Centric LLC
Coords39.0180, -77.5390
VirusTotal
Not checked
WHOIS
- description
- Data Sources: https://feeds.dshield.org/feeds/topips.txt https://feeds.dshield.org/feeds/top10.txt https://feeds.dshield.org/feeds/block.txt https://feeds.dshield.org/feeds/daily_sources THIS IS NOT A BLOCKLIST! DATA IS UNFILTERED AND CONTAINS FALSE POSITIVES.
- raw
- inetnum: 47.0.0.0 - 47.255.255.255 netname: IANA-NETBLOCK-47 descr: This network range is not allocated to APNIC. descr: descr: If your whois search has returned this message, then you have descr: searched the APNIC whois database for an address that is descr: allocated by another Regional Internet Registry (RIR). descr: descr: Please search the other RIRs at whois.arin.net or whois.ripe.net descr: for more information about that range. country: AU admin-c: IANA1-AP tech-c: IANA1-AP remarks: For general info on spam complaints email [email protected]. remarks: For general info on hacking & abuse complaints email [email protected]. mnt-by: MAINT-APNIC-AP mnt-lower: MAINT-APNIC-AP status: ALLOCATED PORTABLE last-modified: 2008-09-04T06:51:28Z source: APNIC role: Internet Assigned Numbers Authority address: see http://www.iana.org. admin-c: IANA1-AP tech-c: IANA1-AP nic-hdl: IANA1-AP remarks: For more information on IANA services remarks: go to IANA web site at http://www.iana.org. mnt-by: MAINT-APNIC-AP last-modified: 2018-06-22T22:34:30Z source: APNIC
- references
- https://github.com/telekom-security/tpotce, https://malware-filter.gitlab.io/malware-filter/botnet-filter.txt
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 3 months ago
Appeared in 15 threat reports