IOC Radar
IPMediumSignal 46/100

8.217.248.249

Location
Hong KongHong Kong
Hong Kong, Kowloon
ASN
AS45102
Alibaba.com Singapore E-Commerce Private Limited
First Seen
Apr 27, 2025
Last Seen
Jun 12, 2026
Apr 27
First Seen
426d ago
Jun 12
Last Seen
14d ago
20
Reports
source reports
46%
Confidence
medium
Found in 20 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
46%
Signal Score
46 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

44 techniques

Network Information

CountryHKHong Kong
RegionHong Kong, Kowloon
ASNAS45102
OrganizationAlibaba.com Singapore E-Commerce Private Limited

Feed Intelligence Summary

20 reports46% confidence
20
Source reports
46%
Confidence score
Category tags
abuseaccess controlactive scanactive scanningaptasiaattackaustraliaautomated threatautomated-attackbad reputationbad web botblocklist_allbotnetbotnet activitybotnet activity detectedbrute forcebrute force attackbrute force attacksbrute force attemptsbrute-forcebruteforcec2c2 communicationcommand & controlcommand and controlcommand injectioncommunication protocolcompromised hostcompromised hostscompromised infrastructurecompromised systemcowrie honeypotcowrie interactionscredential accesscredential attackcredential harvestingcredential stuffingcredential-stuffingdata encryptiondata exfiltrationdata store exposuredatabase attacksdatabase securityddosdecoy systemdenial of servicedionaea honeypotdionaea interactionsdionaea payloadsdistributed attacksdnsdns attackemerging threatsencryptioneuropeexploitexploit attemptsexploitation activityexploitation attemptexploited hostfattfatt detectionsfatt signaturesfinlandfrancefraud voipftpftp brute forceftp brute-forcegermanyhackinghkhoneynet connecthoneytrap eventshoneytrap honeypothoneytrap interactionshong konghttp brute forcehttp probinghttp scanneridentity & access exploitationindicatorinfected hostinitial accessinjection activityinjection attacksinternet-facingintrusion detectionioclamplateral movementlinux-server-attacklogin attemptmailoney eventsmailoney honeypotmailoney interactionsmalicious activitymalicious softwaremalicious trafficmalicious-login-attemptsmalwaremalware behaviourmalware capturemalware delivery attemptmalware distributionnetworknetwork intrusionnetwork intrusion attemptsnetwork intrusion detectionnetwork probingnetwork protocolnetwork reconnaissancenetwork scanningnetwork securitynetwork traffic analysisnorth americaoceaniaopenctip0fp0f signaturespassword attackpassword attacksphishingphishing attackphishing trappolandport-scanningprocess injectionprotocol exploitationprotocol-abuseransomwarereconnaissanceremote accessremote servicesresearchedresource hijackingscams & fraudscannerscanning activitysecurity operationssecurity policysensor-taggedsentrypeer botnetsentrypeer eventssentrypeer interactionsserver exploitationservice scansftp attacksftp-attacksingaporesmtpsmtp brute forcesmtp probingsocial engineeringspamsql injectionsshssh attackssh monitoringssh-brute-forcessh-bruteforcesuricata alertssuspicious-udpt-pott1003t1005t1016t1021t1021.001t1021.002t1021.004t1040t1041t1046t1055t1059t1059.003t1068t1071t1071.001t1076t1077t1078t1110t1110.001t1110.002t1110.003t1110.004t1189t1190t1203t1486t1496t1497t1499.001t1499.002t1499.003t1505.002t1563t1565t1566t1566.001t1566.002t1566.003t1595t1595.001t1595.002t1595.003tannertanner eventstanner interactionstargeting databasetcp scantelecommunicationstelnet threattelnet-brute-forcethreat actorthreat detectionthreat intelligencethreat preventiontor nodetpottraffic anomaliesudp scanunauthorized accessunauthorized access attemptunauthorized-access-attemptunited statesvnc protocolvoipvoip attackvulnerability scanweb app attackweb application attackweb attacksweb exploitationweb spamweb trafficweb-application-attack

Activity Timeline

1 total obs
Jun 12Jun 12

Threat Activity Heatmap

· Peak: 2026-06-12
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
46
SIGNAL
Signal Score
46%
Confidence
20
Reports
First seenApr 27, 2025
Last seenJun 12, 2026
GeolocationHK
CountryHong Kong
LocationHong Kong, Kowloon
ASNAS45102
OrgAlibaba.com Singapore E-Commerce Private Limited
Coords22.3193, 114.1690

VirusTotal

Not checked

WHOIS

raw
inetnum: 8.217.0.0 - 8.217.255.255 netname: AlibabaCloud_HK descr: Aliyun Computing Co.LTD country: HK admin-c: ASEP1-AP tech-c: ASEP1-AP abuse-c: AA1926-AP status: ALLOCATED NON-PORTABLE mnt-by: MAINT-ASEPL-SG mnt-irt: IRT-ASEPL-SG last-modified: 2025-07-15T02:04:53Z source: APNIC irt: IRT-ASEPL-SG address: 1 Raffles Place # 59-00 One Raffles Place, Tower One Singapore, Singapore e-mail: [email protected] abuse-mailbox: [email protected] admin-c: ASEP1-AP tech-c: ASEP1-AP auth: # Filtered remarks: [email protected] was validated on 2025-04-14 mnt-by: MAINT-ASEPL-SG last-modified: 2025-04-14T07:19:15Z source: APNIC role: ABUSE ASEPLSG country: ZZ address: 1 Raffles Place # 59-00 One Raffles Place, Tower One Singapore, Singapore phone: +000000000 e-mail: [email protected] admin-c: ASEP1-AP tech-c: ASEP1-AP nic-hdl: AA1926-AP remarks: Generated from irt object IRT-ASEPL-SG remarks: [email protected] was validated on 2025-04-14 abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2025-04-14T07:19:41Z source: APNIC role: Alibabacom Singapore E-Commerce Private Limited a address: 1 Raffles Place #59-00 One Raffles Place, Tower One Singapore, Singapore country: SG phone: +86-571-85022088 fax-no: +86-571-85022088 e-mail: [email protected] admin-c: ASEP1-AP tech-c: ASEP1-AP nic-hdl: ASEP1-AP mnt-by: MAINT-ASEPL-SG last-modified: 2025-07-01T06:25:24Z source: APNIC route: 8.217.248.0/24 origin: AS134963 descr: Alibaba.com Singapore E-Commerce Private Limited 51 Bras Basah Road #04-08 Lazada One Singapore 189554 mnt-by: MAINT-ASEPL-SG last-modified: 2022-10-19T17:59:38Z source: APNIC route: 8.217.248.0/24 origin: AS45102 descr: Alibaba.com Singapore E-Commerce Private Limited 8 Shenton Way, #45-01 AXA Tower, Singapore 068811 mnt-by: MAINT-ASEPL-SG last-modified: 2020-01-20T07:24:43Z source: APNIC

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 14 days ago
Appeared in 20 threat reports