47.93.18.151 Threat Intelligence and Host Information
General
This page contains threat intelligence information for the IPv4 address 47.93.18.151 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.
Potentially Malicious Host 🟡 45/100
Host and Network Information
-
Tags: cyber security, ioc, malicious, Nextray, phishing
-
View other sources: Spamhaus VirusTotal
- Country: China
- Network:
- Noticed: 29 times
- Protocols Attacked: telnet
- Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Open Ports Detected
10000 10001 10041 10134 102 1028 104 1080 10935 1099 11 110 11112 11180 11210 1177 12019 12196 12217 12232 12262 12345 12358 12465 12518 12534 12588 13 1337 135 1365 143 1433 1447 1500 1515 16020 1604 16058 16095 16100 16993 17 17184 175 179 18042 18073 18079 18245 1883 1911 1958 1983 1986 2002 2003 20202 2060 2069 2072 2081 2087 21100 21237 21295 2154 2201 221 22556 2320 2323 2404 25001 25565 2650 27015 285 30001 30003 3001 3002 30112 30121 3086 3146 3268 3310 3388 3551 37777 3953 4150 4157 4165 4282 4369 44307 4500 45039 4506 4530 4821 4899 4911 49501 50006 5001 5007 50073 50100 50105 51000 5160 5172 5222 5229 5230 54138 55200 5609 5721 5938 5984 5986 6000 61613 61616 62865 63210 636 6543 6600 6653 6667 6668 70 7001 7025 7171 7415 7443 7634 771 777 7900 8036 8072 8073 8079 8085 8099 8126 8127 8131 8139 8164 8177 8192 8333 8416 8459 8488 8526 8554 8565 8728 8889 8890 8908 9042 9100 9160 9162 9207 9443 9501 9633 9908 994
CVEs Detected
CVE-2007-2768 CVE-2008-3844 CVE-2010-4478 CVE-2010-4755 CVE-2010-5107 CVE-2011-4327 CVE-2011-5000 CVE-2012-0814 CVE-2014-1692 CVE-2014-2532 CVE-2014-2653 CVE-2015-5352 CVE-2015-5600 CVE-2015-6563 CVE-2015-6564 CVE-2016-0777 CVE-2016-10009 CVE-2016-10010 CVE-2016-10011 CVE-2016-10012 CVE-2016-10708 CVE-2016-1908 CVE-2016-20012 CVE-2016-3115 CVE-2017-15906 CVE-2018-15473 CVE-2018-15919 CVE-2018-20685 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408 CVE-2023-44487 CVE-2023-48795 CVE-2023-51385 CVE-2023-51767 CVE-2025-23419 CVE-2025-26465 CVE-2025-32728
Map
Whois Information
- NetRange: 47.92.0.0 - 47.97.255.255
- CIDR: 47.92.0.0/14, 47.96.0.0/15
- NetName: APNIC
- NetHandle: NET-47-92-0-0-1
- Parent: NET47 (NET-47-0-0-0-0)
- NetType: Early Registrations, Transferred to APNIC
- OriginAS:
- Organization: Asia Pacific Network Information Centre (APNIC)
- RegDate: 2015-03-02
- Updated: 2015-03-02
- Ref: https://rdap.arin.net/registry/ip/47.92.0.0
- OrgName: Asia Pacific Network Information Centre
- OrgId: APNIC
- Address: PO Box 3646
- City: South Brisbane
- StateProv: QLD
- PostalCode: 4101
- Country: AU
- RegDate:
- Updated: 2012-01-24
- Ref: https://rdap.arin.net/registry/entity/APNIC
- OrgAbuseHandle: AWC12-ARIN
- OrgAbuseName: APNIC Whois Contact
- OrgAbusePhone: +61 7 3858 3188
- OrgAbuseEmail: search-apnic-not-arin@apnic.net
- OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
- OrgTechHandle: AWC12-ARIN
- OrgTechName: APNIC Whois Contact
- OrgTechPhone: +61 7 3858 3188
- OrgTechEmail: search-apnic-not-arin@apnic.net
- OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
- inetnum: 47.92.0.0 - 47.95.255.255
- netname: ALISOFT
- descr: Aliyun Computing Co., LTD
- descr: 5F, Builing D, the West Lake International Plaza of S&T
- descr: No.391 Wen’er Road, Hangzhou, Zhejiang, China, 310099
- country: CN
- admin-c: ZM1015-AP
- tech-c: ZM877-AP
- tech-c: ZM876-AP
- tech-c: ZM875-AP
- abuse-c: AC1601-AP
- status: ALLOCATED PORTABLE
- mnt-by: MAINT-CNNIC-AP
- mnt-irt: IRT-ALISOFT-CN
- last-modified: 2023-11-28T00:58:17Z
- irt: IRT-ALISOFT-CN
- address: No.391 Wen’er Road, Hangzhou, Zhejiang, China, 310099
- e-mail: didong.jc@alibaba-inc.com
- abuse-mailbox: didong.jc@alibaba-inc.com
- admin-c: ZM877-AP
- tech-c: ZM877-AP
- mnt-by: MAINT-CNNIC-AP
- last-modified: 2025-11-18T00:35:07Z
- role: ABUSE CNNICCN
- country: ZZ
- address: Beijing, China
- phone: +000000000
- e-mail: ipas@cnnic.cn
- admin-c: IP50-AP
- tech-c: IP50-AP
- nic-hdl: AC1601-AP
- abuse-mailbox: ipas@cnnic.cn
- mnt-by: APNIC-ABUSE
- last-modified: 2025-09-19T17:20:32Z
- person: Li Jia
- address: NO.969 West Wen Yi Road, Yu Hang District, Hangzhou
- country: CN
- phone: +86-0571-85022088
- e-mail: jiali.jl@alibaba-inc.com
- nic-hdl: ZM1015-AP
- mnt-by: MAINT-CNNIC-AP
- last-modified: 2025-07-01T07:12:42Z
- person: Guoxin Gao
- address: 5F, Builing D, the West Lake International Plaza of S&T
- address: No.391 Wen’er Road, Hangzhou City
- address: Zhejiang, China, 310099
- country: CN
- phone: +86-0571-85022600
- fax-no: +86-0571-85022600
- e-mail: anti-spam@list.alibaba-inc.com
- nic-hdl: ZM875-AP
- mnt-by: MAINT-CNNIC-AP
- last-modified: 2014-07-30T01:56:01Z
- person: security trouble
- e-mail: abuse@alibaba-inc.com
- address: Hangzhou, Zhejiang, China
- phone: +86-0571-85022600
- country: CN
- mnt-by: MAINT-CNNIC-AP
- nic-hdl: ZM876-AP
- last-modified: 2025-07-01T07:06:11Z
- person: Guowei Pan
- address: 5F, Builing D, the West Lake International Plaza of S&T
- address: No.391 Wen’er Road, Hangzhou City
- address: Zhejiang, China, 310099
- country: CN
- phone: +86-0571-85022088-30763
- fax-no: +86-0571-85022600
- e-mail: abuse@alibaba-inc.com
- nic-hdl: ZM877-AP
- mnt-by: MAINT-CNNIC-AP
- last-modified: 2025-07-01T07:05:46Z
- route: 47.92.0.0/14
- descr: Hangzhou Alibaba Advertising Co.,Ltd.
- country: CN
- origin: AS37963
- mnt-by: MAINT-CNNIC-AP
- last-modified: 2019-08-07T23:28:06Z
- route: 47.92.0.0/14
- descr: Alibaba (US) Technology Co., Ltd.
- country: CN
- origin: AS45102
- mnt-by: MAINT-CNNIC-AP
- last-modified: 2019-08-07T23:28:04Z
Links to attack logs
awsau-telnet-bruteforce-ip-list-2021-08-28 ****** ****** ******
Share on: