Check an IP Address, Domain Name, Subnet, or ASN
47.109.204.89 has a threat confidence score of 87%. This IP address from China (AS37963, Hangzhou Alibaba Advertising Co.,Ltd.) has been observed in 370 honeypot sessions and reported 2 times targeting MONGODB, HTTPS, HTTP protocols. First observed on January 28, 2026, most recently active March 16, 2026.
Identifies HTTPS requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration
Client repeatedly requests MongoDB startup warnings using the getLog command and disconnects shortly after. This pattern indicates automated inspection of server diagnostics to gather environment details, commonly seen during discovery or reconnaissance against exposed MongoDB services.
Identifies HTTP requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration.
| Reporter | Date | Category | Protocol | Comment |
|---|---|---|---|---|
| User | Mar 11, 2026, 13:24 | Brute Force | MONGODB | SikkerGuard: 4 blocked packets |
| User | Mar 11, 2026, 03:24 | Brute Force | MONGODB | SikkerGuard: 4 blocked packets |