Check an IP Address, Domain Name, Subnet, or ASN
47.238.112.250 has a threat confidence score of 85%. This IP address from Hong Kong (AS45102, Alibaba US Technology Co., Ltd.) has been observed in 42 honeypot sessions targeting SIP, FTP, HTTP, SSH, MSSQL and 2 other protocols. First observed on March 28, 2026, most recently active March 29, 2026.
Enumerates MongoDB server metadata and storage characteristics across multiple databases by issuing commands such as buildInfo, serverStatus, hostInfo, features, and isMaster, followed by systematic dbStats and collStats queries against common databases including admin, config, local, test, and production. This behavior reflects structured reconnaissance intended to map server capabilities, deployment topology, and data footprint prior to potential follow-on actions.
Identifies HTTP requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration.