Check an IP Address, Domain Name, Subnet, or ASN
47.84.196.3 has a threat confidence score of 75%. This IP address from Singapore (AS45102, Alibaba US Technology Co., Ltd.) has been observed in 20 honeypot sessions targeting HTTPS, MONGODB, SSH protocols. First observed on February 12, 2026, most recently active February 20, 2026.
Enumerates MongoDB server metadata and storage characteristics across multiple databases by issuing commands such as buildInfo, serverStatus, hostInfo, features, and isMaster, followed by systematic dbStats and collStats queries against common databases including admin, config, local, test, and production. This behavior reflects structured reconnaissance intended to map server capabilities, deployment topology, and data footprint prior to potential follow-on actions.
Identifies HTTPS requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration