47.84.124.24📋 Copy

# IP Intelligence Briefing: 47.84.124.24/32

## Executive Summary

IP address 47.84.124.24 is a low-risk cloud infrastructure address operated by Alibaba Cloud LLC. The IP shows minimal threat activity with a risk score of 25/100 and is currently classified as "mostly clean" in its subnet. No active malicious indicators detected.

## Ownership & Classification

• ASN: 45102 (ALIBABA-CN-NET - Alibaba (US) Technology Co., Ltd.)
• Organization: Alibaba Cloud LLC
• Network Block: 47.84.0.0/17
• Geolocation: United States (ARIN RIR)
• Infrastructure Type: Cloud Compute / Hosting
• Status: Firewalled / No Services Open

## Threat Indicators

• Overall Risk Score: 25 (Low Risk)
• Blacklist Count: 0
• DNSBL Listings: 1 of 8 total lists
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Campaign Affiliation: None detected
• Threat Persistence Days: 0

## Network Context

• Subnet Classification: Mostly Clean
• Abuse Density: 1 (minimal)
• Threat Siblings in /24: 1
• Neighbor IPs: 0 active
• Route Stability: False (route changes observed)
• RPKI State: Valid

## Service & DNS Analysis

• Open Ports: None detected (firewalled)
• Forward Resolution: 0 hostnames
• Reverse DNS: No PTR records
• Email Auth: No SPF/DMARC records
• HTTP Services: None detected

## Observation History

• Total Observations: 15 signals
• Most Recent Activity: 2026-06-18
• Geolocation Confidence: Low (0.35 confidence, 2500km accuracy radius)
• Operator Score: 0.1304 (Minimal)
• Threat Observation Count: 1

## Network Relationships

• Same Network Relationships: 12 relationships identified (AL-3 subnet references)
• Shared Infrastructure: Multiple IPs in same /24 subnet

## Recommended Actions

• Firewall Policy: No blocking required at this time. IP classified as low-risk cloud infrastructure.
• Monitoring: Continue standard cloud provider monitoring. No immediate threat indicators.
• Block Decision: Not recommended. IP shows no active malicious activity.
• Alert Threshold: Monitor for changes in DNSBL listings or emergence of open ports/services.

## SOC Analyst Notes

This IP represents legitimate cloud hosting infrastructure from Alibaba Cloud's US operations. The single DNSBL listing and one threat sibling in the subnet warrant periodic review but do not indicate current compromise or abuse. The IP has no open ports or services, suggesting proper firewall configuration. No immediate action required beyond routine monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.