1.12.0.4 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 1.12.0.4 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 5/100

Host and Network Information

  • Country: China
  • Network: AS132203 tencent building kejizhongyi avenue
  • Noticed: 1 times
  • Protcols Attacked: SSH
  • Passive DNS Results: vivien.dnspod.net tiger.dnspod.net theresa.dnspod.net chester.dnspod.net balmy.dnspod.net qianyuyu521.love paraffin.dnspod.net ten.dnspod.net ns15.xincache.com frederic.dnspod.net yacht.dnspod.net segment.dnspod.net gotozy.top tina.dnspod.net gybsbs.com hanhechina.com altjkk.com charcoal.dnspod.net uranium.dnspod.net tree.dnspod.net egbert.dnspod.net lee.dnspod.net building.dnspod.net maticfox.com www.carbonatomgame.com carbonatomgame.com turbot.dnspod.net cockle.dnspod.net xinpro.cn chunaigpt.top cockroach.dnspod.net www.yolesto.com www.upc123.cn upc123.cn ns13.xincache.com huachengtec.com ns17.xincache.com dns-ch.xinnet.com www.haohot.net lamb.dnspod.net cinema.dnspod.net ce1.xincache.com sculptor.dnspod.net rap.dnspod.net fin.dnspod.net nxd6.top ryyx.xyz slategray.dnspod.net api.fangtaikun.cn shblong.com hurricane.dnspod.net belle.dnspod.net bizcn1.dnspod.net ns19.xincache.com company.dnspod.net old.dnspod.net unemployed.dnspod.net www.yuanjiejm.com laiweijie.com family222.com kitten.dnspod.net amos.dnspod.net hzy123.top marina.dnspod.net wp.xiaoyaowd.cn tophero1.top ns11.xincache.com yingduobao.com f1g1ns1.dnspod.net

Malware Detected on Host

Count: 1 430564b9a6780c13d085a0140c7f3de79c5fba959ad29af8d2d8d90e06162fbd

Open Ports Detected

53

Map

Whois Information

  • inetnum: 1.12.0.0 - 1.15.255.255
  • netname: TencentCloud
  • descr: Tencent cloud computing (Beijing) Co., Ltd.
  • descr: Floor 6, Yinke Building,38 Haidian St,
  • descr: Haidian District Beijing
  • country: CN
  • admin-c: JT1125-AP
  • tech-c: JX1747-AP
  • abuse-c: AC1601-AP
  • status: ALLOCATED PORTABLE
  • mnt-by: MAINT-CNNIC-AP
  • mnt-lower: MAINT-CNNIC-AP
  • mnt-routes: MAINT-CNNIC-AP
  • mnt-irt: IRT-CNNIC-CN
  • last-modified: 2021-06-16T01:27:48Z
  • irt: IRT-CNNIC-CN
  • address: Beijing, China
  • e-mail: ipas@cnnic.cn
  • abuse-mailbox: ipas@cnnic.cn
  • admin-c: IP50-AP
  • tech-c: IP50-AP
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2021-06-16T01:39:57Z
  • role: ABUSE CNNICCN
  • address: Beijing, China
  • country: ZZ
  • phone: +000000000
  • e-mail: ipas@cnnic.cn
  • admin-c: IP50-AP
  • tech-c: IP50-AP
  • nic-hdl: AC1601-AP
  • abuse-mailbox: ipas@cnnic.cn
  • mnt-by: APNIC-ABUSE
  • last-modified: 2020-05-14T11:19:01Z
  • person: James Tian
  • address: 9F, FIYTA Building, Gaoxinnanyi Road,Southern
  • address: District of Hi-tech Park, Shenzhen
  • country: CN
  • phone: +86-755-86013388-84952
  • e-mail: clarkcheng@tencent.com
  • nic-hdl: JT1125-AP
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2021-09-17T00:37:15Z
  • person: Jimmy Xiao
  • address: 9F, FIYTA Building, Gaoxinnanyi Road,Southern
  • address: District of Hi-tech Park, Shenzhen
  • country: CN
  • phone: +86-755-86013388-80224
  • e-mail: klayliang@tencent.com
  • nic-hdl: JX1747-AP
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2021-09-17T00:38:09Z
  • route: 1.12.0.0/14
  • origin: AS45090
  • descr: China Internet Network Information Center
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2020-02-25T01:10:58Z
Share on: