101.37.118.54 Threat Intelligence and Host Information

Oct 22, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 101.37.118.54 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 65/100

Host and Network Information

Tags: cyber security, DDOS, ioc, KillNet, malicious, Nextray, phishing
View other sources: Spamhaus VirusTotal
Contained within other IP sets: proxylists_1d, proxylists_30d, proxylists_7d, proxylists, proxz_30d, proxz_7d

Country: China
Network:
Noticed: 50 times
Protocols Attacked: Anonymous Proxy
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: admobile.mobi www.admobile.mobi yunyuexinxi.com www.admobile.top m.admobile.vip admobile.vip www.admobile.vip m.admobile.top tbk.qqtlr.com mallapi.qqtlr.com huyayue.com www.huyayue.com admobile.top

Open Ports Detected

10017 10020 10048 10134 10250 10393 10554 1080 110 11000 11007 11075 111 11180 11210 11211 113 11300 1153 1200 12000 12112 12145 12150 12166 12173 12180 12198 12207 12246 12247 12251 12258 12266 12274 12329 12350 12390 12430 12438 12455 12456 12467 12487 12503 12549 12564 12576 12590 12615 12902 13 13128 13780 1414 14265 1433 1444 14873 14894 15 1521 15504 15831 1599 16002 16004 16012 16036 16041 16049 16053 16061 16092 16666 16800 16993 17 17000 1723 175 17778 1800 1801 18014 18019 18023 18042 18061 18067 18069 18070 18086 18087 18368 18556 1883 19000 19022 1911 1947 1956 1957 1962 1981 20000 20082 20150 20325 2050 2051 2055 2070 2077 2087 2096 21025 21238 21243 21245 21252 21263 21264 21294 21295 21299 21302 21305 21315 2154 2181 22 2209 221 22206 2222 2225 23 23023 23182 2323 2345 2404 25565 264 27017 29840 30002 30003 30004 3001 30110 3050 3065 3076 3078 3098 31001 3105 311 3118 3133 3158 3159 3160 3162 3165 3168 3169 3184 32101 32102 3299 3310 3406 35000 35531 3780 389 4063 4157 41800 4242 4243 4250 427 4282 4321 4369 440 4430 44333 4434 4438 4443 4466 44818 4482 451 4530 45333 461 465 47990 4899 49 4911 49200 49210 4933 49502 4993 5001 5007 5010 50100 5090 5093 51005 513 515 5172 5201 52230 5232 5244 5249 5265 5269 5272 53 5321 53490 53806 54138 5435 5446 548 55443 55553 5599 5672 57778 5858 587 5910 5914 5938 5986 5992 6000 6001 6002 61613 61616 63256 63443 64295 65004 6650 666 6668 6789 6887 70 7001 7171 7218 7325 7373 7415 7443 7548 772 79 8009 8014 8019 8029 805 8055 8057 8062 8073 8083 8084 8087 809 8143 8146 8168 8177 8180 8184 8185 8200 8249 8282 8322 8333 8350 8383 8401 8410 843 8434 8443 8475 8501 8525 8540 8545 8554 8557 8569 8606 8649 8706 8728 8788 8809 8813 8821 8830 8833 8843 8854 8855 8858 886 8863 8868 8876 8878 8883 8889 8989 9001 9012 9013 9018 9042 9043 9048 9051 9068 9083 9084 9100 9127 9144 9147 9160 9168 9178 9203 9251 9333 9376 95 9513 9633 9700 9898 992 9922 9943 995 9993 9999

CVEs Detected

CVE-2007-2768 CVE-2008-3844 CVE-2010-4478 CVE-2010-4755 CVE-2010-5107 CVE-2011-4327 CVE-2011-5000 CVE-2012-0814 CVE-2014-1692 CVE-2014-2532 CVE-2014-2653 CVE-2015-5352 CVE-2015-5600 CVE-2015-6563 CVE-2015-6564 CVE-2016-0777 CVE-2016-10009 CVE-2016-10010 CVE-2016-10011 CVE-2016-10012 CVE-2016-10708 CVE-2016-1908 CVE-2016-20012 CVE-2016-3115 CVE-2017-15906 CVE-2018-15473 CVE-2018-15919 CVE-2018-20685 CVE-2019-16905 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408 CVE-2023-48795 CVE-2023-51385 CVE-2023-51767 CVE-2024-6387 CVE-2025-26465 CVE-2025-32728

Map

Whois Information

inetnum: 101.37.0.0 - 101.37.255.255
netname: ALISOFT
descr: Aliyun Computing Co., LTD
descr: 5F, Builing D, the West Lake International Plaza of S&T
descr: No.391 Wen’er Road, Hangzhou, Zhejiang, China, 310099
country: CN
admin-c: ZM1015-AP
tech-c: ZM877-AP
tech-c: ZM876-AP
tech-c: ZM875-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-ALISOFT-CN
last-modified: 2023-11-28T00:55:46Z
irt: IRT-ALISOFT-CN
address: No.391 Wen’er Road, Hangzhou, Zhejiang, China, 310099
e-mail: didong.jc@alibaba-inc.com
abuse-mailbox: didong.jc@alibaba-inc.com
admin-c: ZM877-AP
tech-c: ZM877-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2021-09-05T23:38:36Z
role: ABUSE CNNICCN
country: ZZ
address: Beijing, China
phone: +000000000
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
abuse-mailbox: ipas@cnnic.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-19T17:20:32Z
person: Li Jia
address: NO.969 West Wen Yi Road, Yu Hang District, Hangzhou
country: CN
phone: +86-0571-85022088
e-mail: jiali.jl@alibaba-inc.com
nic-hdl: ZM1015-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:12:42Z
person: Guoxin Gao
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen’er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
fax-no: +86-0571-85022600
e-mail: anti-spam@list.alibaba-inc.com
nic-hdl: ZM875-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2014-07-30T01:56:01Z
person: security trouble
e-mail: abuse@alibaba-inc.com
address: Hangzhou, Zhejiang, China
phone: +86-0571-85022600
country: CN
mnt-by: MAINT-CNNIC-AP
nic-hdl: ZM876-AP
last-modified: 2025-07-01T07:06:11Z
person: Guowei Pan
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen’er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022088-30763
fax-no: +86-0571-85022600
e-mail: abuse@alibaba-inc.com
nic-hdl: ZM877-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:05:46Z
route: 101.37.0.0/16
descr: Hangzhou Alibaba Advertising Co.,Ltd.
country: CN
origin: AS37963
mnt-by: MAINT-CNNIC-AP
last-modified: 2019-08-07T23:28:06Z
route: 101.37.0.0/16
descr: Alibaba (US) Technology Co., Ltd.
country: CN
origin: AS45102
mnt-by: MAINT-CNNIC-AP
last-modified: 2019-08-07T23:28:04Z

Links to attack logs

Share on: