103.119.104.254 Threat Intelligence and Host Information

Share on:
Mar 12, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Host and Network Information

  • Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110 - Brute Force, T1110.004 - Credential Stuffing
  • Tags: Brute-Force, Bruteforce, Nextray, SSH, SSH Bruteforce, am utc, api access, blogpost https, cowrie, cyber security, email, feed updation, feeds, feeds malicious, feeds malware, ioc, ip blacklist, malicious, phishing, rescure cyber, ssh

  • View other sources: Spamhaus VirusTotal

  • Country: Hong Kong
  • Network: AS138029 shen zhen hu lian xian feng technology co. limited
  • Noticed: 34 times
  • Protcols Attacked: ssh
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count:

Open Ports Detected

22 9000

CVEs Detected

CVE-2016-20012 CVE-2017-15906 CVE-2018-15473 CVE-2018-15919 CVE-2018-20685 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617

Map

Whois Information

  • inetnum: 103.119.104.0 - 103.119.105.255
  • netname: TOPNETS-GROUP-LTD
  • descr: Topnets Group LTD Company,Unit 616, 6/F., Kam Teem Industrial Bldg.,135 Connaught Road West, Sheung Wan, H.K.
  • country: HK
  • geoloc: 22.27534 114.16546
  • admin-c: TTCL4-AP
  • tech-c: TTCL4-AP
  • abuse-c: AT1183-AP
  • status: ALLOCATED NON-PORTABLE
  • mnt-by: MAINT-TTCL-CN
  • mnt-irt: IRT-TTCL-CN
  • last-modified: 2021-01-18T03:37:54Z
  • irt: IRT-TTCL-CN
  • address: Unit 616, 6/F., Kam Teem Industrial Bldg., 135 Connaught Road West, Sheung Wan, H.K.
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: TTCL4-AP
  • tech-c: TTCL4-AP
  • mnt-by: MAINT-TTCL-CN
  • last-modified: 2022-09-16T03:21:42Z
  • role: ABUSE TTCLCN
  • address: Unit 616, 6/F., Kam Teem Industrial Bldg., 135 Connaught Road West, Sheung Wan, H.K.
  • country: ZZ
  • phone: +000000000
  • e-mail: [email protected]
  • admin-c: TTCL4-AP
  • tech-c: TTCL4-AP
  • nic-hdl: AT1183-AP
  • abuse-mailbox: [email protected]
  • mnt-by: APNIC-ABUSE
  • last-modified: 2022-09-16T03:21:58Z
  • role: TOPNETS TECHNOLOGY CO LTD administrator
  • address: Hua Lian Mansion,Floor 2, Shenzhen Guangdong 518000
  • country: CN
  • phone: +86-400-688-5856
  • fax-no: +86-400-688-5856
  • e-mail: [email protected]
  • admin-c: TTCL4-AP
  • tech-c: TTCL4-AP
  • nic-hdl: TTCL4-AP
  • mnt-by: MAINT-TTCL-CN
  • last-modified: 2018-07-19T08:34:18Z
  • route: 103.119.104.0/23
  • origin: AS132585
  • descr: Shen Zhen Hu Lian Xian Feng Technology Co., Limited
  • mnt-by: MAINT-TTCL-CN
  • last-modified: 2021-05-07T06:56:13Z
  • route: 103.119.104.0/23
  • origin: AS137443
  • descr: Shen Zhen Hu Lian Xian Feng Technology Co., Limited
  • mnt-by: MAINT-TTCL-CN
  • last-modified: 2021-05-07T08:49:16Z
  • route: 103.119.104.0/23
  • origin: AS138029
  • descr: Shen Zhen Hu Lian Xian Feng Technology Co., Limited
  • mnt-by: MAINT-TTCL-CN
  • last-modified: 2021-05-07T08:50:04Z

Links to attack logs

dofrank-ssh-bruteforce-ip-list-2022-12-15 bruteforce-ip-list-2023-01-14 vultrparis-ssh-bruteforce-ip-list-2022-12-29 vultrparis-ssh-bruteforce-ip-list-2022-12-30