103.206.21.89 Threat Intelligence and Host Information

Share on:

May 09, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Possibly Malicious Host 🟢 15/100

Host and Network Information

View other sources: Spamhaus VirusTotal
Country: Hong Kong
Network:
Noticed: 1 times
Protcols Attacked: mysql
Passive DNS Results: cjqm008.com www.cjqm008.com www.3ios.cn

Open Ports Detected

21 3306 3389 5985 666 80

CVEs Detected

CVE-2006-20001 CVE-2022-2097 CVE-2022-31628 CVE-2022-31629 CVE-2022-36760 CVE-2022-37436 CVE-2022-4304 CVE-2022-4450 CVE-2023-0215 CVE-2023-0286 CVE-2023-0464 CVE-2023-0465 CVE-2023-0466 CVE-2023-25690 CVE-2023-27522

Map

Whois Information

NetRange: 162.144.0.0 - 162.144.255.255
CIDR: 162.144.0.0/16
NetName: UNIFIEDLAYER-NETWORK-14
NetHandle: NET-162-144-0-0-1
Parent: NET162 (NET-162-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS46606
Organization: Unified Layer (BLUEH-2)
RegDate: 2013-03-01
Updated: 2013-03-01
Ref: https://rdap.arin.net/registry/ip/162.144.0.0
OrgName: Unified Layer
OrgId: BLUEH-2
Address: 1958 South 950 East
City: Provo
StateProv: UT
PostalCode: 84606
Country: US
RegDate: 2006-08-08
Updated: 2020-01-31
Ref: https://rdap.arin.net/registry/entity/BLUEH-2
OrgTechHandle: ENO74-ARIN
OrgTechName: EIG Network Operations
OrgTechPhone: +1-781-852-3200
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/ENO74-ARIN
OrgAbuseHandle: NOC2320-ARIN
OrgAbuseName: Network Operations Center
OrgAbusePhone: +1-801-765-9400
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/NOC2320-ARIN
OrgNOCHandle: ENO74-ARIN
OrgNOCName: EIG Network Operations
OrgNOCPhone: +1-781-852-3200
OrgNOCEmail: [email protected]
OrgNOCRef: https://rdap.arin.net/registry/entity/ENO74-ARIN
network:Class-Name:network
network:ID: NETBLK-UL.162.144.12.0/22
network:Auth-Area: 162.144.12.0/22
network:Network-Name: UL-162.144.12.0/22
network:IP-Network: 162.144.12.0/22
network:Organization: WEBSITEWELCOME.COM
network:Tech-Contact: [email protected]
network:Admin-Contact: [email protected]
network:Abuse-Contact: [email protected]
network:Created: 20130103
network:Updated: 20160330
network:Updated-By: [email protected]
lcome.com

Links to attack logs