103.210.161.198 Threat Intelligence and Host Information

Share on:
May 09, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Likely Malicious Host 🟠 55/100

Host and Network Information

  • Mitre ATT&CK IDs: T1498 - Network Denial of Service
  • Tags: Cyclops, Gamardeon, HermeticWiper, IsaacWiper, PartyTicket, WhisperGate, attack ddos, botnet, ddos, list ips, russia, russian, ukraine
  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: blocklist_net_ua, sslproxies_30d, sslproxies_7d, stopforumspam, stopforumspam_180d, stopforumspam_30d, stopforumspam_365d, stopforumspam_90d

  • Country: Hong Kong
  • Network: AS63199 capitalonline data service co. ltd
  • Noticed: 5 times
  • Protcols Attacked: SSH
  • Countries Attacked: Russian Federation

Open Ports Detected

1935 443 80 8888 9100

Map

Whois Information

  • inetnum: 103.210.160.0 - 103.210.163.255
  • netname: LTIDC
  • descr: Guangdong LITONG Network Technology Limited
  • descr: Room 2607,Everbright Bank Building, No. 689, Tianhe North Road
  • descr: Tianhe District, Guangzhou, Guangdong, China
  • country: CN
  • admin-c: ZM953-AP
  • tech-c: ZM954-AP
  • abuse-c: AC1601-AP
  • status: ALLOCATED PORTABLE
  • mnt-by: MAINT-CNNIC-AP
  • mnt-irt: IRT-CNNIC-CN
  • last-modified: 2021-06-16T01:31:25Z
  • irt: IRT-CNNIC-CN
  • address: Beijing, China
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: IP50-AP
  • tech-c: IP50-AP
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2021-06-16T01:39:57Z
  • role: ABUSE CNNICCN
  • address: Beijing, China
  • country: ZZ
  • phone: +000000000
  • e-mail: [email protected]
  • admin-c: IP50-AP
  • tech-c: IP50-AP
  • nic-hdl: AC1601-AP
  • abuse-mailbox: [email protected]
  • mnt-by: APNIC-ABUSE
  • last-modified: 2020-05-14T11:19:01Z
  • person: Yanli Cui
  • address: Room 2607,Everbright Bank Building, No. 689, Tianhe North Road
  • address: Tianhe District, Guangzhou, Guangdong, China
  • country: CN
  • phone: +86-020-85261628
  • e-mail: [email protected]
  • nic-hdl: ZM953-AP
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2014-03-28T02:06:02Z
  • person: Weifeng Lin
  • address: Room 2607,Everbright Bank Building, No. 689, Tianhe North Road
  • address: Tianhe District, Guangzhou, Guangdong, China
  • country: CN
  • phone: +86-020-85266456
  • e-mail: [email protected]
  • nic-hdl: ZM954-AP
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2014-03-28T02:06:02Z

Links to attack logs

roxy-ip-list-2023-05-03 roxy-ip-list-2023-05-05