103.218.241.80 Threat Intelligence and Host Information

Share on:

May 09, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Likely Malicious Host 🟠 70/100

Host and Network Information

Mitre ATT&CK IDs: T1021.004 - SSH, T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110 - Brute Force, T1110.004 - Credential Stuffing
Tags: Brute-Force, Bruteforce, Nextray, SSH, aws, brute-force, bruteforce, cowrie, cyber security, digital ocean, ioc, malicious, phishing, scanners, ssh, tcp, vultr
View other sources: Spamhaus VirusTotal
Country: Hong Kong
Network: AS135377 ucloud information technology (hk) limited
Noticed: 50 times
Protcols Attacked: ssh
Countries Attacked: Australia, Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Singapore, Spain, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: www.oppumse.com hk.xcb.plus yyydjx.com rakuten-bank.cn zmmfm.com wxshanning.com ic-tube.com nbnewspeed.com bc-nb.com southeast-transport.com feidetex.com cy-sl.com chinazhanxin.com kangtecequip.com xwhgjc.com swrrt.com hengmaodoors.com host6301227.xincache5.cn host6100015.xincache5.cn host2221567.xincache5.cn host6977999.xincache5.cn host6651642.xincache5.cn host7712137.xincache5.cn hndengta168.com host8064295.xincache5.cn host3296200.xincache5.cn host3046667.xincache5.cn host5509588.xincache5.cn host4892810.xincache5.cn txc.yundungoogle.com

Open Ports Detected

22 443 8443

CVEs Detected

CVE-2010-4478 CVE-2010-4755 CVE-2010-5107 CVE-2011-4327 CVE-2011-5000 CVE-2012-0814 CVE-2014-1692 CVE-2014-2532 CVE-2014-2653 CVE-2015-5352 CVE-2015-5600 CVE-2015-6563 CVE-2015-6564 CVE-2016-0777 CVE-2016-10009 CVE-2016-10010 CVE-2016-10011 CVE-2016-10012 CVE-2016-10708 CVE-2016-1908 CVE-2016-20012 CVE-2017-15906 CVE-2017-20005 CVE-2017-7529 CVE-2018-15473 CVE-2018-16843 CVE-2018-16844 CVE-2018-16845 CVE-2018-20685 CVE-2019-20372 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2019-9511 CVE-2019-9513 CVE-2019-9516 CVE-2020-15778 CVE-2021-23017 CVE-2021-3618 CVE-2021-36368

Map

Whois Information

inetnum: 103.218.240.0 - 103.218.243.255
netname: UCLOUD-HK
descr: UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
country: HK
org: ORG-UITL1-AP
admin-c: UITH2-AP
tech-c: UITH2-AP
status: ALLOCATED PORTABLE
abuse-c: AU164-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-UCLOUD-HK
mnt-routes: MAINT-UCLOUD-HK
mnt-irt: IRT-UCLOUD-HK
last-modified: 2022-05-16T03:40:31Z
irt: IRT-UCLOUD-HK
address: FLAT/RM 603 6/F, LAWS COMMERCIAL PLAZA, 788 CHEUNG SHA WAN ROAD, KL,, Hong Kong
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: UITH2-AP
tech-c: UITH2-AP
mnt-by: MAINT-UCLOUD-HK
last-modified: 2022-12-30T07:26:18Z
organisation: ORG-UITL1-AP
org-name: UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
country: HK
address: FLAT/RM 603 6/F
address: LAWS COMMERCIAL PLAZA
address: 788 CHEUNG SHA WAN ROAD, KL,
phone: +86-18221224857
e-mail: [email protected]
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2019-12-10T12:58:29Z
role: ABUSE UCLOUDHK
address: FLAT/RM 603 6/F, LAWS COMMERCIAL PLAZA, 788 CHEUNG SHA WAN ROAD, KL,, Hong Kong
country: ZZ
phone: +000000000
e-mail: [email protected]
admin-c: UITH2-AP
tech-c: UITH2-AP
nic-hdl: AU164-AP
abuse-mailbox: [email protected]
mnt-by: APNIC-ABUSE
last-modified: 2022-12-30T07:26:59Z
role: UCLOUD INFORMATION TECHNOLOGY HK LIMITED
address: FLAT/RM 603 6/F, LAWS COMMERCIAL PLAZA, 788 CHEUNG SHA WAN ROAD, KL,, Hong Kong
country: HK
phone: +000000000
e-mail: [email protected]
admin-c: UITH2-AP
tech-c: UITH2-AP
nic-hdl: UITH2-AP
notify: [email protected]
mnt-by: MAINT-UCLOUD-HK
last-modified: 2022-05-16T03:54:14Z
route: 103.218.241.0/24
origin: AS135377
descr: UCloud (HK) Holdings Group Limited
mnt-by: MAINT-UCLOUD-HK
last-modified: 2021-10-15T01:30:16Z

Links to attack logs