103.96.150.19 Threat Intelligence and Host Information

Aug 07, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 103.96.150.19 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 65/100

Host and Network Information

  • Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110.004 - Credential Stuffing, T1110 - Brute Force

  • Tags: brute force, Bruteforce, Brute-Force, cowrie, cyber security, ioc, malicious, Nextray, phishing, rdp, ssh, SSH

  • JARM: 29d29d20d29d29d21c29d29d29d29df51c60823f963b0fe11deab8efc70b4b

  • View other sources: Spamhaus VirusTotal

  • Country: China
  • Network:
  • Noticed: 50 times
  • Protocols Attacked: ssh
  • Countries Attacked: Australia, Canada, Czechia, Denmark, Estonia, France, Germany, Korea Republic of, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: cp507.com cp261.com pj306.com pt172.com pt178.com pj302.com cp201.com cp205.com zx105.com zx107.com pt155.com pt166.com pt170.com pt171.com pt136.com pt153.com pt169.com pj106.com pt150.com pj203.com pj207.com pj206.com pj109.com cp179.com zx103.com pt102.com pt63.com pt131.com pt112.com pt113.com by107.com ptx55.com www.ptx55.com sands-v5555.vip sands-v919.vip sands-v799.vip sands-m668.vip sands-v31.vip sands-v82.vip sands-v366.vip sands-mgg.vip sands-m33.vip sands-m3333.vip sands-m99.vip sands-m11.vip sands-m77.vip sands-m6666.vip sands-mmm.vip sands-m55.vip sands-mdd.vip sands-m9999.vip sands-m88.vip sands-m66.vip sands-m5555.vip sands-m888.vip sands-maa.vip sands-m222.vip sands-m777.vip sands-m999.vip sands-mss.vip sands-v81.top sands-v63.top nealctyouthclub.com sands-v36.top sands-ss.top sands-v79.top sands-v86.top sands-v99.top sands-33.top sands-v11.top sands-v66.top sands-v28.top sands-99.top sands-ww.top sands-77.top sands-kk.top sands-qq.top sands-v18.top m-sands.vip stjdf.online kthdsg.online cartonorthservice.com gfzjz-waterproof.com flsyfw.com jale1000.com www.electrictoys0.com fafzxfsfs.top www.fafzxfsf.top fafzxfsf.top intexsupplier.com www.sgfwetmmmm.xyz electrictoys0.com www.ygwmgts.com sgfwetmmmm.xyz tikadv.com www.tikadv.com ygwmgts.com ailevape.gxgedc.com www.mkihouse.com mkihouse.com www.ailevape.com ailevape.com www.aasssttqq.xyz aasssttqq.xyz www.goojewelry.com goojewelry.com shop0028.com www.laneigefleuriste.com laneigefleuriste.com rihtrade.com www.rihtrade.com www.luxuryrt.com luxuryrt.com ttfffashion.com www.ttfffashion.com jp.disscor.com www.disscor.com disscor.com amalisc.com www.amalisc.com intexdevelopment.cn www.intexdevelopment.cn eyou.gxgedc.com zh.ok-knives.net ru.ok-knives.net www.ok-knives.net ok-knives.net zh.gxgedc.com gxgedc.com www.gxgedc.com www.hulyjewelry.com hulyjewelry.com wisdomdisplay.com www.wisdomdisplay.com en.hebeifutai.com hebeifutai.com www.hebeifutai.com en.hebfutai.com safeyon.com www.safeyon.com hebfutai.com www.hebfutai.com www.tiktok-ad.com tiktok-ad.com crazyleditoy.com 52longhair.com www.52longhair.com longhair88.com www.longhair88.com www.jiuyitech.net jiuyitech.net www.d5995.com d5995.com www.sheing.cc www.chgoodes.com chgoodes.com wessby.com www.wessby.com www.gangetower.com gangetower.com bhbmac.com www.bhbmac.com sheing.shop sheing.cc google-adv.com www.google-adv.com wp.tigerwing.net wmv8.icu bxu8.icu ehe8.icu nvx8.icu akp8.icu czy8.icu ksa8.icu ugy8.icu sdm8.icu hka8.icu vli8.icu mnk8.icu rhw8.icu ysu8.icu lso8.icu lbh8.icu miz8.icu bzs8.icu plw8.icu vrl8.icu ciz8.icu agv8.icu iaq8.icu gxv8.icu iok8.icu rht8.icu nso8.icu ddx8.icu zpf8.icu qwo8.icu gxh8.icu goh8.icu hbh8.icu ksn8.icu nwp8.icu hln8.icu lnk8.icu wdv8.icu kjo8.icu vpm8.icu lkh8.icu bew8.icu akt8.icu gdr8.icu asm8.icu ydf8.icu jhl8.icu hia8.icu fgc8.icu rcb8.icu ldg8.icu fpc8.icu npo8.icu kdc8.icu giq8.icu cce8.icu kjv8.icu tfl8.icu doj8.icu rkv8.icu jif8.icu yqd8.icu nip8.icu lwe8.icu clq8.icu hmg8.icu xsq8.icu ihb8.icu pbf8.icu roe8.icu axq8.icu vwc8.icu jga8.icu mtr8.icu xcb8.icu smf8.icu ctq8.icu zeb8.icu nxg8.icu tjr8.icu dpk8.icu ogk8.icu dvo8.icu zrn8.icu wlu8.icu hdo8.icu bxj8.icu obv8.icu cwe8.icu shr8.icu wkp8.icu wfv8.icu fxf8.icu nhl8.icu jsy8.icu nov8.icu lfx8.icu nrm8.icu qmc8.icu bwz8.icu rkw8.icu gyp8.icu hor8.icu voe8.icu lss8.icu ovw8.icu rfu8.icu sjr8.icu nrn8.icu oxd8.icu oqs8.icu nul8.icu bxy8.icu hgu8.icu mcu8.icu akg8.icu szc8.icu lcy8.icu nta8.icu rwf8.icu ofu8.icu wsa8.icu vvo8.icu cij8.icu wub8.icu xwg8.icu xfw8.icu amk8.icu sgz8.icu gpt8.icu gvr8.icu fqm8.icu qnh8.icu isw8.icu mdt8.icu fru8.icu pbb8.icu tte8.icu klo8.icu tcu8.icu imn8.icu xgr8.icu mpr8.icu pkg8.icu dut8.icu cvz8.icu xqi8.icu yhm8.icu jgl8.icu cbu8.icu dmm8.icu jqw8.icu xgi8.icu dag8.icu hrq8.icu hhf8.icu jhr8.icu kuc8.icu jra8.icu ptq8.icu doq8.icu grt8.icu dnx8.icu ygo8.icu hfu8.icu gle8.icu meu8.icu lsu8.icu ijm8.icu ifs8.icu huz8.icu fgf8.icu dee8.icu lwc8.icu cvc8.icu pyf8.icu guw8.icu mld8.icu hsr8.icu uqe8.icu yaf8.icu dnz8.icu kbr8.icu hiw8.icu yyp8.icu uxm8.icu xed8.icu uql8.icu vae8.icu xxv8.icu ohl8.icu bel8.icu frk8.icu efv8.icu plf8.icu pqm8.icu wxi8.icu azz8.icu sbf8.icu lwj8.icu fue8.icu tny8.icu tzg8.icu qcx8.icu ozn8.icu qnc8.icu rtz8.icu pqg8.icu fvm8.icu klj8.icu vkr8.icu pag8.icu kbu8.icu ged8.icu hll8.icu mdk8.icu ukp8.icu lln8.icu rjh8.icu ivx8.icu wyw8.icu jha8.icu vwd8.icu exc8.icu eux8.icu gba8.icu pdg8.icu xsd8.icu low8.icu ntr8.icu thn8.icu xar8.icu rdh8.icu kfi8.icu ggd8.icu vpk8.icu lfk8.icu raw8.icu ckb8.icu isg8.icu kxe8.icu cpl8.icu fxx8.icu qxb8.icu fyy8.icu pyv8.icu eib8.icu hcp8.icu hwc8.icu hrl8.icu rft8.icu msv8.icu gdw8.icu yut8.icu xpt8.icu vaa8.icu sph8.icu pxm8.icu jwf8.icu ntx8.icu ilk8.icu dqa8.icu ntq8.icu uok8.icu dmh8.icu vjt8.icu zah8.icu syp8.icu iwa8.icu quy8.icu wju8.icu inn8.icu kvx8.icu nql8.icu bgs8.icu nfu8.icu dwr8.icu hgj8.icu wtx8.icu rrj8.icu mlx8.icu zcz8.icu yls8.icu dce8.icu rwc8.icu nsg8.icu eez8.icu bcw8.icu acf8.icu oca8.icu nvf8.icu kib8.icu fgt8.icu omb8.icu rzb8.icu xhp8.icu imf8.icu fkn8.icu myg8.icu umb8.icu yxg8.icu hul8.icu bqy8.icu acw8.icu dfd8.icu nex8.icu pzv8.icu lyd8.icu deg8.icu lvh8.icu ntu8.icu yxa8.icu eam8.icu abq8.icu hud8.icu chz8.icu jvu8.icu mfz8.icu bzj8.icu kal8.icu fia8.icu uat8.icu wdd8.icu jhd8.icu ytv8.icu ecg8.icu dye8.icu xrj8.icu ivh8.icu ukd8.icu xho8.icu omq8.icu irt8.icu

Open Ports Detected

3306 443 80 8080 88

CVEs Detected

CVE-2013-1566 CVE-2013-1567 CVE-2013-1570 CVE-2013-2381 CVE-2013-2395 CVE-2013-3795 CVE-2013-3796 CVE-2013-3798 CVE-2013-3806 CVE-2013-3807 CVE-2013-3810 CVE-2013-3811 CVE-2013-5767 CVE-2013-5770 CVE-2013-5786 CVE-2013-5793 CVE-2013-5860 CVE-2013-5881 CVE-2013-5882 CVE-2013-5894 CVE-2014-0427 CVE-2014-0430 CVE-2014-0431 CVE-2014-0433 CVE-2014-2434 CVE-2014-2435 CVE-2014-2442 CVE-2014-2444 CVE-2014-2450 CVE-2014-2451 CVE-2014-2484 CVE-2014-4214 CVE-2014-4233 CVE-2014-4238 CVE-2014-4240 CVE-2015-0385 CVE-2015-0405 CVE-2015-0409 CVE-2015-0423 CVE-2015-0438 CVE-2015-0439 CVE-2015-0498 CVE-2015-0500 CVE-2015-0503 CVE-2015-0506 CVE-2015-0507 CVE-2015-0508 CVE-2015-0511 CVE-2015-2566 CVE-2015-2567 CVE-2015-2617 CVE-2015-2639 CVE-2015-2641 CVE-2015-2661 CVE-2015-3152 CVE-2015-4730 CVE-2015-4756 CVE-2015-4761 CVE-2015-4766 CVE-2015-4767 CVE-2015-4769 CVE-2015-4771 CVE-2015-4772 CVE-2015-4791 CVE-2015-4800 CVE-2015-4833 CVE-2015-4862 CVE-2015-4890 CVE-2015-4904 CVE-2015-4905 CVE-2015-4910 CVE-2016-0503 CVE-2016-0504 CVE-2016-0594 CVE-2016-0595 CVE-2016-0607 CVE-2016-0610 CVE-2016-0611 CVE-2016-0652 CVE-2016-0653 CVE-2016-0654 CVE-2016-0656 CVE-2016-0657 CVE-2016-0658 CVE-2016-0659 CVE-2016-0662 CVE-2016-0663 CVE-2016-0667 CVE-2016-3424 CVE-2016-3440 CVE-2016-3518 CVE-2016-3588 CVE-2016-5436 CVE-2016-5437 CVE-2016-5441 CVE-2016-5442 CVE-2016-5443 CVE-2016-5628 CVE-2016-5631 CVE-2016-5632 CVE-2016-5633 CVE-2016-5634 CVE-2016-5635 CVE-2016-8286 CVE-2016-8287 CVE-2016-8289 CVE-2016-8290 CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 CVE-2016-9843 CVE-2017-10165 CVE-2017-10167 CVE-2017-10268 CVE-2017-10284 CVE-2017-10296 CVE-2017-10311 CVE-2017-10313 CVE-2017-10378 CVE-2017-10379 CVE-2017-10384 CVE-2017-3251 CVE-2017-3256 CVE-2017-3305 CVE-2017-3308 CVE-2017-3309 CVE-2017-3319 CVE-2017-3320 CVE-2017-3329 CVE-2017-3452 CVE-2017-3453 CVE-2017-3454 CVE-2017-3455 CVE-2017-3456 CVE-2017-3457 CVE-2017-3458 CVE-2017-3459 CVE-2017-3460 CVE-2017-3461 CVE-2017-3462 CVE-2017-3463 CVE-2017-3464 CVE-2017-3465 CVE-2017-3467 CVE-2017-3468 CVE-2017-3529 CVE-2017-3600 CVE-2017-3635 CVE-2017-3636 CVE-2017-3637 CVE-2017-3638 CVE-2017-3639 CVE-2017-3640 CVE-2017-3641 CVE-2017-3642 CVE-2017-3643 CVE-2017-3644 CVE-2017-3645 CVE-2017-3646 CVE-2017-3648 CVE-2017-3650 CVE-2017-3651 CVE-2017-3652 CVE-2017-3653 CVE-2018-0735 CVE-2018-2562 CVE-2018-2622 CVE-2018-2640 CVE-2018-2665 CVE-2018-2668 CVE-2018-2755 CVE-2018-2761 CVE-2018-2767 CVE-2018-2771 CVE-2018-2773 CVE-2018-2781 CVE-2018-2813 CVE-2018-2817 CVE-2018-2818 CVE-2018-2819 CVE-2018-3058 CVE-2018-3061 CVE-2018-3063 CVE-2018-3066 CVE-2018-3070 CVE-2018-3071 CVE-2018-3081 CVE-2018-3133 CVE-2018-3174 CVE-2018-3282 CVE-2019-2731 CVE-2019-2741 CVE-2019-2755 CVE-2019-2757 CVE-2019-7317 CVE-2020-14760 CVE-2020-14814 CVE-2020-14830 CVE-2020-14837 CVE-2020-14839 CVE-2020-14845 CVE-2020-14846 CVE-2020-14852 CVE-2020-15358 CVE-2020-1967 CVE-2020-1971 CVE-2021-22570 CVE-2021-2356 CVE-2022-21417 CVE-2022-21444 CVE-2023-21977 CVE-2023-21980 CVE-2023-22007 CVE-2023-22015 CVE-2023-22026 CVE-2023-22028

Map

Whois Information

  • inetnum: 103.96.150.0 - 103.96.151.255
  • netname: WEST263GO-HK
  • descr: West263 International Limited
  • country: HK
  • admin-c: WILA3-AP
  • tech-c: DY1085-AP
  • abuse-c: AW1023-AP
  • status: ASSIGNED NON-PORTABLE
  • mnt-by: MAINT-WEST263GO-HK
  • mnt-irt: IRT-WEST263GO-HK
  • last-modified: 2022-08-09T00:23:25Z
  • irt: IRT-WEST263GO-HK
  • address: 12/F,, San Toi Building,, 137-139 Connaught Road Central, Hong Kong,, Hong Kong Hong Kong 999077
  • e-mail: westabuse.noc@gmail.com
  • abuse-mailbox: westabuse.noc@gmail.com
  • admin-c: WILA3-AP
  • tech-c: DY1085-AP
  • mnt-by: MAINT-WEST263GO-HK
  • last-modified: 2024-08-28T13:11:13Z
  • role: ABUSE WEST263GOHK
  • country: ZZ
  • address: 12/F,, San Toi Building,, 137-139 Connaught Road Central, Hong Kong,, Hong Kong Hong Kong 999077
  • phone: +000000000
  • e-mail: westabuse.noc@gmail.com
  • admin-c: WILA3-AP
  • tech-c: DY1085-AP
  • nic-hdl: AW1023-AP
  • abuse-mailbox: westabuse.noc@gmail.com
  • mnt-by: APNIC-ABUSE
  • last-modified: 2024-08-28T13:14:15Z
  • role: West263 International Limited administrator
  • address: 12/F,, San Toi Building,, 137-139 Connaught Road Central, Hong Kong,, Hong Kong Hong Kong 999077
  • country: HK
  • phone: +15708412741
  • fax-no: +15708412741
  • e-mail: abuse@hkdns.hk
  • admin-c: WILA3-AP
  • tech-c: DY1085-AP
  • nic-hdl: WILA3-AP
  • mnt-by: MAINT-WEST263GO-HK
  • last-modified: 2018-12-03T15:18:11Z
  • person: David Yanping
  • address: 12/F,, San Toi Building,, 137-139 Connaught Road Central, Hong Kong,, Hong Kong Hong Kong 999077
  • country: HK
  • phone: +852-35979075
  • e-mail: david.yanp@gmail.com
  • nic-hdl: DY1085-AP
  • mnt-by: MAINT-WEST263GO-HK
  • last-modified: 2019-04-29T06:51:07Z
  • route: 103.96.150.0/24
  • origin: AS139021
  • descr: West263 International Limited
  • mnt-by: MAINT-WEST263GO-HK
  • last-modified: 2022-08-09T00:35:37Z

Links to attack logs

vultrwarsaw-ssh-bruteforce-ip-list-2023-08-28 bruteforce-ip-list-2023-10-20 digitaloceanfrankfurt-ssh-bruteforce-ip-list-2023-10-31 vultrmadrid-ssh-bruteforce-ip-list-2023-07-21 ****** digitaloceantoronto-ssh-bruteforce-ip-list-2023-09-27 digitaloceanfrankfurt-ssh-bruteforce-ip-list-2023-10-17 bruteforce-ip-list-2023-08-06 vultrwarsaw-ssh-bruteforce-ip-list-2023-07-22 vultrwarsaw-ssh-bruteforce-ip-list-2023-08-25 digitaloceansingapore-ssh-bruteforce-ip-list-2023-08-24 dotoronto-ssh-bruteforce-ip-list-2023-06-13 ****** vultrparis-ssh-bruteforce-ip-list-2023-07-26 ******

Share on: