106.54.112.173 Threat Intelligence and Host Information

Share on:
May 10, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Known Malicious Host 🔴 72/100

Host and Network Information

  • Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110 - Brute Force, T1110.004 - Credential Stuffing
  • Tags: Brute-Force, Bruteforce, Nextray, SSH, Scanner, Telnet, Webattack, attack, brute force, brute-force, bruteforce, cowrie, cyber security, ioc, last update, login, malicious, phishing, scanner, scanners, scanning, smtp, ssh, tcp, unique count, vultr, windows server
  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: blocklist_de, blocklist_de_ssh, blocklist_de_strongips, haley_ssh

  • Country: China
  • Network: AS45090 shenzhen tencent computer systems company limited
  • Noticed: 50 times
  • Protcols Attacked: ssh
  • Countries Attacked: Australia, Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Spain, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Map

Whois Information

  • inetnum: 106.4.0.0 - 106.7.255.255
  • netname: CHINANET-JX
  • descr: CHINANET JIANGXI PROVINCE NETWORK
  • descr: China Telecom
  • descr: No.31,jingrong street
  • descr: Beijing 100032
  • country: CN
  • admin-c: XY1-AP
  • tech-c: WZ1-CN
  • abuse-c: AC1573-AP
  • status: ALLOCATED PORTABLE
  • mnt-by: APNIC-HM
  • mnt-lower: MAINT-IP-WWF
  • mnt-routes: MAINT-IP-WWF
  • mnt-irt: IRT-CHINANET-CN
  • last-modified: 2021-06-15T08:06:23Z
  • irt: IRT-CHINANET-CN
  • address: No.31 ,jingrong street,beijing
  • address: 100032
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: CH93-AP
  • tech-c: CH93-AP
  • mnt-by: MAINT-CHINANET
  • last-modified: 2022-02-14T07:13:12Z
  • role: ABUSE CHINANETCN
  • address: No.31 ,jingrong street,beijing
  • address: 100032
  • country: ZZ
  • phone: +000000000
  • e-mail: [email protected]
  • admin-c: CH93-AP
  • tech-c: CH93-AP
  • nic-hdl: AC1573-AP
  • abuse-mailbox: [email protected]
  • mnt-by: APNIC-ABUSE
  • last-modified: 2022-02-14T07:14:09Z
  • person: Wanshu Zhou
  • address: Data Communication Bureau MPT
  • address: 40 Xueyuan Rd.
  • address: Beijing China 100083
  • country: CN
  • phone: +86-10-205-3992
  • fax-no: +86-10-205-3994
  • e-mail: [email protected]
  • nic-hdl: WZ1-CN
  • notify: [email protected]
  • notify: [email protected]
  • mnt-by: MAINT-NULL
  • last-modified: 2011-12-22T05:14:24Z
  • person: Xu Yongzhong
  • address: Data Communication Bireau
  • address: Ministry of Posts and Telecommunications
  • address: A12 Xin-jie-kou-wai Street
  • address: Beijing 100088
  • country: CN

    Likely Malicious Host 🟠 70/100

  • phone: +86-10-62053991
  • fax-no: +86-10-62053995

    Host and Network Information

  • e-mail: [email protected]
  • nic-hdl: XY1-AP
  • Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110 - Brute Force, T1110.004 - Credential Stuffing
  • mnt-by: MAINT-IP-WWF
  • last-modified: 2021-01-05T00:59:14Z
  • Tags: Brute-Force, Bruteforce, Nextray, SSH, Scanner, Telnet, Webattack, attack, brute force, brute-force, bruteforce, cowrie, cyber security, ioc, last update, login, malicious, phishing, scanner, scanners, scanning, smtp, ssh, tcp, unique count, vultr, windows server
  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: blocklist_de, blocklist_de_ssh, blocklist_de_strongips, haley_ssh

  • Country: China
  • Network: AS45090 shenzhen tencent computer systems company limited
  • Noticed: 50 times
  • Protcols Attacked: SSH
  • Countries Attacked: Australia, Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Spain, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Map

Whois Information

  • inetnum: 106.4.0.0 - 106.7.255.255
  • netname: CHINANET-JX
  • descr: CHINANET JIANGXI PROVINCE NETWORK
  • descr: China Telecom
  • descr: No.31,jingrong street
  • descr: Beijing 100032
  • country: CN
  • admin-c: XY1-AP
  • tech-c: WZ1-CN
  • abuse-c: AC1573-AP
  • status: ALLOCATED PORTABLE
  • mnt-by: APNIC-HM
  • mnt-lower: MAINT-IP-WWF
  • mnt-routes: MAINT-IP-WWF
  • mnt-irt: IRT-CHINANET-CN
  • last-modified: 2021-06-15T08:06:23Z
  • irt: IRT-CHINANET-CN
  • address: No.31 ,jingrong street,beijing
  • address: 100032
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: CH93-AP
  • tech-c: CH93-AP
  • mnt-by: MAINT-CHINANET
  • last-modified: 2022-02-14T07:13:12Z
  • role: ABUSE CHINANETCN
  • address: No.31 ,jingrong street,beijing
  • address: 100032
  • country: ZZ
  • phone: +000000000
  • e-mail: [email protected]
  • admin-c: CH93-AP
  • tech-c: CH93-AP
  • nic-hdl: AC1573-AP
  • abuse-mailbox: [email protected]
  • mnt-by: APNIC-ABUSE
  • last-modified: 2022-02-14T07:14:09Z
  • person: Wanshu Zhou
  • address: Data Communication Bureau MPT
  • address: 40 Xueyuan Rd.
  • address: Beijing China 100083
  • country: CN
  • phone: +86-10-205-3992
  • fax-no: +86-10-205-3994
  • e-mail: [email protected]
  • nic-hdl: WZ1-CN
  • notify: [email protected]
  • notify: [email protected]
  • mnt-by: MAINT-NULL
  • last-modified: 2011-12-22T05:14:24Z
  • person: Xu Yongzhong
  • address: Data Communication Bireau
  • address: Ministry of Posts and Telecommunications
  • address: A12 Xin-jie-kou-wai Street
  • address: Beijing 100088
  • country: CN
  • phone: +86-10-62053991
  • fax-no: +86-10-62053995
  • e-mail: [email protected]
  • nic-hdl: XY1-AP
  • mnt-by: MAINT-IP-WWF
  • last-modified: 2021-01-05T00:59:14Z