111.229.159.70 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 111.229.159.70 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 5/100

Host and Network Information

  • Country: China
  • Network:
  • Noticed: 1 times
  • Protocols Attacked: SSH
  • Passive DNS Results: typecho.gxdong.top move.gxdong.top lx.gxdong.top psq.gxdong.top zxz.gxdong.top yun.gxdong.top mz.gxdong.top discuz.gxdong.top sr.gxdong.top app.gxdong.top xs.gxdong.top xsht.gxdong.top ys.gxdong.top yingshi.glyjxx.top jz.gxdong.top pingche.gxdong.top oa.gxdong.top xiaoshuo.gxdong.top baoxiu.gxdong.top tc.gxdong.top yanglong.gxdong.top knowledge.gxdong.top dy.gxdong.top ss6.gxdong.top jiao.gxdong.top jx.gxdong.top jiaoxue.gxdong.top jsnl.gxdong.top www.jsnl.gxdong.top mj.gxdong.top junchuang.gxdong.top ss2.gxdong.top jsafc.gxdong.top p2.gxdong.top p1.gxdong.top kubo.gxdong.top ss1.gxdong.top aa1.gxdong.top cms.gxdong.top aa4.gxdong.top aa3.gxdong.top jp.gxdong.top m1.gxdong.top ty.gxdong.top pc.gxdong.top qa1.gxdong.top xbd.gxdong.top qq1.gxdong.top

Malware Detected on Host

Count: 1 49a653cab1ecce04aca81e22f633c47ef88c033fe2080a0303d3300af8a08d9d

Map

Whois Information

  • inetnum: 111.229.0.0 - 111.229.255.255
  • netname: TencentCloud
  • descr: Tencent cloud computing (Beijing) Co., Ltd.
  • descr: Floor 6, Yinke Building,38 Haidian St,
  • descr: Haidian District Beijing
  • country: CN
  • admin-c: JT1125-AP
  • tech-c: JX1747-AP
  • abuse-c: AC1601-AP
  • status: ALLOCATED PORTABLE
  • mnt-by: MAINT-CNNIC-AP
  • mnt-irt: IRT-TENCENTCLOUD-CN
  • mnt-lower: MAINT-CNNIC-AP
  • mnt-routes: MAINT-CNNIC-AP
  • last-modified: 2023-11-28T00:56:52Z
  • irt: IRT-TencentCloud-CN
  • address: 9F, FIYTA Building, Gaoxinnanyi Road, Southern
  • address: District of Hi-tech Park, Shenzhen
  • e-mail: tencent_noc@tencent.com
  • abuse-mailbox: tencent_noc@tencent.com
  • admin-c: JT1125-AP
  • tech-c: JX1747-AP
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2025-03-07T07:43:08Z
  • role: ABUSE CNNICCN
  • country: ZZ
  • address: Beijing, China
  • phone: +000000000
  • e-mail: ipas@cnnic.cn
  • admin-c: IP50-AP
  • tech-c: IP50-AP
  • nic-hdl: AC1601-AP
  • abuse-mailbox: ipas@cnnic.cn
  • mnt-by: APNIC-ABUSE
  • last-modified: 2024-07-30T11:55:46Z
  • person: James Tian
  • address: 9F, FIYTA Building, Gaoxinnanyi Road,Southern
  • address: District of Hi-tech Park, Shenzhen
  • country: CN
  • phone: +86-755-86013388-84952
  • e-mail: johnsonqu@tencent.com
  • nic-hdl: JT1125-AP
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2024-03-19T08:21:31Z
  • person: Jimmy Xiao
  • address: 9F, FIYTA Building, Gaoxinnanyi Road,Southern
  • address: District of Hi-tech Park, Shenzhen
  • country: CN
  • phone: +86-755-86013388-80224
  • e-mail: klayliang@tencent.com
  • nic-hdl: JX1747-AP
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2021-09-17T00:38:09Z
  • route: 111.229.0.0/16
  • descr: Shenzhen Tencent Computer Systems Company Limited
  • country: CN
  • origin: AS45090
  • notify: jimmyxiao@tencent.com
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2019-04-18T03:50:02Z

Links to attack logs

****** ****** ******

Share on: