112.213.101.21 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 112.213.101.21 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 15/100

Host and Network Information

  • Country: Hong Kong
  • Network: AS64050 bgpnet global asn
  • Noticed: 1 times
  • Protcols Attacked: SSH
  • Passive DNS Results: workspacesky.com ae888gameslot.com airlite-she.com av-syst.com adinaboyd.com autocadesigns.com atvsofia4x4.com airecoremechanical.com abbeychurchmemphis.com thembapost.com theslideon.com teammortggeorleans.com danoffandco.com dgourmeetspain.com dukareesoma.com dianying72.com dianying13.com dianying49.com dianying54.com dianying20.com dianying47.com dianying46.com dianying37.com dianying67.com dianying65.com dianying27.com dianying64.com dianying87.com dianying63.com dianying17.com dianying59.com dianying86.com dianying16.com dianying53.com dianying76.com dianying06.com dianying04.com dianying74.com dianying73.com dianying02.com duckycrypto.com dianying98.com dianying43.com dianying97.com dianying42.com dianying34.com dianying96.com dianying61.com dianying41.com dianying32.com dianying85.com dianying60.com dianying40.com dianying31.com dianying30.com dianying21.com dianying95.com dianying57.com dianying29.com dianying39.com dianying19.com dianying83.com dianying28.com dianying82.com dianying94.com destinationweddingdivas.com dianying56.com dianying93.com dianying38.com dianying81.com dianying79.com dianying14.com dianying36.com dianying71.com dianying07.com dianying26.com dianying08.com dianying12.com dianying70.com dianying03.com dianying50.com dianying92.com dianying77.com dianying25.com dianying11.com dianying91.com dianying23.com dianying48.com dianying75.com dandbtrivia.com dianying62.com dianying09.com cointhoth.com createandfusion.com cywoeld.com cindyleaux.com casadoree.com calphoria.com vtsword.com vn88kqxsvietlott.com vn88kqxspy.com sofia-atv.com superiorsalvageautoparts.com steamcandle.com strengthandhumor.com sofia4x4.com seeyasummer.com sedationkingdds.com seebeyondstaffing.com selfneticshop.com holstaquation.com mainsalmonfishing.com masterofi.com hannahsophiagaia.com mrcommonwealth.com mil-ideas-app.com meiqi-wu.com lekkertoggodt.com lionengines.com martinjohnsonministries.com insighthomebase.com iticitisofts.com insidedesigninvestments.com yakoyocleaning.com yogaonthepond.com yumarce.com pleasurebeautybar.com pentabullfx.com papishouston.com b2epallets.com bshorb.com bvandoet.com babygirlincalifornia.com grumpymonkeymedia.com golivecambodia.com jccstamps.com joliemoxie.com jrnancelaw.com junglescats.com oddnygumaer.com onyxkingz.com engraveit2go.com emilyleininger.com ebonysecretscompany.com nationnewscast.com nourhanservices.com neongalaxia.com 78betttgxin.com 78betptxin.com 100questionscompany.com kodeinstitute.com kitchen-krafters.com revolutionaryelectric.com romancetravelstore.com remorum.com rareangelz.com festivaloftrees2021.com followforeigner.com fn88bbinlivecasino.com fn88kqxsdn.com farrarscountrykitchen.com faithnprayer.com hahasuk.top

Open Ports Detected

22 443 80

CVEs Detected

CVE-2016-20012 CVE-2017-15906 CVE-2018-15473 CVE-2018-15919 CVE-2018-20685 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408

Map

Whois Information

  • inetnum: 112.213.101.0 - 112.213.101.255
  • netname: MEGA-II
  • descr: MEGA-II IDC
  • country: HK
  • admin-c: DA179-AP
  • tech-c: DA179-AP
  • abuse-c: AS2098-AP
  • status: ALLOCATED NON-PORTABLE
  • mnt-by: MAINT-HK-SUN
  • mnt-irt: IRT-SUN-HK
  • last-modified: 2020-05-17T23:03:14Z
  • irt: IRT-SUN-HK
  • address: MEGA-II IDC
  • e-mail: INFO@MEGA-II.COM
  • abuse-mailbox: INFO@MEGA-II.COM
  • admin-c: DA179-AP
  • tech-c: DA179-AP
  • mnt-by: MAINT-HK-SNW
  • last-modified: 2023-11-14T16:16:03Z
  • role: ABUSE SUNHK
  • address: MEGA-II IDC
  • country: ZZ
  • phone: +000000000
  • e-mail: INFO@MEGA-II.COM
  • admin-c: DA179-AP
  • tech-c: DA179-AP
  • nic-hdl: AS2098-AP
  • abuse-mailbox: INFO@MEGA-II.COM
  • mnt-by: APNIC-ABUSE
  • last-modified: 2023-11-14T16:17:00Z
  • person: DNS Administrator
  • nic-hdl: DA179-AP
  • e-mail: INFO@MEGAIIHK.COM
  • address: SHA TIN
  • phone: +852-2135-9374
  • country: HK
  • mnt-by: MAINT-HK-SNW
  • abuse-mailbox: ABUSE@MEGAIIHK.COM
  • last-modified: 2020-05-17T14:55:38Z
  • route: 112.213.96.0/19
  • descr: MEGA-II IDC
  • origin: AS38197
  • mnt-by: MAINT-HK-SUN
  • last-modified: 2020-05-29T05:18:46Z

Links to attack logs

****** ****** ******

Share on: