114.80.179.230 Threat Intelligence and Host Information

Dec 30, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 114.80.179.230 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 35/100

Host and Network Information

  • Mitre ATT&CK IDs: T1027 - Obfuscated Files or Information, T1547 - Boot or Logon Autostart Execution

  • Tags: 1000, 1688, activexobject, alipay, android, aplusscore, apoorv saxena, area, arial, array, body, button, cfunction, chrome, copyright, createclass, date, delete, detect ie, e6e7eb, error, f2f3f7, f7f8fa, false, ff6a00, function, gmt contenttype, head, helvetica, helvetica neue, html5, http response, json, jupdate, kraken, lazada, license, math, mozilla, mtopwvplugin, null, nullj, nundefined, object, opacity0, opacity100, options, patch, post, promise, regexp, s1e4, span, substring, symbol, tahoma, this, trace, typeerror, typeof, typeof define, typeof document, typeof e, typeof lib, typeof n, typeof require, typeof self, typeof symbol, typeof t, unknown, vary, void, webpackrequire, webview, xdomainrequest, xfunction, xmlhttprequest, xuexi, yunos, zfunction, 阿里巴巴，1688，微商，微店，货源，女装批发，男装，b2b，批发，采购, 阿里巴巴，采购批发，1688，行业门户，网上贸易，b2b，电子商务，内贸，外贸，批发，行业资讯，网上贸易，网上交易，交易市场，在

  • JARM: 29d29d00029d29d21c42d42d000000307ee0eb468e9fdb5cfcd698a80a67ef

  • View other sources: Spamhaus VirusTotal

Malware Detected on Host

Count: 9 20f227235c5d30af4ebce0fed84adf31ccbf0270e5bf4f5effd20007faec7b91 b957d03f0ebbe4e79b4e4e7214ccbc84f4454a28b88ececd44cb1bf3da0fc546 2cf82bd1c7b005abb191b0a8950123e6ec1243bc004f67611200893284970f50 0bf527393fa793c5757e7ea2af9c92c2839b85be9efb4b2a2eb72403ce5cfe1f ce6c5e719ea8206bbb2a8cb9917020c18990556807fd8cc2f6f3eedea1ac582c 7c7cf90fcde14954759bea503fb2239d395d4fc5434b4f3ad0a248f972f10275 53580dbf677b57a87a0850e0901a1efd6b64ef712938454462fad12ab2568ed3 b9d73d0e658054b9ba3924192b1b394021d06c46eb0e5cd90e6682c09a18bfbd 72a569398ccf841d9304cda577e593fc0cb8b0919f64321c5283c17f94ed8d28

Open Ports Detected

443 80

Map

Whois Information

  • inetnum: 114.80.0.0 - 114.95.255.255
  • netname: CHINANET-SH
  • descr: CHINANET SHANGHAI PROVINCE NETWORK
  • descr: China Telecom
  • descr: No.31,jingrong street
  • descr: Beijing 100032
  • country: CN
  • admin-c: WWQ4-AP
  • tech-c: WWQ4-AP
  • abuse-c: AC1573-AP
  • status: ALLOCATED PORTABLE
  • mnt-by: APNIC-HM
  • mnt-lower: MAINT-CHINANET
  • mnt-lower: MAINT-CHINANET-SH
  • mnt-irt: IRT-CHINANET-CN
  • last-modified: 2021-06-15T08:05:34Z
  • irt: IRT-CHINANET-CN
  • address: No.31 ,jingrong street,beijing
  • address: 100032
  • e-mail: anti-spam@chinatelecom.cn
  • abuse-mailbox: anti-spam@chinatelecom.cn
  • admin-c: CH93-AP
  • tech-c: CH93-AP
  • mnt-by: MAINT-CHINANET
  • last-modified: 2023-10-08T08:55:58Z
  • role: ABUSE CHINANETCN
  • address: No.31 ,jingrong street,beijing
  • address: 100032
  • country: ZZ
  • phone: +000000000
  • e-mail: anti-spam@chinatelecom.cn
  • admin-c: CH93-AP
  • tech-c: CH93-AP
  • nic-hdl: AC1573-AP
  • abuse-mailbox: anti-spam@chinatelecom.cn
  • mnt-by: APNIC-ABUSE
  • last-modified: 2023-10-08T08:56:49Z
  • person: Weng Wen Qian
  • address: Room 2405,357 Songlin Road,Shanghai 200122
  • country: CN
  • phone: +86-21-68405784
  • fax-no: +86-21-50623458
  • e-mail: shizhiming.sh@chinatelecom.cn
  • nic-hdl: WWQ4-AP
  • mnt-by: MAINT-CHINANET-SH
  • last-modified: 2023-02-07T08:25:17Z

Links to attack logs

****** ****** ******

Share on: