118.250.0.127 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 118.250.0.127 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 5/100

Host and Network Information

  • Country: China
  • Network:
  • Noticed: 1 times
  • Protocols Attacked: mssql
  • Passive DNS Results: douyawenhua.direct.quickconnect.to

Malware Detected on Host

Count: 1 f098c39184ed179b9e1a85417e06e07104e9d8e4466a7219073b773c565c23c4

Open Ports Detected

10554 11007 11112 11210 11211 12105 12217 12290 12356 12414 12480 12483 135 13579 1433 16004 16070 16103 1801 18017 18051 18104 19 1925 1935 1954 1962 2003 2020 2082 2087 20900 21230 21258 2181 2250 23424 3014 3090 3143 3146 3333 3551 3842 4100 41800 4433 4434 4664 4786 4899 49153 5001 5253 5272 6001 6161 6664 7779 8005 8099 8126 84 8554 8800 8862 9009 9333

Map

Whois Information

  • inetnum: 118.248.0.0 - 118.255.255.255
  • netname: CHINANET-HN
  • descr: CHINANET Hunan province network
  • descr: China Telecom
  • descr: No.31,jingrong street
  • descr: Beijing 100032
  • country: CN
  • admin-c: CH93-AP
  • tech-c: CH636-AP
  • abuse-c: AC1573-AP
  • status: ALLOCATED PORTABLE
  • mnt-by: APNIC-HM
  • mnt-lower: MAINT-CHINANET-HN
  • mnt-routes: MAINT-CHINANET-HN
  • mnt-irt: IRT-CHINANET-CN
  • last-modified: 2021-06-15T08:05:28Z
  • irt: IRT-CHINANET-CN
  • address: No.31 ,jingrong street,beijing
  • address: 100032
  • e-mail: anti-spam@chinatelecom.cn
  • abuse-mailbox: anti-spam@chinatelecom.cn
  • admin-c: CH93-AP
  • tech-c: CH93-AP
  • mnt-by: MAINT-CHINANET
  • last-modified: 2025-09-04T00:59:42Z
  • role: ABUSE CHINANETCN
  • country: ZZ
  • address: No.31 ,jingrong street,beijing
  • address: 100032
  • phone: +000000000
  • e-mail: anti-spam@chinatelecom.cn
  • admin-c: CH93-AP
  • tech-c: CH93-AP
  • nic-hdl: AC1573-AP
  • abuse-mailbox: anti-spam@chinatelecom.cn
  • mnt-by: APNIC-ABUSE
  • last-modified: 2025-04-24T03:21:54Z
  • role: CHINANET HUNAN
  • address: No.1 TuanJie road,ChangSha,Hunan 410005
  • country: CN
  • phone: +86 731 4792092
  • fax-no: +86 731 4792007
  • e-mail: 13348615181@189.cn
  • admin-c: CH632-AP
  • tech-c: CS499-AP
  • nic-hdl: CH636-AP
  • mnt-by: MAINT-CHINANET-HN
  • last-modified: 2020-07-02T13:36:27Z
  • person: Chinanet Hostmaster
  • nic-hdl: CH93-AP
  • e-mail: anti-spam@chinatelecom.cn
  • address: No.31 ,jingrong street,beijing
  • address: 100032
  • phone: +86-10-58501724
  • fax-no: +86-10-58501724
  • country: CN
  • mnt-by: MAINT-CHINANET
  • last-modified: 2022-02-28T06:53:44Z

Links to attack logs

****** dobengaluru-mssql-bruteforce-ip-list-2023-07-11 ****** ******

Share on: