119.23.73.122 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 119.23.73.122 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 45/100

Host and Network Information

  • Tags: cyber security, ioc, malicious, Nextray, phishing

  • View other sources: Spamhaus VirusTotal

  • Country: China
  • Network:
  • Noticed: 29 times
  • Protocols Attacked: redis
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: www.qihua.icu qihua.icu

Open Ports Detected

10000 10001 10005 10009 10014 10016 10018 10021 10022 10042 10046 10047 10083 10134 102 10205 1023 10240 10250 104 10444 1063 1080 10909 1099 11 111 11112 11182 1119 113 11300 11401 11481 1153 11596 11602 1181 119 1190 1200 12000 12111 12112 12120 12121 12123 12128 12134 12139 12142 12143 12144 12154 12164 12167 12179 12183 12186 12188 12197 122 12203 12207 12211 12217 12242 12247 12258 12259 12260 12265 12269 12288 12300 12304 12319 12325 12328 12331 12341 12345 12372 12373 12397 12399 12408 12412 12422 12423 12441 12452 12454 12456 12471 12476 12487 12498 12514 12518 12527 12537 12552 12575 12581 12589 12590 13 13380 13579 1370 1387 14104 1414 14147 14184 14265 143 1433 14344 1443 1460 14825 14897 15000 15018 1515 1521 15673 1599 16002 16013 16021 16025 16028 16043 16049 16060 16066 16075 16090 16096 16667 16993 17 1723 175 17775 17779 179 1800 18000 18008 1801 18021 18034 18081 18096 18099 18181 18182 1883 189 19 19000 19016 1911 192 19222 195 1962 1989 199 2000 20000 2008 20100 20107 20121 2022 20256 2048 2049 2056 20600 2068 2080 2081 2087 20880 20900 21 21100 2121 21241 21243 21252 21256 21271 21274 21279 21290 21295 21318 2133 21379 2181 2201 221 22107 2222 22222 22556 2266 22705 2271 23 23084 2323 2376 24 2404 25 25001 25082 2551 25565 2563 2567 2569 2602 2628 264 27015 28015 2806 30002 30003 3001 30011 3008 30110 3012 30120 3015 30468 3047 3048 3050 3054 3058 3072 3079 3081 3082 31017 3105 3106 3109 31210 3126 31380 31443 3146 3158 3160 3163 3167 3175 3179 32001 32080 3260 3268 32764 3306 33060 3310 3349 3352 3388 3389 3405 343 35000 3531 3551 3562 3568 3572 3690 37 37777 3780 3790 38080 389 3950 4000 4021 4063 4064 4103 4150 4157 41800 4200 4242 4250 427 4282 43 4321 440 44305 4433 44336 4434 4435 4436 44365 444 4440 4443 44510 44520 4457 447 44818 4500 4505 46000 462 4620 465 4664 46862 47080 4786 47989 48001 48002 48020 4840 4899 49694 50000 50004 5001 5002 5007 5009 5010 50100 50122 502 5025 50257 50777 5083 5093 51200 513 5130 5140 51434 5160 5201 5222 5223 5225 5229 5232 5242 5243 5249 5253 5262 5269 5272 5276 53 53200 53400 53805 53806 54138 5432 5435 55000 55080 5542 55443 55470 55553 55554 5556 5558 5596 5603 5607 5608 5613 5640 5672 57788 5858 58603 5905 5910 5938 5984 5986 5991 5992 6000 6001 6002 60129 6021 61613 61616 61617 62078 63210 63256 63260 63443 636 63676 6379 64477 6505 65432 6550 6588 6653 666 6662 6666 6668 6686 6697 6755 70 7001 7002 7018 7071 7087 7088 7171 7218 7348 7373 7434 7443 7548 7601 7700 7780 782 7878 789 79 7900 7999 8009 8013 8014 8019 8028 8031 8040 8042 805 8050 8055 8056 8065 8083 8087 8089 8093 8097 8099 8101 8107 8111 8114 8126 8132 8139 8140 8143 8151 8173 8181 8187 8196 8200 8237 8291 8318 8322 8333 8382 8402 8413 8416 8426 8428 8441 8452 8455 8456 8493 8494 8500 8513 8523 8531 8540 8545 8551 8560 8561 8562 8581 8589 8594 8597 8605 8623 8649 8663 8688 8728 873 8771 8779 8791 8801 8802 8804 8806 8819 8826 8836 8849 885 8851 8872 8877 8882 8885 8889 8890 8902 8913 8969 8999 9000 9001 9002 9007 9035 9040 9041 9042 9043 9045 9051 9060 9064 9086 9092 9095 9097 9100 9134 9148 9155 9163 9172 9178 9192 9199 9200 9205 9217 9218 9250 9253 9299 9306 9313 9333 9353 9387 9389 9400 9443 9446 947 9501 9600 9633 97 9704 9761 9876 9898 990 9901 993 9939 994 9943 995 9955 9988 9992 9994 9998 9999

CVEs Detected

CVE-2007-2768 CVE-2008-3844 CVE-2010-4478 CVE-2010-4755 CVE-2010-5107 CVE-2011-4327 CVE-2011-5000 CVE-2012-0814 CVE-2014-1692 CVE-2014-2532 CVE-2014-2653 CVE-2015-5352 CVE-2015-5600 CVE-2015-6563 CVE-2015-6564 CVE-2016-0777 CVE-2016-10009 CVE-2016-10010 CVE-2016-10011 CVE-2016-10012 CVE-2016-10708 CVE-2016-1908 CVE-2016-20012 CVE-2016-3115 CVE-2017-15906 CVE-2018-15473 CVE-2018-15919 CVE-2018-20685 CVE-2019-16905 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408 CVE-2023-48795 CVE-2023-51385 CVE-2023-51767 CVE-2025-26465 CVE-2025-32728

Map

Whois Information

  • inetnum: 119.23.0.0 - 119.23.255.255
  • netname: ALISOFT
  • descr: Aliyun Computing Co., LTD
  • descr: 5F, Builing D, the West Lake International Plaza of S&T
  • descr: No.391 Wen’er Road, Hangzhou, Zhejiang, China, 310099
  • country: CN
  • admin-c: ZM1015-AP
  • tech-c: ZM877-AP
  • tech-c: ZM876-AP
  • tech-c: ZM875-AP
  • abuse-c: AC1601-AP
  • status: ALLOCATED PORTABLE
  • mnt-by: MAINT-CNNIC-AP
  • mnt-irt: IRT-ALISOFT-CN
  • last-modified: 2023-11-28T00:56:58Z
  • irt: IRT-ALISOFT-CN
  • address: No.391 Wen’er Road, Hangzhou, Zhejiang, China, 310099
  • e-mail: didong.jc@alibaba-inc.com
  • abuse-mailbox: didong.jc@alibaba-inc.com
  • admin-c: ZM877-AP
  • tech-c: ZM877-AP
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2021-09-05T23:38:36Z
  • role: ABUSE CNNICCN
  • country: ZZ
  • address: Beijing, China
  • phone: +000000000
  • e-mail: ipas@cnnic.cn
  • admin-c: IP50-AP
  • tech-c: IP50-AP
  • nic-hdl: AC1601-AP
  • abuse-mailbox: ipas@cnnic.cn
  • mnt-by: APNIC-ABUSE
  • last-modified: 2025-09-19T17:20:32Z
  • person: Li Jia
  • address: NO.969 West Wen Yi Road, Yu Hang District, Hangzhou
  • country: CN
  • phone: +86-0571-85022088
  • e-mail: jiali.jl@alibaba-inc.com
  • nic-hdl: ZM1015-AP
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2025-07-01T07:12:42Z
  • person: Guoxin Gao
  • address: 5F, Builing D, the West Lake International Plaza of S&T
  • address: No.391 Wen’er Road, Hangzhou City
  • address: Zhejiang, China, 310099
  • country: CN
  • phone: +86-0571-85022600
  • fax-no: +86-0571-85022600
  • e-mail: anti-spam@list.alibaba-inc.com
  • nic-hdl: ZM875-AP
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2014-07-30T01:56:01Z
  • person: security trouble
  • e-mail: abuse@alibaba-inc.com
  • address: Hangzhou, Zhejiang, China
  • phone: +86-0571-85022600
  • country: CN
  • mnt-by: MAINT-CNNIC-AP
  • nic-hdl: ZM876-AP
  • last-modified: 2025-07-01T07:06:11Z
  • person: Guowei Pan
  • address: 5F, Builing D, the West Lake International Plaza of S&T
  • address: No.391 Wen’er Road, Hangzhou City
  • address: Zhejiang, China, 310099
  • country: CN
  • phone: +86-0571-85022088-30763
  • fax-no: +86-0571-85022600
  • e-mail: abuse@alibaba-inc.com
  • nic-hdl: ZM877-AP
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2025-07-01T07:05:46Z
  • route: 119.23.0.0/16
  • descr: Hangzhou Alibaba Advertising Co.,Ltd.
  • country: CN
  • origin: AS37963
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2019-08-07T23:28:06Z
  • route: 119.23.0.0/16
  • descr: Alibaba (US) Technology Co., Ltd.
  • country: CN
  • origin: AS45102
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2019-08-07T23:28:03Z

Links to attack logs

dotoronto-redis-bruteforce-ip-list-2021-04-26 ****** ****** ******

Share on: