120.76.107.40 Threat Intelligence and Host Information

Mar 17, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 120.76.107.40 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 15/100

Host and Network Information

  • Country: China
  • Network: AS37963 hangzhou alibaba advertising co. ltd.
  • Noticed: 1 times
  • Protocols Attacked: SSH
  • Passive DNS Results: scbzyjng2015.com isshiyi.xyz wylan.online gdwuniu.com jwdmould.com liuly3.xyz www.es360.cn edgm.top jackychang.online chenmugm.com place.dorpu.cn 8878yx.com fiftyad.com www.lingji168.cn dgjtn.com qvbsz4.cn xn–kkru26ackcev5bmhw.com chaoyuankeji.com.cn wddaudio.com kucha.com chenwji.com dns17.hichina.com g.llll.vc dns19.hichina.com dns21.hichina.com dns23.hichina.com

Open Ports Detected

10000 10001 10081 10134 102 1025 10250 104 10443 1050 10554 10909 10911 1099 11 110 11000 11112 11210 11211 113 11300 11371 1153 1177 12000 121 1234 12345 13 1311 1337 135 13579 14147 14265 143 1433 14344 15 1515 1588 1599 1660 16992 16993 17 1723 175 1800 1801 18081 18245 19 19071 1911 1926 195 1951 2000 20000 2002 2008 20256 2053 2054 20547 2056 2062 2067 2080 2081 2082 2083 2086 2087 21025 2121 21379 2181 221 2211 2222 2259 23023 2323 23424 2345 2375 2376 2404 2455 25 25001 25105 2556 25565 2557 2570 2628 264 27015 27017 2761 2762 28015 30002 30003 3001 3048 3050 3053 3066 3069 3071 3081 3083 3091 3100 3101 3105 3108 311 3110 3120 31337 3211 3268 3269 3299 3301 3306 33060 3310 3388 3389 3402 3404 35000 3503 3523 3549 3550 3551 3552 3555 3559 35771 37 37777 3780 3790 389 3954 4000 4001 4010 4022 4040 4063 4064 4157 41800 4242 427 4282 43 4321 4369 44158 443 4430 4433 444 4443 44818 449 4500 4506 4545 4646 465 4664 47463 4782 4786 4899 49 491 49152 4949 50000 5001 5004 5005 50050 5006 5007 50070 5009 5010 502 5025 503 5070 51106 51235 5150 5201 5222 5269 5280 53 5435 5446 548 5494 55000 554 55442 555 55553 55554 5590 5594 5596 5599 5601 5672 5853 5858 5900 5907 593 5984 5986 6000 6001 6002 60030 6007 6010 60129 6080 6161 61613 61616 62078 6308 631 636 6379 6443 6550 6560 6561 6622 6633 6650 6653 666 6666 6667 6668 6697 6748 675 70 7001 7005 7070 7080 7171 7218 7415 7434 7443 7500 7547 7548 7634 7657 771 772 7778 789 79 7979 80 800 8001 8006 8009 8011 8020 8030 8031 8038 8043 8046 8047 8056 808 8083 8084 8085 8087 8088 8089 8090 8097 8098 8099 8103 8106 8112 8123 8126 8139 8181 82 8200 8248 8291 8333 8334 8383 84 8404 8406 8411 8416 8417 8428 8443 8446 8500 8513 8545 8554 8575 8621 8649 87 8700 8728 873 8766 8787 8804 8812 8815 8817 8820 8825 8826 8832 8834 8841 8858 8862 8865 8868 8874 8875 8880 8889 8890 8891 9000 9001 9002 9010 9012 9014 9020 9024 9027 9028 9033 9042 9047 9049 9051 9091 9092 9093 9095 9099 9100 9103 9111 9151 9160 9191 9200 9212 9214 9216 9221 9222 9295 9299 9301 9445 95 9530 9600 97 9743 9765 98 9800 9869 9876 992 993 9943 995 9955 9998 9999

CVEs Detected

CVE-2007-2768 CVE-2008-3844 CVE-2010-4478 CVE-2010-4755 CVE-2010-5107 CVE-2011-4327 CVE-2011-5000 CVE-2012-0814 CVE-2014-1692 CVE-2014-2532 CVE-2014-2653 CVE-2015-5352 CVE-2015-5600 CVE-2015-6563 CVE-2015-6564 CVE-2016-0777 CVE-2016-10009 CVE-2016-10010 CVE-2016-10011 CVE-2016-10012 CVE-2016-10708 CVE-2016-1908 CVE-2016-20012 CVE-2017-15906 CVE-2018-15473 CVE-2018-15919 CVE-2018-20685 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408 CVE-2023-48795 CVE-2023-51384 CVE-2023-51385 CVE-2023-51767

Map

Whois Information

  • inetnum: 120.76.0.0 - 120.79.255.255
  • netname: ALISOFT
  • descr: Aliyun Computing Co., LTD
  • descr: 5F, Builing D, the West Lake International Plaza of S&T
  • descr: No.391 Wen’er Road, Hangzhou, Zhejiang, China, 310099
  • country: CN
  • admin-c: ZM1015-AP
  • tech-c: ZM877-AP
  • tech-c: ZM876-AP
  • tech-c: ZM875-AP
  • abuse-c: AC1601-AP
  • status: ALLOCATED PORTABLE
  • mnt-by: MAINT-CNNIC-AP
  • mnt-irt: IRT-ALISOFT-CN
  • last-modified: 2023-11-28T00:57:00Z
  • irt: IRT-ALISOFT-CN
  • address: No.391 Wen’er Road, Hangzhou, Zhejiang, China, 310099
  • e-mail: didong.jc@alibaba-inc.com
  • abuse-mailbox: didong.jc@alibaba-inc.com
  • admin-c: ZM877-AP
  • tech-c: ZM877-AP
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2021-09-05T23:38:36Z
  • role: ABUSE CNNICCN
  • address: Beijing, China
  • country: ZZ
  • phone: +000000000
  • e-mail: ipas@cnnic.cn
  • admin-c: IP50-AP
  • tech-c: IP50-AP
  • nic-hdl: AC1601-AP
  • abuse-mailbox: ipas@cnnic.cn
  • mnt-by: APNIC-ABUSE
  • last-modified: 2020-05-14T11:19:01Z
  • person: Li Jia
  • address: NO.969 West Wen Yi Road, Yu Hang District, Hangzhou
  • country: CN
  • phone: +86-0571-85022088
  • e-mail: jiali.jl@alibaba-inc.com
  • nic-hdl: ZM1015-AP
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2014-07-30T02:02:01Z
  • person: Guoxin Gao
  • address: 5F, Builing D, the West Lake International Plaza of S&T
  • address: No.391 Wen’er Road, Hangzhou City
  • address: Zhejiang, China, 310099
  • country: CN
  • phone: +86-0571-85022600
  • fax-no: +86-0571-85022600
  • e-mail: anti-spam@list.alibaba-inc.com
  • nic-hdl: ZM875-AP
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2014-07-30T01:56:01Z
  • person: security trouble
  • e-mail: yitian.gaoyt@alibaba-inc.com
  • address: Hangzhou, Zhejiang, China
  • phone: +86-0571-85022600
  • country: CN
  • mnt-by: MAINT-CNNIC-AP
  • nic-hdl: ZM876-AP
  • last-modified: 2021-04-13T23:22:33Z
  • person: Guowei Pan
  • address: 5F, Builing D, the West Lake International Plaza of S&T
  • address: No.391 Wen’er Road, Hangzhou City
  • address: Zhejiang, China, 310099
  • country: CN
  • phone: +86-0571-85022088-30763
  • fax-no: +86-0571-85022600
  • e-mail: guowei.pangw@alibaba-inc.com
  • nic-hdl: ZM877-AP
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2013-07-09T01:34:02Z
  • route: 120.76.0.0/14
  • descr: Hangzhou Alibaba Advertising Co.,Ltd.
  • country: CN
  • origin: AS37963
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2019-08-06T02:28:03Z
  • route: 120.76.0.0/14
  • descr: Alibaba (US) Technology Co., Ltd.
  • country: CN
  • origin: AS45102
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2019-08-06T02:28:03Z

Links to attack logs

****** ****** ******

Share on: