123.58.38.11 Threat Intelligence and Host Information

Share on:
Feb 22, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Host and Network Information

  • Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110 - Brute Force, T1110.004 - Credential Stuffing
  • Tags: Bruteforce, SSH, Scanner, Telnet, Webattack, attack, brute force, brute-force, bruteforce, cowrie, fail2ban, la, lafusioncenter, last update, login, louisiana, scanner, scanning, smtp, ssh, tcp, unique count, windows server
  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: blocklist_de, blocklist_de_ssh, haley_ssh

  • Country: China
  • Network: AS17623 china unicom
  • Noticed: 50 times
  • Protcols Attacked: SSH
  • Countries Attacked: Australia, Germany, United States of America

Open Ports Detected

22 27017 5672 6379 80

CVEs Detected

CVE-2016-20012 CVE-2017-15906 CVE-2018-0734 CVE-2018-0735 CVE-2018-15473 CVE-2018-15919 CVE-2018-20685 CVE-2019-1543 CVE-2019-1547 CVE-2019-1549 CVE-2019-1551 CVE-2019-1552 CVE-2019-1563 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2020-14145 CVE-2020-15778 CVE-2020-1971 CVE-2021-23840 CVE-2021-23841 CVE-2021-3449 CVE-2021-36368 CVE-2021-3711 CVE-2021-3712 CVE-2021-4160 CVE-2021-41617 CVE-2022-0778 CVE-2022-1292 CVE-2022-2068 CVE-2022-2097 CVE-2022-4450 CVE-2023-0215 CVE-2023-0286

Map

Whois Information

  • inetnum: 123.58.32.0 - 123.58.47.255
  • netname: HuMengIDC
  • descr: Room 405,Unit B2,Kexing Science Park,High Tech Road, NanShan District,Shenzhen,Guangdong,P.R.China
  • country: CN
  • admin-c: JH3355-AP
  • tech-c: JH3355-AP
  • abuse-c: AC1910-AP
  • status: ALLOCATED NON-PORTABLE
  • mnt-by: MAINT-AP-CNISP
  • mnt-irt: IRT-CNISP-CN
  • last-modified: 2021-02-17T13:08:40Z
  • irt: IRT-CNISP-CN
  • address: Beijing CNISP Technology Co., Ltd
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: CM2275-AP
  • tech-c: CM2275-AP
  • mnt-by: MAINT-AP-CNISP
  • last-modified: 2022-10-18T03:54:53Z
  • role: ABUSE CNISPCN
  • address: Beijing CNISP Technology Co., Ltd
  • country: ZZ
  • phone: +000000000
  • e-mail: [email protected]
  • admin-c: CM2275-AP
  • tech-c: CM2275-AP
  • nic-hdl: AC1910-AP
  • abuse-mailbox: [email protected]
  • mnt-by: APNIC-ABUSE
  • last-modified: 2022-10-18T03:55:03Z
  • person: JIA HE
  • address: shenzhen Nanshan High Tech Road 1 Kexing science park B-2-405
  • country: CN
  • phone: +86-18923899936
  • e-mail: [email protected]
  • nic-hdl: JH3355-AP
  • mnt-by: MAINT-AP-CNISP
  • last-modified: 2022-05-17T09:08:53Z

Links to attack logs

bruteforce-ip-list-2022-02-27 bruteforce-ip-list-2021-09-22 bruteforce-ip-list-2022-03-17