139.219.4.249 Threat Intelligence and Host Information

Share on:

Mar 05, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Host and Network Information

Tags: Scanner, Webattack, awsau, awsbah, awsindia, awsjap, bruteforce, redis, scanning, smtp, ssh, tcp, tsec
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_net_ua, ciarmy
Country: China
Network: AS58593 shanghai blue cloud technology co. ltd
Noticed: 50 times
Protcols Attacked: redis
Countries Attacked: Australia, Bahrain, Germany, India, Japan
Passive DNS Results: azuregateway-38690023-9f06-48df-be1e-434050b8bc71-a00bb816603d.vpn.chinacloudapi.cn azuregateway-a72c0023-46d2-4c34-a596-dc4b96cf3008-2e3ec6f5cc8a.vpn.chinacloudapi.cn azuregateway-7b8f0023-c04f-4fd4-94d3-238f8ed7fc95-730fe092cddb.vpn.chinacloudapi.cn

Open Ports Detected

443 8080

Map

Whois Information

NetRange: 139.219.0.0 - 139.219.255.255
CIDR: 139.219.0.0/16
NetName: APNIC-ERX-139-219-0-0
NetHandle: NET-139-219-0-0-1
Parent: NET139 (NET-139-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2010-11-03
Updated: 2010-11-17
Comment: This IP address range is not registered in the ARIN database.
Comment: This range was transferred to the APNIC Whois Database as
Comment: part of the ERX (Early Registration Transfer) project.
Comment: For details, refer to the APNIC Whois Database via
Comment:
Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment: for the Asia Pacific region. APNIC does not operate networks
Comment: using this IP address range and is not able to investigate
Comment: spam or abuse reports relating to these addresses. For more
Ref: https://rdap.arin.net/registry/ip/139.219.0.0
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
inetnum: 139.219.0.0 - 139.219.255.255
netname: BLUECLOUD
descr: Shanghai Blue Cloud Technology Co.,Ltd
descr: M5, Jiuxianqiao East Road, Chaoyang District, Beijing
country: CN
admin-c: YW6852-AP
tech-c: JS4044-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
mnt-irt: IRT-BLUECLOUD-CN
last-modified: 2021-11-02T07:47:59Z
irt: IRT-BLUECLOUD-CN
address: M5, Jiuxianqiao East Road, Chaoyang District, Beijing
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: YW6852-AP
tech-c: JS4044-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2021-07-01T08:09:31Z
role: ABUSE CNNICCN
address: Beijing, China
country: ZZ
phone: +000000000
e-mail: [email protected]
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
abuse-mailbox: [email protected]
mnt-by: APNIC-ABUSE
last-modified: 2020-05-14T11:19:01Z
person: Sean Zhang
address: M5, Jiuxianqiao East Road, Chaoyang District, Beijing
country: CN
phone: +86-010-56065320
e-mail: [email protected]
nic-hdl: JS4044-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2017-10-26T08:05:00Z
person: Yuyan Liu
address: M5, Jiuxianqiao East Road, Chaoyang District, Beijing
country: CN
phone: +86-13810101369
e-mail: [email protected]
nic-hdl: YW6852-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2017-10-26T08:05:00Z
route: 139.219.0.0/16
descr: Microsoft (China) Co, Ltd.
origin: AS58593
country: CN
notify: [email protected]
mnt-lower: MAINT-AP-MICROSOFT
mnt-routes: MAINT-AP-MICROSOFT
mnt-by: MAINT-AP-MICROSOFT
last-modified: 2014-06-30T19:03:25Z

Links to attack logs