139.224.142.117 Threat Intelligence and Host Information

Mar 17, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 139.224.142.117 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 15/100

Host and Network Information

View other sources: Spamhaus VirusTotal

Country: China
Network: AS37963 hangzhou alibaba advertising co. ltd.
Noticed: 1 times
Protocols Attacked: SSH
Passive DNS Results: justasimplefjsuw4.cfd rsagf.com rumarts.com www.rumarts.com 38365.uk 321321.uk 876876.uk 123123.uk 163163.uk 133133.uk 126126.uk 135135.uk 520520.uk kh-funtv.com ns7.alidns.com g.llll.vc

Open Ports Detected

10000 1012 10134 102 1023 104 10443 10554 10909 1099 110 111 11112 11210 11211 113 11300 11434 1153 1177 119 1200 12000 122 1234 12345 13 1337 135 14147 14265 143 1433 14344 1471 15 1500 1515 1521 1599 16030 1604 16993 17 1723 175 179 180 1800 1801 18081 18245 1883 19 19000 1911 1926 195 2000 20000 2002 2008 20256 2051 2053 20547 2066 2067 2081 2082 2083 2086 2087 21 2111 2121 21379 2154 2181 22443 23 23023 2320 2323 2332 2345 2351 2376 2404 2455 25 25001 2550 2551 25565 2566 2567 264 27017 2761 2762 28015 30002 30003 3001 3002 3050 3057 3059 3068 3069 3087 3089 3098 3100 3117 31337 3232 32400 3260 3268 3269 32764 3299 3301 3306 33060 3310 3388 3389 3404 3408 3412 35000 3524 3566 3570 37 37215 3749 37777 3790 3838 389 4000 4064 4157 4242 427 43 4321 4369 44158 443 4430 444 4444 447 450 4500 4506 4643 4664 47463 4747 47990 4840 4899 49 49152 49153 4949 50000 5001 5006 5007 50070 5009 5010 503 5090 51106 51235 515 5172 5201 5222 5269 53 54138 5432 5435 548 55000 55442 55443 55554 5569 5593 5605 5608 5672 5858 593 5938 59417 5984 5986 6001 6008 60129 61613 61616 62078 636 6379 6443 6560 6581 6602 6633 6650 666 6666 6667 6668 675 6789 685 70 7001 7002 7005 7071 7171 7218 7415 7434 7443 7444 7548 7634 7654 7779 789 79 80 8001 8004 8006 8009 8016 8017 8019 8020 8037 8081 8085 8086 8087 8089 8094 8096 8099 8107 8123 8126 8139 8140 8182 8200 8291 830 8333 8334 84 8404 8405 8410 8413 8419 8422 8433 8442 85 8553 8554 8575 8623 8637 8649 8666 87 8728 8767 8784 8809 8812 8826 8834 8845 8856 8871 8889 8990 8999 9000 9001 9005 9038 9042 9044 9045 9046 9051 9082 9091 9092 9094 9095 9099 91 9100 9103 9107 9151 9199 9200 9203 9213 9306 9418 9443 9530 9595 9633 9682 9690 9800 9869 9876 992 993 9943 995 9981 9998 9999

CVEs Detected

CVE-2007-2768 CVE-2008-3844 CVE-2010-4478 CVE-2010-4755 CVE-2010-5107 CVE-2011-4327 CVE-2011-5000 CVE-2012-0814 CVE-2014-1692 CVE-2014-2532 CVE-2014-2653 CVE-2015-5352 CVE-2015-5600 CVE-2015-6563 CVE-2015-6564 CVE-2016-0777 CVE-2016-10009 CVE-2016-10010 CVE-2016-10011 CVE-2016-10012 CVE-2016-10708 CVE-2016-1908 CVE-2016-20012 CVE-2016-3115 CVE-2017-15906 CVE-2018-15473 CVE-2018-15919 CVE-2018-20685 CVE-2019-16905 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408 CVE-2023-48795 CVE-2023-51384 CVE-2023-51385 CVE-2023-51767

Map

Whois Information

NetRange: 139.224.0.0 - 139.224.255.255
CIDR: 139.224.0.0/16
NetName: APNIC-ERX-139-224-0-0
NetHandle: NET-139-224-0-0-1
Parent: NET139 (NET-139-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2010-11-03
Updated: 2010-11-17
Comment: This IP address range is not registered in the ARIN database.
Comment: This range was transferred to the APNIC Whois Database as
Comment: part of the ERX (Early Registration Transfer) project.
Comment: For details, refer to the APNIC Whois Database via
Comment:
Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment: for the Asia Pacific region. APNIC does not operate networks
Comment: using this IP address range and is not able to investigate
Comment: spam or abuse reports relating to these addresses. For more
Ref: https://rdap.arin.net/registry/ip/139.224.0.0
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
inetnum: 139.224.0.0 - 139.224.255.255
netname: ALISOFT
descr: Aliyun Computing Co., LTD
descr: 5F, Builing D, the West Lake International Plaza of S&T
descr: No.391 Wen’er Road, Hangzhou, Zhejiang, China, 310099
country: CN
admin-c: ZM1015-AP
tech-c: ZM877-AP
tech-c: ZM876-AP
tech-c: ZM875-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-ALISOFT-CN
last-modified: 2023-11-28T00:57:06Z
irt: IRT-ALISOFT-CN
address: No.391 Wen’er Road, Hangzhou, Zhejiang, China, 310099
e-mail: didong.jc@alibaba-inc.com
abuse-mailbox: didong.jc@alibaba-inc.com
admin-c: ZM877-AP
tech-c: ZM877-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2021-09-05T23:38:36Z
role: ABUSE CNNICCN
address: Beijing, China
country: ZZ
phone: +000000000
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
abuse-mailbox: ipas@cnnic.cn
mnt-by: APNIC-ABUSE
last-modified: 2020-05-14T11:19:01Z
person: Li Jia
address: NO.969 West Wen Yi Road, Yu Hang District, Hangzhou
country: CN
phone: +86-0571-85022088
e-mail: jiali.jl@alibaba-inc.com
nic-hdl: ZM1015-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2014-07-30T02:02:01Z
person: Guoxin Gao
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen’er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
fax-no: +86-0571-85022600
e-mail: anti-spam@list.alibaba-inc.com
nic-hdl: ZM875-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2014-07-30T01:56:01Z
person: security trouble
e-mail: yitian.gaoyt@alibaba-inc.com
address: Hangzhou, Zhejiang, China
phone: +86-0571-85022600
country: CN
mnt-by: MAINT-CNNIC-AP
nic-hdl: ZM876-AP
last-modified: 2021-04-13T23:22:33Z
person: Guowei Pan
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen’er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022088-30763
fax-no: +86-0571-85022600
e-mail: guowei.pangw@alibaba-inc.com
nic-hdl: ZM877-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2013-07-09T01:34:02Z
route: 139.224.142.0/24
origin: AS37963
descr: China Internet Network Information Center
mnt-by: MAINT-CNNIC-AP
last-modified: 2020-02-18T01:31:57Z
route: 139.224.142.0/24
origin: AS45102
descr: China Internet Network Information Center
mnt-by: MAINT-CNNIC-AP
last-modified: 2020-02-18T01:33:17Z

Links to attack logs

****** ****** ******

Share on: