152.32.132.22 Threat Intelligence and Host Information

Aug 21, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 152.32.132.22 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 20/100

Host and Network Information

View other sources: Spamhaus VirusTotal

Country: Hong Kong
Network:
Noticed: 1 times
Protocols Attacked: Anonymous Proxy
Passive DNS Results: www.mpws.cn mpws.cn www.dmrq.cn dmrq.cn qqabe.com www.qqabe.com www.qqste.com baby.qqste.com gvo.cc www.gvo.cc www.jmzz.cc jmzz.cc wanlanyun.com www.qqfay.com www.wanlanyun.com qqste.com speed.xwo.xyz ys109.xyz ys103.xyz ys226.xyz ys34.xyz ys182.xyz ys262.xyz ys161.xyz ys207.xyz ys240.xyz ys221.xyz ys160.xyz ys283.xyz ys211.xyz ys176.xyz ys202.xyz ys299.xyz ys133.xyz ys290.xyz ys158.xyz ys259.xyz ys86.xyz ys97.xyz ys241.xyz ys93.xyz ys247.xyz ys255.xyz ys297.xyz ys286.xyz ys244.xyz ys231.xyz ys115.xyz ys17.xyz ys296.xyz 37ys.xyz ys264.xyz ys270.xyz ys82.xyz ys95.xyz ys134.xyz ys84.xyz ys162.xyz ys177.xyz ys199.xyz ys108.xyz ys127.xyz ys124.xyz ys291.xyz ys198.xyz ys205.xyz ys214.xyz ys190.xyz ys228.xyz ys180.xyz ys175.xyz ys155.xyz ys170.xyz ys102.xyz ys192.xyz ys236.xyz ys298.xyz 99ys.xyz 74ys.xyz 62ys.xyz 93ys.xyz 63ys.xyz 28ys.xyz 85ys.xyz 87ys.xyz 56ys.xyz 97ys.xyz 13ys.xyz 84ys.xyz 98ys.xyz 21ys.xyz 48ys.xyz 91ys.xyz 77ys.xyz 67ys.xyz 68ys.xyz 22ys.xyz 72ys.xyz 64ys.xyz 40ys.xyz 2ys.xyz 73ys.xyz 46ys.xyz 17ys.xyz 76ys.xyz 31ys.xyz 70ys.xyz 65ys.xyz 20ys.xyz 61ys.xyz 34ys.xyz 47ys.xyz 86ys.xyz 23ys.xyz 58ys.xyz 60ys.xyz 27ys.xyz 26ys.xyz 54ys.xyz 44ys.xyz 24ys.xyz 14ys.xyz 43ys.xyz 41ys.xyz 19ys.xyz 1ys.xyz 15ys.xyz 4ys.xyz 12ys.xyz 32ys.xyz ys19.xyz ys72.xyz ys67.xyz ys69.xyz ys61.xyz ys70.xyz ys62.xyz ys65.xyz ys59.xyz ys48.xyz ys47.xyz ys54.xyz ys46.xyz ys43.xyz ys45.xyz ys42.xyz ys41.xyz ys40.xyz ys39.xyz

Open Ports Detected

18888 3389 80 8888 8889

CVEs Detected

CVE-2007-4559 CVE-2009-2940 CVE-2009-3720 CVE-2013-0340 CVE-2015-20107 CVE-2016-3189 CVE-2018-25032 CVE-2019-12900 CVE-2020-10735 CVE-2020-29396 CVE-2021-28861 CVE-2021-29921 CVE-2021-3426 CVE-2021-3733 CVE-2021-3737 CVE-2021-4189 CVE-2022-0391 CVE-2022-26488 CVE-2022-37454 CVE-2022-42919 CVE-2022-45061 CVE-2023-24329 CVE-2023-27043 CVE-2023-36632 CVE-2023-40217 CVE-2024-6232 CVE-2024-7592 CVE-2024-9287

Map

Whois Information

NetRange: 152.32.128.0 - 152.32.255.255
CIDR: 152.32.128.0/17
NetName: APNIC
NetHandle: NET-152-32-128-0-1
Parent: NET152 (NET-152-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2018-07-09
Updated: 2018-07-09
Ref: https://rdap.arin.net/registry/ip/152.32.128.0
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
inetnum: 152.32.132.0 - 152.32.132.255
netname: UCLOUD-HK
descr: UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
country: HK
admin-c: UITH2-AP
tech-c: UITH2-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-UCLOUD-HK
mnt-irt: IRT-UCLOUD-HK
abuse-c: AU164-AP
last-modified: 2024-08-27T05:30:04Z
irt: IRT-UCLOUD-HK
address: FLAT/RM 603 6/F, LAWS COMMERCIAL PLAZA, 788 CHEUNG SHA WAN ROAD, KL,, Hong Kong
e-mail: pn-wan@ucloud.cn
abuse-mailbox: hegui@ucloud.cn
admin-c: UITH2-AP
tech-c: UITH2-AP
mnt-by: MAINT-UCLOUD-HK
last-modified: 2025-07-01T09:50:40Z
role: ABUSE UCLOUDHK
country: ZZ
address: FLAT/RM 603 6/F, LAWS COMMERCIAL PLAZA, 788 CHEUNG SHA WAN ROAD, KL,, Hong Kong
phone: +000000000
e-mail: pn-wan@ucloud.cn
admin-c: UITH2-AP
tech-c: UITH2-AP
nic-hdl: AU164-AP
abuse-mailbox: hegui@ucloud.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-07-01T09:51:21Z
role: UCLOUD INFORMATION TECHNOLOGY HK LIMITED
address: FLAT/RM 603 6/F, LAWS COMMERCIAL PLAZA, 788 CHEUNG SHA WAN ROAD, KL,, Hong Kong
country: HK
phone: +000000000
e-mail: u-ipnic@ucloud.cn
admin-c: UITH2-AP
tech-c: UITH2-AP
nic-hdl: UITH2-AP
notify: hegui@ucloud.cn
mnt-by: MAINT-UCLOUD-HK
last-modified: 2022-05-16T03:54:14Z
route: 152.32.132.0/24
origin: AS135377
descr: UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
mnt-by: MAINT-UCLOUD-HK
last-modified: 2020-11-26T07:28:38Z
route: 152.32.132.0/24
origin: AS62610
descr: UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
mnt-by: MAINT-UCLOUD-HK
last-modified: 2025-07-27T10:03:22Z

Links to attack logs

Share on: