161.117.238.143 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 161.117.238.143 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 10/100

Host and Network Information

• View other sources: Spamhaus VirusTotal

• Country: Singapore
• Network:
• Noticed: 1 times
• Protocols Attacked: SSH
• Passive DNS Results: 518mk.cn x8j44.com xcc154.com wang41sui.com tom2637.com 39gggg.com wkmctac.com uotput.com dhdhg1.com vfgwwee.com smg215.com hoare22.com https9u56.com mugo678.com zhaoseqi2256.com zly521.com igiao47.com 4280msc.com 98kny.com 4000551861.com 4dhealthech.com 2331s721.com kkpp39.com rhdtubexvideos.com x7p15.com www3567y.com www83fcae078260.com comw31520.com ccxxhh5530.com stj67p.com hj454g.com zztt18top.com gxs212130.com 4fbba32eb.com 5g47k4g.com 2042begin.com tt9es.com mmlld.com 1p2p3s4p.com fotografiadiaria.com jjzz62.com adykkdll.com aiai5500.com t4rqg.com ss13sbs.com shtt678.com hnd807.com hp1002.com l2mx8.com ejn5977.com 12mx8.com 2w5zy.com 598kcc.com 9166us.com 326hcc.com 32f82.com 27ppvip.com www345670.com miaa368.com eeezxm.com 3449977k.com 333y33y.com 1223438.com 3448877.com 1223448.com wwwncya46.com t85top.com zbnmsl.com brzzbros.com nt46379.com 3439977k.com 713dsb.com 44b9x.com 42h3456.com 3438877.com 34f95a.com x2.518mk.cn x5.518mk.cn x3.518mk.cn www.518mk.cn x4.518mk.cn x1.518mk.cn 4hupp90.cn www4189001.com n89w9ee.com www92h17.com wyf8cc.com ac48d.com afa07.com afaf007.com tazhan3.com tinepotmihd.com d3eea1.com ca02iji.com se5555cc.com srx5cbox.com https419.com hkck999.com husp022.com zxy258c.com zbrjmf.com zlloo4.com zwe76.com bjcd3.com gmee2.com jkkppdd39.com jrnysm.com oyuoccaw.com nkh110.com ngod-134.com 98mpw.com 5948hjhj.com 16ax16ax.com 44ssa5.com 57dy6ww.com 3sn1.com 5syk369.com 5948jjjjj.com 112ddjc.com 3998040.com 525233q.com 1010uy.com 3p50z.com 22333223.com www7102809.com wifi790779.com ww6123zs.com dabol73.com com-5sj79.com ml8886318.com meyp2777.com zkd995.com pao659.com b55im.com bqbqg.com eca2837c9.com 66vus.com 212if.com 8h849.com 5ee775d.com 5qz86.com 4hucp225.com xyz678k.com xzy687k.com zhen00.com y6duu.com 7m2cc.com 2962498457.com www6424zh.com hyl888999d.com www08386.com aa7773b.com aa7773c.com ttdv5566.com tongneo08.com dounao11.com dinzhu33.com htt3maoaf.com lightyag.com lf169999.com iqdandan.com bv1wf4y1z72c.com ggyy781.com 4327277.com 9edd129addd2.com 37759hk.com 4hucxx332.com 419nat.com 005f0026655.com 6f0473870cf.com 19999hw.com 62cca34474414.com 1237388.com 7k7k358.com f8737a28.com 1.down.vr2028.cn ddcbmax.com cpau8.com sysgio377.com h5dingtalk.com lan56789zouo.com jul713.com jad78.com 67pb.com 2940tom.com 259luxu-1518.com 2951tom.com 8317tom.com 599yo.com 5134tom.com 2800tom.com 7288z.com 36m88.com 1122hmtlula510.com 2660tom.com 2969tom.com 2bfd94964a63.com www30280aa.com d43ddd679c3.com c9fas0dd8250.com e53tc.com 5567iu.com xvideoyoutube.com xiaohuaxuemei.com www566rt.com tianww08.com du331xx.com comfctgqg19zr.com ce99009.com h022710.com ppn911.com 67wwcc.com 58b59233dc1f.com 8maoar.com 668800008.com 336600006.com 58b59232dc.com kv8c.com 893bad8cf5cl.com anhuiadu.com csqb888.com nhdtb498.com 4huxx735.com 333uuui.com 57djjw.com 730fff.com 736tcc.com 3f5acc.com 28qinli.com kdjjfhj.com f7225514ee.com dierbanzhu67.com dy91n.com coms819ewkxgv.com vyf4.com yl02t.com bbd18.com ndb95.com 86688868.com 47088c.com 7e91dcef25.com 67hjd.com 4hudyo011.com xipjsph.com w2dcc.com www7723030.com www95099c.com wwe862727oom862727.com daa299.com d0538880e.com comy9fc8c70xsf4e.com comda28.com c1u58.com hs09xyz.com mamaless.com ivtt10086.com quanyou3.com ggvcgutdffghjji.com j4uum5b4.com ebc27.com nchd094.com 27km3.com 8shs8.com 5151999aa.com 690p69.com 5mygkk.com 79133111a.com 2beg7m.com 4hukk4o.com 4nhu22.com xjxj77www.com we45lywhao.com wxuj7.com 55frtf.com 3588871904.com 18cmjp5.com 22c456.com 33j5c.com 3433704907.com 55ye59e.com 52furongi.com louzhusao.com boun2233.com 3334117833.com inbox1.qqcao63.com xhmm1hp.com w2xapud.com www3u73.com c1wkf.com hvysy330gjhl.com l7jkv7.com zt20369.com 6bqxrz.com 2041282747.com 4326w.com 2967737503.com www92922c.com hvx330.com ma00u2cc.com gxx403.com 202111l.com 1sqzfhjkhc8zcxdi-vru1hg.com 63ldd.com 93426ch.com xj395.com xiaotrj.com xyjtsg.com xixi9999.com xj419.com ws7486.com wushanjain.com ww31aam.com wwwhcp777888.com www21k2.com ww222tom.com wdnmd250sb.com w31aam.com asdfghjkk.com alikt77.com a6bck.com alndd2t.com abp171xyz.com abcasw.com a1up8833.com tsugohuf.com titredir.com tk22q.com tio18.com dansiety.com duch023.com cuilil.com c4n1cc.com v2yay.com sevensevenjkjk.com sugu888.com snt5gbgkwaq.com huangsedaohan1g.com hx314.com huangjunjieys.com hsuww.com hpv122.com miaoert.com mvam66.com myuncleisyule.com ms0920885.com miaoertt.com mv3344vva.com mmcnloy.com m00uicc.com lvtt120.com ly666sc.com zuywm.com zzzt06t06.com z8qd8.com zdjbs.com z3z3z3t06.com qqxao72.com pu7top.com bp857bp.com bb230ml.com juliao1688.com ewc45m.com ez69e.com e3eef.com nzsgxjlg.com nqrnqlznky.com 5508909.com 264283672.com 70hht.com 8wwid.com 51h2r.com 5389ee237.com 74a57.com 4217yyy.com 590483627.com 907aa1.com 1proe.com 8169alm.com 5xi8cai.com 3f2hp.com 91tk8k.com 8618127.com 9xdteam.com 8x6hku.com 8k66kk.com 49218q.com 50afaafa.com 3345334080.com 587tp.com 5x8cai.com 463hkaqd059.com 11uasas.com 1364kea15057km.com 10mtts15zn6v0ws43q4zlyq.com 20efmv.com 22267tv.com 200tsi.com 0478829.com 2264641411.com 16qqqu.com kaozzz.com kp597.com kp15cc.com rgbfdc666.com fiv044.com x9ktop.com wwqsqs2.com wwyt3344.com ajtmv.com a8800106.com shfiwf.com sksk004.com s1497.com mitao18i.com qcv50.com 99kicc.com 53332875.com 4pyxyz.com 46w4603k.com 69621yk.com 7651010.com x6x48x.com www23950842ad45.com wffwwwww.com hxd8x.com lmxixihahajp5.com wwdy67s8.com sky5368.com h5ktop.com yyb900.com piaapnuchuubi.com 00se044.com 13256567.com 13254567.com 05motion.com rgyz6.com 919lsp.com a44wan.com a440000.com tv4401.com szsp1rog.com 666wodebb.com 96v64.com 773toms.com 5435352.com 003570w.com 2w9m9.com min8811666.com 2w9mll9.com 2w9m9s.com 322om.com zhuqiu1.com buxinga.com 9rylj9.com hnd645.com 689tim.com cc2357k.com siguashipin-zuixin.com evh6.com se1586.com puhburo.com 560lsn.com 381138gp.com 926kr.com 7034q7.com 140psm.com kiana616.com ktpapp4.com kiana-616.com www1845w.com w20yye.com wweess.com wzdxhn.com ww14eef.com apz69e.com aabb48.com tlula615.com c4692b07.com sbakpk.com hassium108.com mye77722.com muiggj.com zp28p.com zkx82.com zz41cc.com q11lvy.com yiti63.com ins103.com yj666p.com yjs66.com y3gy76.com pred183c.com plteon.com br963.com burma66.com nova6se.com nigeerbi.com 67maoa.com 0518829.com 42iviv.com

Malware Detected on Host

Count: 3 8f9dd13abaa0bf44784b79f2d95247a0e0caf28f1132a3ce00394c0b3005ea0e e6522e7ac5529dc173c74fe309a37e6aec85ff38bc063d5c1c2f4c981ef5d9a5 c3f8033a2ab63ff3f95a0ccfb44de00029739356098dc01d170182fd1301e986

Open Ports Detected

80

Map

Whois Information

• NetRange: 161.117.0.0 - 161.118.255.255
• CIDR: 161.117.0.0/16, 161.118.0.0/16
• NetName: APNIC-ERX-161-117-0-0
• NetHandle: NET-161-117-0-0-1
• Parent: NET161 (NET-161-0-0-0-0)
• NetType: Early Registrations, Transferred to APNIC
• OriginAS:
• Organization: Asia Pacific Network Information Centre (APNIC)
• RegDate: 2004-02-18
• Updated: 2009-10-08
• Comment: This IP address range is not registered in the ARIN database.
• Comment: This range was transferred to the APNIC Whois Database as
• Comment: part of the ERX (Early Registration Transfer) project.
• Comment: For details, refer to the APNIC Whois Database via
• Comment:
• Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
• Comment: for the Asia Pacific region. APNIC does not operate networks
• Comment: using this IP address range and is not able to investigate
• Comment: spam or abuse reports relating to these addresses. For more
• Ref: https://rdap.arin.net/registry/ip/161.117.0.0
• OrgName: Asia Pacific Network Information Centre
• OrgId: APNIC
• Address: PO Box 3646
• City: South Brisbane
• StateProv: QLD
• PostalCode: 4101
• Country: AU
• RegDate:
• Updated: 2012-01-24
• Ref: https://rdap.arin.net/registry/entity/APNIC
• OrgTechHandle: AWC12-ARIN
• OrgTechName: APNIC Whois Contact
• OrgTechPhone: +61 7 3858 3188
• OrgTechEmail: search-apnic-not-arin@apnic.net
• OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
• OrgAbuseHandle: AWC12-ARIN
• OrgAbuseName: APNIC Whois Contact
• OrgAbusePhone: +61 7 3858 3188
• OrgAbuseEmail: search-apnic-not-arin@apnic.net
• OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
• inetnum: 161.117.128.0 - 161.117.255.255
• netname: ALICLOUD-SG
• country: SG
• admin-c: ASEP1-AP
• tech-c: ASEP1-AP
• abuse-c: AA1926-AP
• status: ALLOCATED NON-PORTABLE
• mnt-by: MAINT-ASEPL-SG
• mnt-irt: IRT-ASEPL-SG
• last-modified: 2021-04-14T01:11:45Z
• irt: IRT-ASEPL-SG
• e-mail: abuse@alibaba-inc.com
• abuse-mailbox: abuse@alibaba-inc.com
• admin-c: ASEP1-AP
• tech-c: ASEP1-AP
• mnt-by: MAINT-ASEPL-SG
• last-modified: 2024-10-08T07:53:08Z
• role: ABUSE ASEPLSG
• country: ZZ
• phone: +000000000
• e-mail: abuse@alibaba-inc.com
• admin-c: ASEP1-AP
• tech-c: ASEP1-AP
• nic-hdl: AA1926-AP
• abuse-mailbox: abuse@alibaba-inc.com
• mnt-by: APNIC-ABUSE
• last-modified: 2024-10-08T08:00:34Z
• role: Alibabacom Singapore E-Commerce Private Limited a
• country: SG
• phone: +86-571-85022088
• fax-no: +86-571-85022088
• e-mail: anti-spam@list.alibaba-inc.com
• admin-c: ASEP1-AP
• tech-c: ASEP1-AP
• nic-hdl: ASEP1-AP
• mnt-by: MAINT-ASEPL-SG
• last-modified: 2015-12-10T01:04:19Z
• route: 161.117.238.0/24
• origin: AS134963
• descr: Alibaba.com Singapore E-Commerce Private Limited
• mnt-by: MAINT-ASEPL-SG
• last-modified: 2020-01-16T14:50:39Z
• route: 161.117.238.0/24
• origin: AS45102
• descr: Alibaba.com Singapore E-Commerce Private Limited
• mnt-by: MAINT-ASEPL-SG
• last-modified: 2020-01-16T14:47:41Z

Links to attack logs

****** ****** ******