182.16.4.34 Threat Intelligence and Host Information

May 15, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 182.16.4.34 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 35/100

Host and Network Information

Tags: cyber security, ioc, malicious, Nextray, phishing, tsec
JARM: 3fd3fd0003fd3fd21c42d42d000000bdfc58c9a46434368cf60aa440385763
View other sources: Spamhaus VirusTotal

Country: Hong Kong
Network:
Noticed: 33 times
Protocols Attacked: mssql
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: files.hcwlpc.cc amazon-shop-ph.com www.ph-amazon.com ph-amazon.com www.amazonphp.com amazonphp.com ffjijsddjohv.com amazon65.com amazon75.com amazon72.com amazon80.com amazon76.com amazon36.com xinyi.top admin.xinyi.top www.xinyi.top api.xinyi.top api.citicwealthmanagementtreasure.com admin.citicwealthmanagementtreasure.com gou1bu.com gou3bu.live 111hd.top www.111hd.top www.111sou.top 111sou.top 111shu.top www.111shu.top www.111lu.top 111lu.top

Open Ports Detected

443 80 888

Map

Whois Information

inetnum: 182.16.0.0 - 182.16.127.255
netname: NETSEC-HK
descr: Netsec Limited
country: HK
org: ORG-NASS1-AP
admin-c: NN541-AP
tech-c: NN541-AP
status: ALLOCATED PORTABLE
abuse-c: AH1002-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-NETSEC-HK
mnt-routes: MAINT-NETSEC-HK
mnt-irt: IRT-HK-NETSEC
last-modified: 2025-03-14T06:45:24Z
irt: IRT-HK-NETSEC
address: RM 2607-08, 26/F, Billion Plaza, 8 Cheung Yue St, Cheung Sha Wan, Kowloon, Hong Kong
e-mail: noc@netsec.com
abuse-mailbox: abuse@netsec.com
admin-c: NN411-AP
tech-c: NN411-AP
mnt-by: MAINT-HK-NETSEC
last-modified: 2025-03-03T08:02:19Z
organisation: ORG-NASS1-AP
org-name: Netsec Limited
org-type: LIR
country: HK
address: RM 2607-08, 26/F, Billion Plaza, 8 Cheung Yue St, Cheung Sha
phone: +852-27511100
fax-no: +852-27511199
e-mail: noc@netsec.com
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2023-09-05T02:15:31Z
role: ABUSE HKNETSEC
country: ZZ
address: RM 2607-08, 26/F, Billion Plaza, 8 Cheung Yue St, Cheung Sha Wan, Kowloon, Hong Kong
phone: +000000000
e-mail: noc@netsec.com
admin-c: NN411-AP
tech-c: NN411-AP
nic-hdl: AH1002-AP
abuse-mailbox: abuse@netsec.com
mnt-by: APNIC-ABUSE
last-modified: 2025-03-03T08:02:25Z
role: NETSEC NOC
address: Suite 1007, 10/F, The Bay Hub, 17 Kai Cheung Rd, Kowloon Bay
country: HK
phone: +85227511100
e-mail: noc@netsec.com
admin-c: NN541-AP
tech-c: NN541-AP
nic-hdl: NN541-AP
mnt-by: MAINT-NETSEC-HK
last-modified: 2025-03-14T05:55:40Z
route: 182.16.4.0/24
origin: AS45753
descr: Netsec Limited
mnt-by: MAINT-NETSEC-HK
last-modified: 2021-11-29T07:36:42Z
route: 182.16.4.0/24
origin: AS963
descr: Netsec Limited
mnt-by: MAINT-NETSEC-HK
last-modified: 2025-05-07T02:01:42Z
route: 182.16.4.0/24
origin: AS9744
descr: Netsec Limited
mnt-by: MAINT-NETSEC-HK
last-modified: 2021-11-29T08:00:47Z

Links to attack logs

Share on: