210.26.48.8 Threat Intelligence and Host Information

Jun 07, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 210.26.48.8 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 40/100

Host and Network Information

  • Tags: cyber security, ioc, malicious, Nextray, phishing

  • View other sources: Spamhaus VirusTotal

  • Country: China
  • Network:
  • Noticed: 29 times
  • Protocols Attacked: SSH
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: holl.f3322.net

Malware Detected on Host

Count: 19 3bfdc72572f6898436d916b6f5e4b010bb2c294bc52457a616f089898426c69b afccc7fade65858d9c9aa00f001757562d3f79d0496f09d3c475c31f11290f0c 32742304a6f6aabffb223cffc81b0e91322599992a3400b4c8bee68baf96d04b 8482b17aea6ddd23ea39f18f9930e66366f361a96c54f3cfbb831547fd0dcdc8 0762d79b791a00268d4ffd0e030dcb1bed69f3252f05ab4dd04aa2015a5ba9c6 3df30a3ec1a9c4789da2e9bfca82b092d61a8ba4667f0873afe30609c887682d b3363526d2c4fe7cb0a814351be75e39aec38df72203c00b9d6a8278b17fe0b5 ab69099dbcf2bdc9bcb05f7cd3d1d8a62f86567bc64c33161a6cc61778cf6a08 d3539ab55c742fb37c95b6747f32009bc058eeb18c8da59357df9121e9bd8b1e 326b6bfae7f7180cf7ba127bf05e443ac913a91ab6f32df765efd9045e925515

Map

Whois Information

  • inetnum: 210.26.0.0 - 210.31.255.255
  • netname: CERNET-CN
  • descr: China Education and Research Network
  • descr: Room 224, Tsinghua University
  • descr: Beijing, China
  • country: CN
  • admin-c: JW725-AP
  • tech-c: XL364-AP
  • tech-c: LZ530-AP
  • abuse-c: AC1685-AP
  • status: ALLOCATED PORTABLE
  • mnt-by: APNIC-HM
  • mnt-lower: MAINT-CERNET-AP
  • mnt-routes: MAINT-CERNET-AP
  • mnt-irt: IRT-CERNET-AP
  • last-modified: 2020-10-20T00:56:02Z
  • irt: IRT-CERNET-AP
  • address: Network Research Center,
  • address: Main Bldg, Tsinghua Univ
  • address: Beijing 100084, China
  • phone: +86-10-62784301
  • fax-no: +86-10-62785933
  • e-mail: abuse@cernet.edu.cn
  • abuse-mailbox: abuse@cernet.edu.cn
  • admin-c: CER-AP
  • tech-c: CER-AP
  • mnt-by: MAINT-CERNET-AP
  • last-modified: 2025-01-22T13:47:43Z
  • role: ABUSE CERNETAP
  • country: ZZ
  • address: Network Research Center,
  • address: Main Bldg, Tsinghua Univ
  • address: Beijing 100084, China
  • phone: +86-10-62784301
  • e-mail: abuse@cernet.edu.cn
  • admin-c: CER-AP
  • tech-c: CER-AP
  • nic-hdl: AC1685-AP
  • abuse-mailbox: abuse@cernet.edu.cn
  • mnt-by: APNIC-ABUSE
  • last-modified: 2025-01-22T16:25:45Z
  • person: Jianping Wu
  • address: China Education and Research Network Center
  • address: Room 225, Main Building, Tsinghua University
  • address: Beijing 100084
  • address: CN
  • country: CN
  • phone: +86-10-6278-5983
  • fax-no: +86-10-6278-5933
  • e-mail: jianping@cernet.edu.cn
  • nic-hdl: JW725-AP
  • mnt-by: MAINT-CERNET-AP
  • last-modified: 2011-12-22T05:23:32Z
  • person: Ling Zhang
  • address: Network Center
  • address: South China University of Technology
  • address: Guangzhou, Guangdong 510641, China
  • address: CN
  • country: CN
  • phone: +86-20-87110596
  • fax-no: +86-20-87110019
  • e-mail: ling@scut.edu.cn
  • nic-hdl: LZ530-AP
  • notify: dbmon@apnic.net
  • mnt-by: MAINT-CERNET-AP
  • last-modified: 2011-12-22T05:23:32Z
  • person: Xing Li
  • address: China Education and Research Network Center
  • address: Room 225, Main Building, Tsinghua University
  • address: Beijing 100084
  • address: CN
  • country: CN
  • phone: +86-10-6278-5983
  • fax-no: +86-10-6278-5933
  • e-mail: xing@cernet.edu.cn
  • nic-hdl: XL364-AP
  • mnt-by: MAINT-CERNET-AP
  • last-modified: 2011-12-22T05:23:32Z

Links to attack logs

nmap-scanning-list-2020-12-01 mssql-bruteforce-ip-list-2020-12-07 mssql-bruteforce-ip-list-2020-12-04 ****** nmap-scanning-list-2020-12-04 mssql-bruteforce-ip-list-2020-12-01 mssql-bruteforce-ip-list-2020-12-03 nmap-scanning-list-2020-12-03 nmap-scanning-list-2020-12-14 nmap-scanning-list-2020-11-30 ****** ******

Share on: