221.224.140.140 Threat Intelligence and Host Information

Jul 04, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 221.224.140.140 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 65/100

Host and Network Information

Mitre ATT&CK IDs: T1498 - Network Denial of Service
Tags: attack ddos, botnet, Cyclops, ddos, DDOS, Gamardeon, HermeticWiper, IsaacWiper, KillNet, list ips, PartyTicket, russia, russian, ukraine, WhisperGate
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_net_ua, stopforumspam_180d, stopforumspam_30d, stopforumspam_365d, stopforumspam_90d, stopforumspam

Country: China
Network:
Noticed: 34 times
Protocols Attacked: Anonymous Proxy
Countries Attacked: Russian Federation
Passive DNS Results: sglfs.direct.quickconnect.cn ttshbks.direct.quickconnect.cn sglfs.synology.me sglbks.direct.quickconnect.cn sglbks.direct.quickconnect.to sglfs.direct.quickconnect.to

Open Ports Detected

123 1723 2000 5006 5080 8010 8025 8026 8031 8032 8089 81 8500 8501

CVEs Detected

CVE-2007-4723 CVE-2009-0796 CVE-2009-2299 CVE-2010-1899 CVE-2010-2730 CVE-2010-3972 CVE-2011-1176 CVE-2011-2688 CVE-2012-3526 CVE-2012-4001 CVE-2012-4360 CVE-2013-0941 CVE-2013-0942 CVE-2013-2765 CVE-2013-4365 CVE-2014-4078 CVE-2015-1635 CVE-2015-9251 CVE-2019-11358 CVE-2020-11022 CVE-2020-11023 CVE-2023-25690 CVE-2023-27522 CVE-2023-31122 CVE-2023-43622 CVE-2023-45802 CVE-2024-27316 CVE-2024-38474 CVE-2024-38475 CVE-2024-38476 CVE-2024-38477 CVE-2024-40898

Map

Whois Information

inetnum: 221.224.140.136 - 221.224.140.143
netname: SUZHOU-CHENGGONG-CLOTH-CORP
descr: Suzhou Chenggongyue Rounding Co., Ltd.
descr: Suzhou City
descr: Jiangsu Province
country: CN
admin-c: CH446-AP
tech-c: CG442-AP
status: ASSIGNED NON-PORTABLE
mnt-by: MAINT-CHINANET-JS
mnt-lower: MAINT-CHINANET-JS-SZ
last-modified: 2008-09-04T07:24:30Z
person: Cheng Gongyue
nic-hdl: CG442-AP
e-mail: ipsz@pub.sz.jsinfo.net
address: Wujiang Zhenzezhen 318 Guodao
phone: +86-13451707876
country: CN
mnt-by: MAINT-CHINANET-JS
last-modified: 2008-09-04T07:52:46Z
person: CHINANET-JS-SZ Hostmaster
address: No.182,Sanxiang Road,Suzhou 215004
country: CN
phone: +86-512-68302104
fax-no: +86-512-68302106
e-mail: jsipmanager@163.com
nic-hdl: CH446-AP
mnt-by: MAINT-CHINANET-JS-SZ
last-modified: 2022-03-15T07:12:23Z

Links to attack logs

Share on: