222.186.133.13 Threat Intelligence and Host Information

Jun 15, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 222.186.133.13 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 54/100

Host and Network Information

Mitre ATT&CK IDs: T1498 - Network Denial of Service, T1499.002 - Service Exhaustion Flood, T1499 - Endpoint Denial of Service
Tags: cc.py, DDoS, HEAD Floods, Killnet, T1498, T1499
View other sources: Spamhaus VirusTotal
Contained within other IP sets: stopforumspam_365d

Country: China
Network:
Noticed: 2 times
Protocols Attacked: Anonymous Proxy

Malware Detected on Host

Count: 170 2a13d8ef12a03854650f29bb3de78c8c77cd4d55b2abf8b92a33f5deed9fd7a1 6bf10679684b405872c76904e715c37eaa88b31c3c61247e52b4eb46765a9cf5 6664ac18c5d9af444342d0c69492285ee95ce60b80aeaf21b29b8fdf6d3a41a7 16df21e313a5437dfc435c19b88e1df24a1be9ec7bb9170ff577f927ec54da37 6616d59cd80af97e760d727b459a75c1c4fe872c148c2223805d414bad385c4c b47f5b221ac001a723b711f5327218a6b358af677e364ae06fb84fac734bf001 5415dee63adc7afc63fb22e75c5702f522d10d4e2fc6e3838d3c13b16b78fde9 b50a829680722aeabfedceb5fc9e2b45671577c1e1d880684f2b918348d6c467 935ab836e882d0d26d87fce02f0f5c9d4926b94a095e3fbdab5214a6939e7bc5 8c6d3b0369503f15b117a1126b287adc1e8cb73bc9d5dd7f18011be001b4122d

Open Ports Detected

10000 10001 22 4431 4434 7022 7025 8443

CVEs Detected

CVE-2007-2768 CVE-2008-3844 CVE-2016-20012 CVE-2019-16905 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408 CVE-2023-48795 CVE-2023-51385 CVE-2023-51767 CVE-2025-26465 CVE-2025-32728

Map

Whois Information

inetnum: 222.184.0.0 - 222.191.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
abuse-c: AC1573-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-JS
mnt-routes: MAINT-CHINANET-JS
mnt-irt: IRT-CHINANET-CN
last-modified: 2021-06-15T08:06:34Z
irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@chinatelecom.cn
abuse-mailbox: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
mnt-by: MAINT-CHINANET
last-modified: 2025-04-24T03:21:26Z
role: ABUSE CHINANETCN
country: ZZ
address: No.31 ,jingrong street,beijing
address: 100032
phone: +000000000
e-mail: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
nic-hdl: AC1573-AP
abuse-mailbox: anti-spam@chinatelecom.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-04-24T03:21:54Z
role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-87799222
e-mail: jsipmanager@163.com
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
notify: jsipmanager@163.com
mnt-by: MAINT-CHINANET-JS
last-modified: 2022-08-05T15:34:47Z
person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@chinatelecom.cn
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
mnt-by: MAINT-CHINANET
last-modified: 2022-02-28T06:53:44Z

Links to attack logs

Share on: