222.186.180.130 Threat Intelligence and Host Information

Jun 15, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 222.186.180.130 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 45/100

Host and Network Information

Tags: cyber security, ioc, malicious, Nextray, phishing, SSH, tsec
View other sources: Spamhaus VirusTotal
Contained within other IP sets: b3b0, haley_ssh

Country: China
Network:
Noticed: 50 times
Protocols Attacked: SSH
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 112 2a13d8ef12a03854650f29bb3de78c8c77cd4d55b2abf8b92a33f5deed9fd7a1 b223f5fccd5c886a488a66198daf9b8230294aed135d45a2a88a3c7e13ef2f79 b47f5b221ac001a723b711f5327218a6b358af677e364ae06fb84fac734bf001 de6be6eb0d466a12d3032388a5c089413c6e09263ac08300d6c9e8eef7d49996 8c6d3b0369503f15b117a1126b287adc1e8cb73bc9d5dd7f18011be001b4122d bcd6b65a8e0ce0165f9219f02b9382dbc774bcdb43f37d15924023fc10105836 b1d61205ff8636ce722c437e0474865dc3fbdfa10cc3e109fe797beeb808358a 35a30bcfba041eeee1b9b07e84ddf851d363257852589de491aa97350e1fcc6f 1e63194e151377d126b24d2c9f8b3a1cdcc8dcbc25b3653058a446016ebfba28 8727f918ec35084959702c5730e26d4add52958acb953d61951b5fc6e443ff09

Map

Whois Information

inetnum: 222.184.0.0 - 222.191.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
abuse-c: AC1573-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-JS
mnt-routes: MAINT-CHINANET-JS
mnt-irt: IRT-CHINANET-CN
last-modified: 2021-06-15T08:06:34Z
irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@chinatelecom.cn
abuse-mailbox: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
mnt-by: MAINT-CHINANET
last-modified: 2025-04-24T03:21:26Z
role: ABUSE CHINANETCN
country: ZZ
address: No.31 ,jingrong street,beijing
address: 100032
phone: +000000000
e-mail: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
nic-hdl: AC1573-AP
abuse-mailbox: anti-spam@chinatelecom.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-04-24T03:21:54Z
role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-87799222
e-mail: jsipmanager@163.com
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
notify: jsipmanager@163.com
mnt-by: MAINT-CHINANET-JS
last-modified: 2022-08-05T15:34:47Z
person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@chinatelecom.cn
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
mnt-by: MAINT-CHINANET
last-modified: 2022-02-28T06:53:44Z

Links to attack logs

Share on: