222.186.180.223 Threat Intelligence and Host Information

Jun 15, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 222.186.180.223 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 40/100

Host and Network Information

Tags: cyber security, ioc, malicious, Nextray, phishing, SSH
View other sources: Spamhaus VirusTotal

Country: China
Network:
Noticed: 34 times
Protocols Attacked: SSH
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: allkjet456asd.com sasf362fasf.com lhdj153pio.com yriu789kth.com 921.fas68s6sf12.com 935.dfh4g84f56.com 837.cgn8j9f4j3g.com z2.10086ha-dfl.com z2.pzzhongyiwaizhi.com z2.shuichuli3600.com z2.changjiexiang.com z2.songyuelongju.com

Malware Detected on Host

Count: 121 6664ac18c5d9af444342d0c69492285ee95ce60b80aeaf21b29b8fdf6d3a41a7 b50a829680722aeabfedceb5fc9e2b45671577c1e1d880684f2b918348d6c467 de6be6eb0d466a12d3032388a5c089413c6e09263ac08300d6c9e8eef7d49996 8c6d3b0369503f15b117a1126b287adc1e8cb73bc9d5dd7f18011be001b4122d bcd6b65a8e0ce0165f9219f02b9382dbc774bcdb43f37d15924023fc10105836 b1d61205ff8636ce722c437e0474865dc3fbdfa10cc3e109fe797beeb808358a 1f52f40ae3d392f29763bf3f219f37735ceb96cd7d07e5cc9b5b08bfa8578e0d 1e63194e151377d126b24d2c9f8b3a1cdcc8dcbc25b3653058a446016ebfba28 3ce570ea86c28829aea739054173956d43dd889d93f3fedd53c2acf4b34dbc38 742af984b3311947f132e089addd304e597b98d10e272e5e39f557a0d4f60c42

Open Ports Detected

10000 10001 10007 10014 10015 10016 10020 10021 10024 10027 10028 10029 10034 10036 10039 10046 10051 10075 10081 10100 10134 10180 10200 10243 10250 10390 10397 10398 10443 10445 10480 10909 10911 10934 10935 10936 10943 11000 11084 11110 11111 11112 11211 11288 11300 11371 11401 11434 11480 11596 11688 12000 12056 12101 12106 12109 12113 12119 12123 12126 12137 12140 12150 12152 12164 12169 12170 12173 12174 12179 12182 12187 12194 12195 12197 12213 12221 12222 12226 12229 12230 12232 12236 12238 12239 12247 12250 12252 12257 12262 12266 12269 12274 12280 12286 12287 12288 12297 12298 12303 12307 12309 12317 12319 12332 12334 12337 12343 12345 12346 12349 12352 12357 12365 12366 12376 12383 12389 12392 12397 12398 12399 12401 12417 12418 12419 12422 12423 12424 12425 12434 12436 12437 12444 12446 12448 12449 12451 12455 12456 12457 12459 12461 12465 12477 12478 12479 12481 12484 12487 12488 12491 12498 12501 12511 12518 12520 12521 12528 12529 12535 12537 12547 12554 12559 12560 12564 12569 12572 12573 12574 12577 12578 12581 12584 12590 12601 12980 13228 13579 14006 14082 14147 14184 14265 14330 14344 14402 14403 14406 14443 14825 14875 14895 14901 14909 15002 15042 15044 15084 15123 15502 15504 15555 15588 15673 15831 16001 16002 16005 16010 16017 16020 16023 16028 16030 16031 16036 16037 16044 16045 16050 16055 16067 16070 16074 16076 16081 16086 16089 16091 16093 16096 16101 16103 16400 16404 16601 16667 16992 16993 17001 1701 17184 17773 17774 17779 17780 18010 18013 18014 18016 18021 18024 18030 18035 18049 18054 18058 18062 18064 18065 18075 18076 18078 18081 18083 18084 18089 18091 18098 18104 18113 18239 18245 18765 19071 19091 19443 20000 22

Map

Whois Information

inetnum: 222.184.0.0 - 222.191.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
abuse-c: AC1573-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-JS
mnt-routes: MAINT-CHINANET-JS
mnt-irt: IRT-CHINANET-CN
last-modified: 2021-06-15T08:06:34Z
irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@chinatelecom.cn
abuse-mailbox: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
mnt-by: MAINT-CHINANET
last-modified: 2025-04-24T03:21:26Z
role: ABUSE CHINANETCN
country: ZZ
address: No.31 ,jingrong street,beijing
address: 100032
phone: +000000000
e-mail: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
nic-hdl: AC1573-AP
abuse-mailbox: anti-spam@chinatelecom.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-04-24T03:21:54Z
role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-87799222
e-mail: jsipmanager@163.com
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
notify: jsipmanager@163.com
mnt-by: MAINT-CHINANET-JS
last-modified: 2022-08-05T15:34:47Z
person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@chinatelecom.cn
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
mnt-by: MAINT-CHINANET
last-modified: 2022-02-28T06:53:44Z

Links to attack logs

Share on: