123.5.150.90

China

0

Resolved hostnames

0

Contacting malwares

0

Online malicious URLs allocated

0

Offline malicious URLs allocated

Blacklist timeline


Malware Download

URLhaus Abuse.ch

First seen: Wed Mar 05 2025 11:29:51 GMT+0000
Last seen: Thu Mar 06 2025 00:23:46 GMT+0000
Period: 13 hours

Whois information

Autonomous System
AS Name:
AS4837 China Unicom Henan Province Network
AS Country Code:
CN (China)
AS Registry:
apnic
AS Date:
Mon Nov 20 2006 00:00:00 GMT+0000
AS CIDR:
123.4.0.0/14

Registrant information
Registrant name:
China Unicom Henan Province Network
Address:
No.21,Financial Street Beijing,100033 P.R.China
Postal Code:
471000
Country Code:
CN (China)
City:
Luoyang

Emails
Emails:
  • hqs-ipabuse@chinaunicom.cn
  • abuse@public.zz.ha.cn
    • Dates
    Indexed:
    Mon Oct 19 2020 03:29:43 GMT+0000
    Last modified:
    Thu Mar 06 2025 00:36:46 GMT+0000
    AS Date:
    Mon Nov 20 2006 00:00:00 GMT+0000

    Location - Luoyang - China

    +−
    Leaflet | © OpenStreetMap contributors

    Tags

    Developers can check API Specification here:

    API Specification

    Request:

              
curl -H "Authorization: Bearer <API_KEY>" https://api.maltiverse.com/ip/123.5.150.90

    Request:

    Alternatively you can use Maltiverse Python3 Library: 
              
import requests
import json

url = 'https://api.maltiverse.com/ip/123.5.150.90'
response = requests.get(url)
print(json.dumps(response.json(), indent=4, sort_keys=True))

    Request:

              
$url = 'https://api.maltiverse.com/ip/123.5.150.90'
$headers =  @{Authorization=("Bearer {0}" -f "<API_KEY>")}
$response = Invoke-RestMethod $url -Headers $headers
Write-Output $response

    Response:

          
{
    "address": "No.21,Financial Street\nBeijing,100033\nP.R.China",
    "as_name": "AS4837 China Unicom Henan Province Network",
    "as_number": "4837",
    "asn_cidr": "123.4.0.0/14",
    "asn_country_code": "CN",
    "asn_date": "2006-11-20 00:00:00",
    "asn_registry": "apnic",
    "blacklist": [
        {
            "count": 3,
            "description": "Malware Download",
            "first_seen": "2025-03-05 11:29:51",
            "labels": [
                "malicious-activity"
            ],
            "last_seen": "2025-03-06 00:23:46",
            "ref": [
                1
            ],
            "source": "URLhaus Abuse.ch"
        },
        {
            "count": 1,
            "description": "Malware Download",
            "first_seen": "2020-12-03 04:16:41",
            "labels": [
                "malicious-activity"
            ],
            "last_seen": "2021-02-16 07:15:48",
            "source": "Abuse.ch"
        },
        {
            "count": 1,
            "description": "Malicious Host",
            "first_seen": "2020-10-18 00:00:00",
            "last_seen": "2020-10-18 00:00:00",
            "source": "HoneyDB"
        }
    ],
    "cidr": [
        "123.4.0.0/14"
    ],
    "city": "Luoyang",
    "classification": "suspicious",
    "country_code": "CN",
    "creation_time": "2020-10-19 03:29:43",
    "email": [
        "hqs-ipabuse@chinaunicom.cn",
        "abuse@public.zz.ha.cn"
    ],
    "ip_addr": "123.5.150.90",
    "ip_version": 4,
    "is_cdn": false,
    "is_cnc": false,
    "is_distributing_malware": false,
    "is_hosting": false,
    "is_iot_threat": false,
    "is_known_attacker": false,
    "is_known_scanner": false,
    "is_mining_pool": false,
    "is_open_proxy": false,
    "is_sinkhole": false,
    "is_tor_node": false,
    "is_vpn_node": false,
    "location": {
        "lat": 34.619683,
        "lon": 112.45404
    },
    "modification_time": "2025-03-06 00:36:46",
    "number_of_blacklisted_domains_resolving": 0,
    "number_of_domains_resolving": 0,
    "number_of_offline_malicious_urls_allocated": 0,
    "number_of_online_malicious_urls_allocated": 0,
    "number_of_whitelisted_domains_resolving": 0,
    "postal_code": "471000",
    "registrant_name": "China Unicom Henan Province Network",
    "scoring_executed_time": "2025-03-05 23:23:41",
    "tag": [
        "elf",
        "32-bit"
    ],
    "type": "ip"
}