Security Scan Report: 161.114.115.216

Redirected to:
http://161.114.115.216:8787/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 71 HTTP transactions. The main domain is 161.114.115.216.

Submitted URL: http://161.114.115.216:8787/

Effective URL:
http://161.114.115.216:8787/login
Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Multi-source malicious threat-intel match on the site's own address plus three HIGH IDS alerts for root-level command output. Login-gated 'pentest console' on a bare IP looks like attacker-controlled tooling or a compromised host — avoid.

Risk Factors (4)
Primary host IP:port (161.114.115.216:8787) corroborated as malicious by 2 independent threat-intel feeds
3 HIGH network IDS alerts indicating root-level command output in HTTP responses (ATTACK_RESPONSE)
Bare-IP hosting on an unusual port with no domain identity or ranking
Login-gated intrusion/penetration-testing tooling exposed on a host with exploitation indicators
Domain age information unavailable

Details

Page Title

ARTEX — 自主渗透测试控制台

Scan Type

public

Domain Name Analysis

The domain name '161.114.115.216:8787' uses an unknown top-level domain with no subdomain. The core label '161.114.115.216' covers 15 characters with zero vowels and zero consonants, along with 12 digits. Word splitting yields four words: 161, 114, 115, 216. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://161.114.115.216:8787/

Page Load Overview

1.81s
Total Load Time
4.9 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:67 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as zh

Website Classification

Primary Category

technology software74% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
74%
documentation technical
72%
cryptocurrency blockchain
62%
phishing scam
46%
government public service
44%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
71161.114.115.216Los Angeles, California, United States
AS206300YUNYOO LTD
711--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15813A505BC08E6606C3BED0D96BD5E39C058B8728A358468F14DC98D8BD1BF627E9ED1

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:UpamVXmge7gu8kcoZh1V5x0rGV4xksc64Jysq7vFr+vz+v+BmAL1vXNFyfB2LZF5:Rfebx/c64Jysq7vMvyvcmW11FN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:42737:saRaMAeFBKQCUqpQIEGTF0CICggCw+wxX1SxCAAoAAImVgcCGEEQiEBJEDl0xOACEMogihmAHTJJtGROiMnIBSVVJBASAqeI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f1f1f1f1f1f1f1f
Perceptual Hash:8c921f6df0930f96
Difference Hash:747476b6b7777076
Wavelet Hash:1f1f1b1313111f1f
Color Hash:#acac53

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data