Security Scan Report: 156.233.235.164

Redirected to:
http://156.233.235.164:8080/#dashboard
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 53 HTTP transactions. The main domain is 156.233.235.164.

Submitted URL: http://156.233.235.164:8080/

Effective URL:
http://156.233.235.164:8080/#dashboard
Redirected

AI Security Verdict

High Risk

Confidence: 75%

8
Risk Score

Self-branded offensive security command console exposing C2 listeners, WebShell/session management and payload/beacon generators on a bare, unranked HTTP IP that a threat feed tags as malicious — treat as attack infrastructure.

Risk Factors (7)
Command-and-control (C2) listener, beacon builder and payload generator modules exposed on the page
Implant/session and WebShell management functionality
Threat-intelligence report (single-source, unverified) flagging the host as malicious
Disguised password field and large number of hidden credential inputs
Unicode/mixed-script evasion in form fields
Unranked bare IP host served over unencrypted HTTP
API-key collection fields for FOFA, ZoomEye, Quake, Shodan, OpenAI and messaging bots
Domain age information unavailable

Details

Page Title

网刃 · 指挥台

Scan Type

public

Domain Name Analysis

You're looking at domain '156.233.235.164:8080' on an unknown top-level domain while skipping any subdomain. Its registrable label '156.233.235.164' stretches across 15 characters split between zero vowels and zero consonants, along with 12 digits. Breaking it apart gives 4 words: 156, 233, 235, 164. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://156.233.235.164:8080/

Page Load Overview

9.48s
Total Load Time
8.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:41,424 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical71% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
71%
technology software
71%
cryptocurrency blockchain
38%
government public service
37%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
53156.233.235.164Los Angeles, California, United States
AS401701cognetcloud INC
531--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15AF46124A4F80836419B06DEB1A87B133AA5F307D6890054B76E4BF44FE7CE1E51B96F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:72LtEYkkQLHY2RzCqQSICeFJUBKzbTktqy43y/l8FQrTj:72xD938lF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:731432:CEZDM3nvJ44MUixYoRkQBAEZwAkR2PAhEVPZIaBBUAIACALGAJUMB0EFgAjFVybIgAsiAq0KAhGIkWZy8i9QGaBgtLIpIQEC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c0c0981818180000
Perceptual Hash:d8f872269d998c99
Difference Hash:908cb2b2b2b24c30
Wavelet Hash:e0e0f8f8d8180000
Color Hash:#7d53ac

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data