ScanMalware.com

Security Scan Report: 23.248.203.123

Redirected to:
http://23.248.203.123:8787/login
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/791a25ea-8cc6-4786-9fe0-2499eacfcd6cDomain and IP registration (RDAP)/api/v1/rdap/791a25ea-8cc6-4786-9fe0-2499eacfcd6cHow often this domain was scanned/api/v1/domain/stats/23.248.203.123Scan history for this domain/api/v1/domain/history/23.248.203.123?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 68 HTTP transactions. The main domain is 23.248.203.123.

Submitted URL: http://23.248.203.123:8787/

Effective URL:
http://23.248.203.123:8787/login
Redirected

AI Security Verdict

Moderate Risk

Confidence: 68%

5
Risk Score

Unattributed IP-hosted 'autonomous pentest console' on a non-standard port, flagged by a HIGH IDS attack-response signature exposing root-level output. No forms or IoC matches, but the host and tooling warrant avoidance.

Risk Factors (4)
Hosted on a raw IP address on port 8787 with no domain identity
HIGH IDS alert indicating command-execution / root-shell style attack response traffic
Serves an autonomous penetration-testing control panel (dual-use offensive tooling)
No domain ranking or reputation available for the host
Safety Factors (6)
No credential, password or payment forms were present in the captured DOM
No Indicators of Compromise matched the page or its resources
No JavaScript malware patterns or native-hunting-rule hits
All JavaScript served same-origin; no cross-origin credential exfiltration detected
No brand impersonation — the page brands itself, not another organisation
No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Domain age information unavailable

Details

Page Title

ARTEX — 自主渗透测试控制台

Scan Type

public

Domain Name Analysis

You're looking at domain '23.248.203.123:8787' on an unknown top-level domain. Its registrable label '23.248.203.123' stretches across 14 characters split between 0 vowels and zero consonants, along with 11 digits. Splitting it apart reveals 4 words: 23, 248, 203, 123. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://23.248.203.123:8787/

Page Load Overview

75.11s
Total Load Time
3.0 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:27 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as zh

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6823.248.203.123United States
AS138415Yancy Limited
681--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16FA24F1ABC05EE51AC79EC5E917E1E3684CCA97B8234C868F18ECF9D0B54A7603D9DD0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:xpamVXmge7euOCD6ukcoZh1VvREfe8FyfB2LZF3VEOiZ1l:xpamVXmge7eulkcoZh1VKfNFyfB2LZFe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:22416:CkEEkihReEiAcIgkYJtYlAiUAGIwGkQBgQAeAou0YhgiQCyQA46KaJgBCAACOAmQCBGiyyOwUpCDCCVZJmKRgKEQYcAisCAZ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffff
Perceptual Hash:b333cc8c3333cccc
Difference Hash:0000000808000000
Wavelet Hash:0f0f3f27040c0c0c
Color Hash:#e0836c

Other Hashes

Crop Resistant:0000000808000000

Scan History

Scan history not available

Unable to load historical scan data