103.186.117.142 Threat Intelligence and Host Information

Oct 08, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 103.186.117.142 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 37/100

Host and Network Information

  • Mitre ATT&CK IDs: T1110 - Brute Force

  • Tags: brute force, Bruteforce, Brute-Force, rdp, Remcos, remote access trojan, scanners, ssh, SSH, vultr

  • View other sources: Spamhaus VirusTotal

  • Country: Malaysia
  • Network:
  • Noticed: 33 times
  • Protocols Attacked: ssh
  • Countries Attacked: Australia, Poland
  • Passive DNS Results: oceansss.duckdns.org vouch1608.servequake.com

Malware Detected on Host

Count: 2 c4dd9ec83dc0b304101fa6b2f37d93aae8921bab88ca6e49a6a8eb18d390ed79 e96943c4b3379997678c78db2928217b11e31082b974a7d05cb34994eec0302c

Open Ports Detected

1989 2000 22 3000

Whois Information

  • inetnum: 103.186.116.0 - 103.186.117.255
  • netname: GBCLOUDSDNBHD-MY
  • descr: GB Cloud Sdn Bhd
  • country: MY
  • org: ORG-GCSB2-AP
  • admin-c: GCSB2-AP
  • tech-c: GCSB2-AP
  • abuse-c: AG1156-AP
  • status: ALLOCATED PORTABLE
  • mnt-by: APNIC-HM
  • mnt-lower: MAINT-GBCLOUDSDNBHD-MY
  • mnt-routes: MAINT-GBCLOUDSDNBHD-MY
  • mnt-irt: IRT-GBCLOUDSDNBHD-MY
  • last-modified: 2022-04-19T07:12:41Z
  • irt: IRT-GBCLOUDSDNBHD-MY
  • address: F-2-2, Block F, CBD Perdana 3,, Cyberjaya Selangor 63000
  • e-mail: abuse@gbcloud.net
  • abuse-mailbox: abuse@gbcloud.net
  • admin-c: GCSB2-AP
  • tech-c: GCSB2-AP
  • mnt-by: MAINT-GBCLOUDSDNBHD-MY
  • last-modified: 2025-09-04T07:54:29Z
  • organisation: ORG-GCSB2-AP
  • org-name: GB Cloud Sdn Bhd
  • org-type: LIR
  • country: MY
  • address: F-2-2, Block F, CBD Perdana 3,
  • phone: +603-86865540
  • fax-no: +603-86865541
  • e-mail: noc@gbcloud.net
  • mnt-ref: APNIC-HM
  • mnt-by: APNIC-HM
  • last-modified: 2023-09-05T02:18:50Z
  • role: ABUSE GBCLOUDSDNBHDMY
  • country: ZZ
  • address: F-2-2, Block F, CBD Perdana 3,, Cyberjaya Selangor 63000
  • phone: +000000000
  • e-mail: abuse@gbcloud.net
  • admin-c: GCSB2-AP
  • tech-c: GCSB2-AP
  • nic-hdl: AG1156-AP
  • abuse-mailbox: abuse@gbcloud.net
  • mnt-by: APNIC-ABUSE
  • last-modified: 2025-05-28T00:58:31Z
  • role: GB Cloud Sdn Bhd administrator
  • address: F-2-2, Block F, CBD Perdana 3,, Cyberjaya Selangor 63000
  • country: MY
  • phone: +603-86865540
  • fax-no: +603-86865541
  • e-mail: abuse@gbcloud.net
  • admin-c: GCSB2-AP
  • tech-c: GCSB2-AP
  • nic-hdl: GCSB2-AP
  • mnt-by: MAINT-GBCLOUDSDNBHD-MY
  • last-modified: 2022-04-13T23:31:35Z
  • route: 103.186.117.0/24
  • origin: AS132372
  • descr: GB Cloud Sdn Bhd
  • mnt-by: MAINT-GBCLOUDSDNBHD-MY
  • last-modified: 2022-04-20T10:20:20Z

Links to attack logs

****** vultrwarsaw-ssh-bruteforce-ip-list-2023-07-20 ****** ******

Share on: