103.249.235.11 Threat Intelligence and Host Information

Oct 28, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 103.249.235.11 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 30/100

Host and Network Information

  • Mitre ATT&CK IDs: T1595 - Active Scanning

  • Tags: bruteforce, mssql, scan, sip, sipvicious, ssh, vultr

  • View other sources: Spamhaus VirusTotal

  • Country: India
  • Network:
  • Noticed: 10 times
  • Protocols Attacked: mssql
  • Countries Attacked: Australia, Poland
  • Passive DNS Results: gstvnasconnect.direct.quickconnect.to

Open Ports Detected

10022 554 8080 8101 8102 8103 8104 8105 8106 8108 8109 8110 8111 8112 8113 8114 8118 8119 8122 8123 8126 8127 8129 8130 8131 8132 8133 8135 8136 8137 8138 8139 8140 8141 8142 8143 8144 8145 8146 8147 8148 8149 8150 8151 8152 8153 8154 8155 8156 8157 8158 8159 8160 8161 8162 8163 8164 8165 8166 8167 8168 8169 8170 8171 8172 8173 8174 8176 8178 8179 8180 8181 8182 8183 8184 8185 8186 8188 8189 8190 8191 8192 8193 8195 8196 8197 8198 8200

Map

Whois Information

  • inetnum: 103.249.232.0 - 103.249.235.255
  • netname: GUJARATKUTCHNETWORK
  • descr: Gtpl Broadband Pvt. Ltd.
  • admin-c: RS322-AP
  • tech-c: RS322-AP
  • country: IN
  • mnt-by: MAINT-IN-IRINN
  • mnt-routes: MAINT-IN-IRINN
  • mnt-lower: MAINT-IN-IRINN
  • mnt-irt: IRT-GTPL-IN
  • status: ALLOCATED PORTABLE
  • last-modified: 2025-08-11T22:52:23Z
  • irt: IRT-GTPL-IN
  • address: 202, shahjanand Complex
  • address: Opp. Swaminarayan Temple
  • address: Shahibag Ahmedabad Gujarat
  • e-mail: ip.admin@gtpl.net
  • abuse-mailbox: abuse.report@gtpl.net
  • admin-c: IA301-AP
  • tech-c: IA301-AP
  • mnt-by: MAINT-IN-GTPL
  • mnt-by: MAINT-IN-IRINN
  • last-modified: 2025-09-27T11:25:49Z
  • person: Rutul Shah
  • address: 202, shahjanand Complex
  • address: Opp. Swaminarayan Temple
  • address: Shahibag Ahmedabad Gujarat
  • country: IN
  • phone: +91-9727725806
  • e-mail: ip.admin@gtpl.net
  • nic-hdl: RS322-AP
  • mnt-by: MAINT-IN-GTPL
  • mnt-by: MAINT-IN-IRINN
  • last-modified: 2025-09-27T09:44:07Z
  • route: 103.249.235.0/24
  • descr: ANTRIKSSH CABLE SERVICES Pvt. Ltd.
  • origin: AS45916
  • country: IN
  • notify: abuse.report@gtpl.net
  • mnt-by: MAINT-IN-GTPL
  • mnt-by: MAINT-IN-IRINN
  • mnt-routes: MAINT-IN-GTPL
  • last-modified: 2025-09-27T09:51:59Z

Links to attack logs

****** vultrwarsaw-mssql-bruteforce-ip-list-2024-04-09 vultrwarsaw-mssql-bruteforce-ip-list-2024-05-05 vultrwarsaw-mssql-bruteforce-ip-list-2024-04-12 vultrwarsaw-mssql-bruteforce-ip-list-2023-08-01 vultrwarsaw-mssql-bruteforce-ip-list-2024-04-13 vultrwarsaw-mssql-bruteforce-ip-list-2024-06-14 ****** vultrwarsaw-mssql-bruteforce-ip-list-2024-04-20 vultrwarsaw-mssql-bruteforce-ip-list-2024-06-11 ******

Share on: