104.223.153.16 Threat Intelligence and Host Information

Share on:
Jan 11, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 104.223.153.16 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 15/100

Host and Network Information

  • View other sources: Spamhaus VirusTotal

  • Country: United States
  • Network: AS46573 layerhost
  • Noticed: 1 times
  • Protcols Attacked: SSH

Open Ports Detected

10000 10243 10554 11371 13579 14147 14265 14344 16010 16030 16992 16993 18081 18245 19000 19071 20000 21379 443 444 5555 5560 5569 5590 5593 5596 5597 5601 5603 5800 5801 5853 5900 5901 5909 5910 5938 5984 5985 5986 6000 6001 6003 6005 6010 6080 6102 6161 6352 6372 6379 6443 6511 6600 6601 6633 6650 6653 6664 6666 6668 6697 6789 7005 7071 7081 7090 7415 7434 7443 7445 7474 7537 7547 7548 7634 7657 7777 7778 7779 7989 7998 7999 8000 8001 8003 8005 8008 8009 8010 8011 8017 8031 8032 8038 8040 8044 8047 8048 8051 8055 8058 8060 8066 8069 8071 8080 8081 8083 8084 8085 8086 8087 8089 8090 8093 8098 8099 8101 8107 8109 8112 8123 8126 8139 8140 8180 8184 8200 8238 8251 8252 8291 8333 8334 8409 8411 8422 8424 8443 8448 8500 8545 8554 8575 8590 8649 8728 8784 8787 8800 8807 8809 8811 8812 8813 8814 8820 8830 8834 8835 8836 8838 8840 8849 8855 8880 8888 8889 8935 8990 9000 9001 9002 9005 9007 9009 9013 9019 9022 9025 9031 9035 9037 9038 9042 9044 9046 9047 9051 9080 9090 9091 9095 9098 9100 9101 9102 9104 9136 9151 9160 9191 9200 9205 9208 9210 9213 9222 9295 9299 9301 9306 9308 9309 9418 9443 9530 9550 9595 9600 9690 9761 9800 9861 9869 9898 9943 9944 9981 9994 9998 9999

CVEs Detected

CVE-2018-16845 CVE-2019-20372 CVE-2019-9511 CVE-2019-9513 CVE-2019-9516 CVE-2021-23017 CVE-2021-3618 CVE-2023-44487

Map

Whois Information

  • NetRange: 104.223.128.0 - 104.223.255.255
  • CIDR: 104.223.128.0/17
  • NetName: LAYER-HOST
  • NetHandle: NET-104-223-128-0-1
  • Parent: NET104 (NET-104-0-0-0-0)
  • NetType: Direct Allocation
  • OriginAS: AS46573
  • Organization: LayerHost (LH-363)
  • RegDate: 2014-10-02
  • Updated: 2020-04-20
  • Ref: https://rdap.arin.net/registry/ip/104.223.128.0
  • OrgName: LayerHost
  • OrgId: LH-363
  • Address: 900 N. Alameda Street.
  • City: Los Angeles
  • StateProv: CA
  • PostalCode: 90012
  • Country: US
  • RegDate: 2020-01-27
  • Updated: 2020-04-29
  • Comment: https://www.layerhost.com
  • Comment: Standard NOC Hours 24/7
  • Comment: +1-833-247-HOST (4678)
  • Ref: https://rdap.arin.net/registry/entity/LH-363
  • OrgAbuseHandle: ABUSE5258-ARIN
  • OrgAbuseName: Abuse NOC
  • OrgAbusePhone: +1-833-247-4678
  • OrgAbuseEmail: [email protected]
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE5258-ARIN
  • OrgRoutingHandle: NOC33132-ARIN
  • OrgRoutingName: Noc
  • OrgRoutingPhone: +1-833-247-4678
  • OrgRoutingEmail: [email protected]
  • OrgRoutingRef: https://rdap.arin.net/registry/entity/NOC33132-ARIN
  • OrgDNSHandle: NOC33132-ARIN
  • OrgDNSName: Noc
  • OrgDNSPhone: +1-833-247-4678
  • OrgDNSEmail: [email protected]
  • OrgDNSRef: https://rdap.arin.net/registry/entity/NOC33132-ARIN
  • OrgNOCHandle: NOC33132-ARIN
  • OrgNOCName: Noc
  • OrgNOCPhone: +1-833-247-4678
  • OrgNOCEmail: [email protected]
  • OrgNOCRef: https://rdap.arin.net/registry/entity/NOC33132-ARIN
  • OrgTechHandle: NOC33132-ARIN
  • OrgTechName: Noc
  • OrgTechPhone: +1-833-247-4678
  • OrgTechEmail: [email protected]
  • OrgTechRef: https://rdap.arin.net/registry/entity/NOC33132-ARIN
  • NetRange: 104.223.153.0 - 104.223.153.255
  • CIDR: 104.223.153.0/24
  • NetName: LAYERHOST
  • NetHandle: NET-104-223-153-0-1
  • Parent: LAYER-HOST (NET-104-223-128-0-1)
  • NetType: Reassigned
  • OriginAS: AS46573
  • Customer: LayerHost (C07555922)
  • RegDate: 2020-05-24
  • Updated: 2020-05-24
  • Comment: https://www.layerhost.com
  • Comment: [email protected]
  • Comment: +1-833-247-4678
  • Ref: https://rdap.arin.net/registry/ip/104.223.153.0
  • CustName: LayerHost
  • Address: 900 N. Alameda Street.
  • City: Los Angeles
  • StateProv: CA
  • PostalCode: 90012
  • Country: US
  • RegDate: 2020-05-24
  • Updated: 2020-05-24
  • Ref: https://rdap.arin.net/registry/entity/C07555922
  • OrgAbuseHandle: ABUSE5258-ARIN
  • OrgAbuseName: Abuse NOC
  • OrgAbusePhone: +1-833-247-4678
  • OrgAbuseEmail: [email protected]
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE5258-ARIN
  • OrgRoutingHandle: NOC33132-ARIN
  • OrgRoutingName: Noc
  • OrgRoutingPhone: +1-833-247-4678
  • OrgRoutingEmail: [email protected]
  • OrgRoutingRef: https://rdap.arin.net/registry/entity/NOC33132-ARIN
  • OrgDNSHandle: NOC33132-ARIN
  • OrgDNSName: Noc
  • OrgDNSPhone: +1-833-247-4678
  • OrgDNSEmail: [email protected]
  • OrgDNSRef: https://rdap.arin.net/registry/entity/NOC33132-ARIN
  • OrgNOCHandle: NOC33132-ARIN
  • OrgNOCName: Noc
  • OrgNOCPhone: +1-833-247-4678
  • OrgNOCEmail: [email protected]
  • OrgNOCRef: https://rdap.arin.net/registry/entity/NOC33132-ARIN
  • OrgTechHandle: NOC33132-ARIN
  • OrgTechName: Noc
  • OrgTechPhone: +1-833-247-4678
  • OrgTechEmail: [email protected]
  • OrgTechRef: https://rdap.arin.net/registry/entity/NOC33132-ARIN

Links to attack logs

nmap-scanning-list-2021-08-22 nmap-scanning-list-2021-08-25 ** nmap-scanning-list-2021-08-26 nmap-scanning-list-2021-04-08 ** nmap-scanning-list-2021-04-06 ** nmap-scanning-list-2021-04-05 nmap-scanning-list-2021-08-29