109.232.223.115 Threat Intelligence and Host Information

Share on:

Aug 11, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 109.232.223.115 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 25/100

Host and Network Information

Tags: Malicious IP, Nextray, blacklist, botnet, bruteforce, cyber security, digital ocean, ioc, malicious, mirai, mssql, nmap, phishing, port-scan, scan, smb, tcp, tsec
View other sources: Spamhaus VirusTotal
Country: Turkey
Network: AS42807 aerotek bilisim sanayi ve ticaret as
Noticed: 1 times
Protcols Attacked: mssql
Countries Attacked: Australia, Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Singapore, Turkey, Ukraine, United Kingdom, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: mkp.sahaturu.com etikraker.sahaturu.com sahaturu.com etibtif.sahaturu.com kimyapsan.sahaturu.com eticikolata.sahaturu.com demo.sahaturu.com diversey.sahaturu.com egekimya.sahaturu.com bomi.sahaturu.com egekim.uetds4g.com gelistirme.uetds4g.com ary.uetds4g.com newtest.uetds4g.com fettest.uetds4g.com tektibbi.uetds4g.com 4gtmgd.com.tr ect.uetds4g.com demoatik.uetds4g.com 4gkampus.com turanlarcevre.uetds4g.com dogaatik.uetds4g.com duyas.uetds4g.com interroyal.uetds4g.com guneslilojistik.uetds4g.com itcantalya.uetds4g.com miroglu.uetds4g.com venteslojistik.uetds4g.com kursanakliyat.uetds4g.com konatikplastik.uetds4g.com thermologlojistik.uetds4g.com ustaogullari.uetds4g.com lodi.uetds4g.com itctektibbi.uetds4g.com itcankara.uetds4g.com lojistikmarket.uetds4g.com uetds4g.com www.uetds4g.com demo.uetds4g.com 4gyazilim.com trabzonhabercisi.com tongucakademi.com butcha.com agrotalya.com egeauto.com turkeytravelers.com viscol.com.tr

Open Ports Detected

110 1433 25 443 465 587 80 8880 993 995

Map

Whois Information

inetnum: 109.232.220.0 - 109.232.223.255
netname: TURHOST-NET
descr: Turhost.com Cloud Servers Network 2
descr: Please send email to “[email protected]” for complaints
descr: regarding portscans, DoS attacks and spam.
country: TR
admin-c: DEY101-RIPE
tech-c: DEY101-RIPE
status: ASSIGNED PA
mnt-by: AEROTEK-MNT
created: 2011-04-26T08:21:45Z
last-modified: 2012-12-27T17:16:33Z
person: Dogan Ender
address: Carsi Yapi F Blok No.6 Sanayi Mh. Pk.41040 Izmit/Kocaeli
phone: +90 (262) 324 55 55
nic-hdl: DEY101-RIPE
mnt-by: AEROTEK-MNT
created: 2012-12-27T17:10:19Z
last-modified: 2020-03-27T09:38:28Z
route: 109.232.216.0/21
descr: Aerotek LTD Network 2
origin: AS42807
mnt-by: AEROTEK-MNT
created: 2009-12-24T08:53:06Z
last-modified: 2009-12-24T08:53:06Z

Links to attack logs