116.90.229.186 Threat Intelligence and Host Information

Apr 27, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 116.90.229.186 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 67/100

Host and Network Information

Mitre ATT&CK IDs: T1498 - Network Denial of Service, T1499.002 - Service Exhaustion Flood, T1499 - Endpoint Denial of Service
Tags: cc.py, cyber security, DDoS, DDOS, HEAD Floods, ioc, Killnet, KillNet, malicious, Nextray, phishing, T1498, T1499
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_net_ua, socks_proxy_1d, socks_proxy_30d, socks_proxy_7d, sslproxies_30d, sslproxies_7d

Country: Nepal
Network:
Noticed: 50 times
Protocols Attacked: Anonymous Proxy
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 2 128d5ddb2b699233f3e3e1f064c939bd481e9ead89b8f917c2466d8675ae10b7 88cb6da94b1ff0e563cd656bc37eb1aac3506f852cb333b378d007e1d699d63b

Open Ports Detected

4444

Map

Whois Information

inetnum: 116.90.224.0 - 116.90.231.255
netname: WEBSURFER-NP
descr: Websurfer Nepal Communication System Pvt. Ltd
country: NP
admin-c: AW601-AP
tech-c: AW601-AP
abuse-c: AW880-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-NP-WEBSURFER
mnt-irt: IRT-WEBSURFER-COMM-NP
last-modified: 2022-03-14T05:38:35Z
irt: IRT-WEBSURFER-COMM-NP
address: 3rd Flr, Shree Raj Bhawan
address: P.O. Box 7940
address: Subidhanagar, Tinkune
address: Kathmandu, Nepal
e-mail: apnic-wsn@websurfer.com.np
abuse-mailbox: abuse@websurfer.com.np
admin-c: AW601-AP
tech-c: AW601-AP
mnt-by: MAINT-NP-WEBSURFER
last-modified: 2025-03-17T11:08:43Z
role: ABUSE WEBSURFERCOMMNP
country: ZZ
address: 3rd Flr, Shree Raj Bhawan
address: P.O. Box 7940
address: Subidhanagar, Tinkune
address: Kathmandu, Nepal
phone: +000000000
e-mail: apnic-wsn@websurfer.com.np
admin-c: AW601-AP
tech-c: AW601-AP
nic-hdl: AW880-AP
abuse-mailbox: abuse@websurfer.com.np
mnt-by: APNIC-ABUSE
last-modified: 2025-03-17T11:08:53Z
person: APNIC WSN
address: 3rd Floor, Shree Raj Bhawan, Subidhanagar
address: Tinkune, Kathmandu, Nepal.
country: NP
phone: +977-1-5199093
e-mail: apnic-wsn@websurfer.com.np
nic-hdl: AW601-AP
mnt-by: MAINT-NP-WEBSURFER
last-modified: 2016-12-19T10:34:02Z
route: 116.90.229.0/24
descr: Internet Service Provider
origin: AS24550
mnt-by: MAINT-NP-WEBSURFER
last-modified: 2014-05-28T04:34:47Z

Links to attack logs

Share on: