12.0.0.1 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 12.0.0.1 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 10/100

Host and Network Information

• View other sources: Spamhaus VirusTotal

• Country: United States
• Network: AS7018 att services inc
• Noticed: 1 times
• Protocols Attacked: SSH
• Passive DNS Results: uos-kip.online 5023698.com 20236932.com 233264.com 20235631.com www.importsbarber.com importsbarber.com benpelu.com prodigysystems.3cx.ae ommm.gmbh businessquest.in electropan.com cameraburari.xyz cashfiesta.xyz streaiot.xyz usapi.xyz www.pzcgw.cn contactmail.icu localhost.directasia.co.th zamucca.com ssp.pzcgw.cn limokola.info qy0763.cn

Malware Detected on Host

Count: 16 8dc104cb5e98b58ed56689db76b19aedd6ff70cd48004fc9cdd7e9fb7951bbea b60c442eacb70a144e52f1acd5169e6dc9ac46b401a79011ff756a65ad309b42 bdee64cf68185f579f5c0a80a8c5074fddd7fb1506f37841b0f76f95552630c5 714c1dc298a1954e1e5b3e3f558ff9be58245c20e02025a61c4241900b0c7a48 221bfdf392fd311f922567674557f2ad9c19a460c16c5f57a67be05b515f5c5a 4dd7fb92c0a3bd7e05abf60ccd7e5082cbe93761ab5feeb61368ef1a3b1b3289 1deee2c930d54616adacc5f76251ec637bc54e4244c7cef1cd176f39a8c76ca6 a6a1b5c1c95b05bda7cd6770dfe48e1a655ffa943882bfff1c34b1dcfad511d0 467b6eddc07c4277be1fe1f1e834394c54814a9fb5a592e49898e9e67030527e 3e633d25e009cf37a99b231333def4d14cee927f74eb15d61903030b01664e2b

Map

Whois Information

• NetRange: 12.0.0.0 - 12.255.255.255
• CIDR: 12.0.0.0/8
• NetName: ATT
• NetHandle: NET-12-0-0-0-1
• Parent: NET12 (NET-12-0-0-0-0)
• NetType: Direct Allocation
• OriginAS:
• Organization: AT&T Services, Inc. (ATTW-Z)
• RegDate: 1983-08-23
• Updated: 2013-12-19
• Comment: For abuse issues contact abuse@att.net
• Ref: https://rdap.arin.net/registry/ip/12.0.0.0
• OrgName: AT&T Services, Inc.
• OrgId: ATTW-Z
• Address: 200 S. Laurel AVE.
• City: MIDDLETOWN
• StateProv: NJ
• PostalCode: 07748
• Country: US
• RegDate: 2009-12-18
• Updated: 2022-02-08
• Comment: Contact AT&T Abuse ( abuse@att.net ) for policy abuse issues.
• Comment: All policy abuse issues sent to other POCs will be disregarded.
• Ref: https://rdap.arin.net/registry/entity/ATTW-Z
• OrgTechHandle: ZS44-ARIN
• OrgTechName: IPAdmin-ATT Internet Services
• OrgTechPhone: +1-888-510-5545
• OrgTechEmail: ipadmin@att.com
• OrgTechRef: https://rdap.arin.net/registry/entity/ZS44-ARIN
• OrgTechHandle: ICC-ARIN
• OrgTechName: IP Team
• OrgTechPhone: +1-888-876-2382
• OrgTechEmail: rm-ipspecialist@att.com
• OrgTechRef: https://rdap.arin.net/registry/entity/ICC-ARIN
• OrgAbuseHandle: ATTAB-ARIN
• OrgAbuseName: ATT Abuse
• OrgAbusePhone: +1-999-999-9999
• OrgAbuseEmail: abuse@att.net
• OrgAbuseRef: https://rdap.arin.net/registry/entity/ATTAB-ARIN
• OrgTechHandle: IPSWI-ARIN
• OrgTechName: IP SWIP
• OrgTechPhone: +1-888-613-6330
• OrgTechEmail: swipid@icorefep2.noc.att.com
• OrgTechRef: https://rdap.arin.net/registry/entity/IPSWI-ARIN
• OrgRoutingHandle: JB3310-ARIN
• OrgRoutingName: Borkenhagen, Jay C.
• OrgRoutingPhone: +1-732-420-2526
• OrgRoutingEmail: jb3310-arin@oz.mt.att.com
• OrgRoutingRef: https://rdap.arin.net/registry/entity/JB3310-ARIN
• RTechHandle: IAA17-ARIN
• RTechName: IP Address Administration
• RTechPhone: +1-732-420-2071
• RTechEmail: addrmgt@qsun.att.com
• RTechRef: https://rdap.arin.net/registry/entity/IAA17-ARIN
• NetRange: 12.0.0.0 - 12.0.0.255
• CIDR: 12.0.0.0/24
• NetName: ATT-LIN850-0
• NetHandle: NET-12-0-0-0-2
• Parent: ATT (NET-12-0-0-0-1)
• NetType: Reassigned
• OriginAS:
• Organization: ATT LINCROFT ORT (ALO-3)
• RegDate: 2004-01-06
• Updated: 2004-01-06
• Ref: https://rdap.arin.net/registry/ip/12.0.0.0
• OrgName: ATT LINCROFT ORT
• OrgId: ALO-3
• Address: 12976 HOLLENBERG
• City: BRIDGETON
• StateProv: MO
• PostalCode: 63044
• Country: US
• RegDate: 2003-08-22
• Updated: 2011-09-24
• Ref: https://rdap.arin.net/registry/entity/ALO-3
• OrgAbuseHandle: CMU8-ARIN
• OrgAbuseName: Muhlhausen, Carl
• OrgAbusePhone: +1-732-576-3052
• OrgAbuseEmail: ledzep@att.com
• OrgAbuseRef: https://rdap.arin.net/registry/entity/CMU8-ARIN
• OrgTechHandle: CMU8-ARIN
• OrgTechName: Muhlhausen, Carl
• OrgTechPhone: +1-732-576-3052
• OrgTechEmail: ledzep@att.com
• OrgTechRef: https://rdap.arin.net/registry/entity/CMU8-ARIN

Links to attack logs

****** bruteforce-files-list-2020-11-07 ****** ******