122.155.0.205 Threat Intelligence and Host Information

Share on:

Mar 17, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 122.155.0.205 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Known Malicious Host 🔴 87/100

Host and Network Information

Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110.004 - Credential Stuffing, T1110 - Brute Force
Tags: 0xBFKX, attack, brute force, bruteforce, Bruteforce, Brute-Force, cowrie, cyber security, fail2ban, ioc, login, malicious, Nextray, phishing, rdp, scanner, scanners, ssh, SSH, Telnet, vultr
JARM: 04d02d00004d04d04c04d02d04d04d9674c6b4e623ae36cc2d998e99e2262e
View other sources: Spamhaus VirusTotal
Contained within other IP sets: b3b0, blocklist_de, blocklist_de_ssh, blocklist_de_strongips, greensnow, haley_ssh
Country: Thailand
Network: AS9335 cat telecom public company limited
Noticed: 50 times
Protocols Attacked: ssh
Countries Attacked: Australia, Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: www.xn–42cfc1cya6c0bxeo9lrd.com xn–42cfc1cya6c0bxeo9lrd.com www.onlinebureausystem.com www.nikomlamnarai.go.th nikomlamnarai.go.th chatturat.go.th host1.bgs.co.th thungbulang.go.th appointment.police.go.th onlinebureausystem.com nongkainum.go.th nongsaeng.go.th

Open Ports Detected

10443 443 53 60001 80 8880 8887 8999 9998 9999

CVEs Detected

CVE-2007-2768 CVE-2008-3844 CVE-2016-20012 CVE-2017-15906 CVE-2018-15473 CVE-2018-15919 CVE-2018-16845 CVE-2018-20685 CVE-2019-20372 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2019-9511 CVE-2019-9513 CVE-2019-9516 CVE-2020-14145 CVE-2020-15778 CVE-2021-23017 CVE-2021-3618 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408 CVE-2023-44487 CVE-2023-48795 CVE-2023-51384 CVE-2023-51385 CVE-2023-51767

Map

Whois Information

inetnum: 122.155.0.0 - 122.155.15.255
netname: CAT-IDC-Service
descr: CAT TELECOM Data Comm. Dept, IDC Office
descr: send spam abuse to [email protected]
country: TH
admin-c: SC1450-AP
tech-c: TC476-AP
tech-c: CS416-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2009-12-11T10:40:15Z
person: CAT-IDC Spamming tracking team
nic-hdl: CS416-AP
e-mail: [email protected]
address: Internet data center department CAT Tower floor 13 72 charenkrung Rd. Bangrak Bangkok
phone: +66-210-41240
fax-no: +66-210-41244
country: TH
mnt-by: MAINT-NEW
last-modified: 2009-12-11T10:30:13Z
person: support CAT IDC
nic-hdl: SC1450-AP
e-mail: [email protected]
address: CAT-IDC Data Comm. Dept.(IDC)
address: CAT Telecom Public Company Ltd,
address: 72 Charoenkrung Road Bangrak Bangkok THAILAND 10501
address:
phone: +66-2-6141240-3
fax-no: +66-2-6142270
country: TH
mnt-by: MAINT-NEW
last-modified: 2008-09-04T07:48:55Z
person: THIX network staff CAT Telecom
nic-hdl: TC476-AP
e-mail: [email protected]
address: Data Comm. Dept. National Telecom Public Company Limited
address: NT Tower
address: 72 Charoenkrung Road Bangrak Bangkok THAILAND 10501
phone: +66-2-6142374
fax-no: +66-2-6142270
country: TH
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2022-09-05T09:49:38Z
route: 122.155.0.0/24
origin: AS9335
descr: CAT Telecom Public Company Limited
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2023-01-17T03:21:25Z

Links to attack logs