122.155.165.191 Threat Intelligence and Host Information

Share on:
May 05, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Likely Malicious Host 🟠 60/100

Host and Network Information

  • Mitre ATT&CK IDs: T1498 - Network Denial of Service
  • Tags: Cyclops, DDOS, Gamardeon, HermeticWiper, IsaacWiper, KillNet, Nextray, PartyTicket, RDP, SSH, WhisperGate, abuse, attack ddos, botnet, bruteforce, cyber security, ddos, fraud, ioc, ipqs, ipqualityscore, list ips, malicious, phishing, russia, russian, ukraine, web attack
  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: sblam, sslproxies_30d, stopforumspam, stopforumspam_180d, stopforumspam_30d, stopforumspam_365d, stopforumspam_7d, stopforumspam_90d

  • Country: Thailand
  • Network: AS9335 cat telecom public company limited
  • Noticed: 37 times
  • Protcols Attacked: SSH
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Russian Federation, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: allinoneproxy.ga

Malware Detected on Host

Count: 8 f4c0e951ac66b09816f04c3e256ef94a78f8d1285448bb7c64d1f396f99e1201 88cb6da94b1ff0e563cd656bc37eb1aac3506f852cb333b378d007e1d699d63b c4ad00d7360fc45e1c35cb76b174818ad6462f13fa9b66cec85e1774a170b674 f58d715578a96d5777b4688ee296de6be64866f0a9b32158338aea5e7aac0352 f80d72b134d93fcf6e83b06c461e5b02764fa3f769319c4af8b580dfe657ca58 3f38c75a9605c82fb17f66d3ed233207f4475a1e0444020ec39d704be703250e 3f38c75a9605c82fb17f66d3ed233207f4475a1e0444020ec39d704be703250e 69e399a425d76452096c37c0a37550dc199328f30d2c53c986d0387c851ee31f

Open Ports Detected

111 80

Map

Whois Information

  • inetnum: 122.155.160.0 - 122.155.191.255
  • netname: CAT-IDC2-Service
  • descr: CAT IDC2 14th floor CAT IDC2 14th floor(This space is statically assigned.)
  • country: TH
  • admin-c: SC1450-AP
  • tech-c: CS416-AP
  • abuse-c: AC1657-AP
  • status: ALLOCATED NON-PORTABLE
  • notify: [email protected]
  • mnt-by: MAINT-TH-THIX-CAT
  • mnt-lower: MAINT-TH-THIX-CAT
  • mnt-routes: MAINT-TH-THIX-CAT
  • mnt-irt: IRT-CAT-TH
  • last-modified: 2021-01-27T22:15:19Z
  • irt: IRT-CAT-TH
  • address: National Telecom Public Company Limited (CAT)
  • address: NT Tower Bangkok Bangkok 10500
  • address: Thailand
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: TC476-AP
  • tech-c: IC174-AP
  • mnt-by: MAINT-TH-THIX-CAT
  • last-modified: 2023-04-26T11:13:08Z
  • role: ABUSE CATTH
  • address: National Telecom Public Company Limited (CAT)
  • address: NT Tower Bangkok Bangkok 10500
  • address: Thailand
  • country: ZZ
  • phone: +000000000
  • e-mail: [email protected]
  • admin-c: TC476-AP
  • tech-c: IC174-AP
  • nic-hdl: AC1657-AP
  • abuse-mailbox: [email protected]
  • mnt-by: APNIC-ABUSE
  • last-modified: 2023-04-26T11:13:26Z
  • person: CAT-IDC Spamming tracking team
  • nic-hdl: CS416-AP
  • e-mail: [email protected]
  • address: Internet data center department CAT Tower floor 13 72 charenkrung Rd. Bangrak Bangkok
  • phone: +66-210-41240
  • fax-no: +66-210-41244
  • country: TH
  • mnt-by: MAINT-NEW
  • last-modified: 2009-12-11T10:30:13Z
  • person: support CAT IDC
  • nic-hdl: SC1450-AP
  • e-mail: [email protected]
  • address: CAT-IDC Data Comm. Dept.(IDC)
  • address: CAT Telecom Public Company Ltd,
  • address: 72 Charoenkrung Road Bangrak Bangkok THAILAND 10501
  • address:
  • phone: +66-2-6141240-3
  • fax-no: +66-2-6142270
  • country: TH
  • mnt-by: MAINT-NEW
  • last-modified: 2008-09-04T07:48:55Z

Links to attack logs

roxy-ip-list-2023-05-03