128.199.207.45 Threat Intelligence and Host Information

Share on:

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Host and Network Information

  • Mitre ATT&CK IDs: T1110 - Brute Force
  • Tags: Brute-Force, Bruteforce, SSH, Scanner, Telnet, Webattack, attack, bruteforce, cowrie, fail2ban, la, lafusioncenter, login, louisiana, scanner, scanning, smtp, ssh, tcp, tsec
  • View other sources: Spamhaus VirusTotal
  • Contained within other IP sets: blocklist_de,* Contained within other IP sets: blocklist_de_ssh,* Contained within other IP sets: greensnow,* Contained within other IP sets: haley_ssh

  • Country: Singapore
  • Network: AS14061 digitalocean llc
  • Noticed: 50 times
  • Protcols Attacked: SSH
  • Countries Attacked: Germany
  • Passive DNS Results: accounts.smartcare.ph th-beta.dev-clinic.smartcare.ph th.smartcare.ph rtcstandalone-dev.smartcare.ph rtcdev-clinic.smartcare.ph api-dev-clinic.smartcare.ph dev-clinic.smartcare.ph

Malware Detected on Host

Count: 3 54f5de247ccd4a0bc65f24146673b604d161c9af57c430c42f96f0aba5c4295f 54f5de247ccd4a0bc65f24146673b604d161c9af57c430c42f96f0aba5c4295f ae39f1c8ee1ee086142ae4481e50488ed83294030cdf301e36d66524521b6ca8

Open Ports Detected

111 22 3306 4040 443 80 81 82 83 84 9001 9002

CVEs Detected

CVE-2017-15906 CVE-2018-15919

Map

Whois Information

  • NetRange: 128.199.0.0 - 128.199.255.255
  • CIDR: 128.199.0.0/16
  • NetName: RIPE-ERX-128-199-0-0
  • NetHandle: NET-128-199-0-0-1
  • Parent: NET128 (NET-128-0-0-0-0)
  • NetType: Early Registrations, Transferred to RIPE NCC
  • OriginAS:
  • Organization: RIPE Network Coordination Centre (RIPE)
  • RegDate: 2007-03-20
  • Updated: 2007-03-20
  • Comment: These addresses have been further assigned to users in
  • Comment: the RIPE NCC region. Contact information can be found in
  • Ref: https://rdap.arin.net/registry/ip/128.199.0.0
  • OrgName: RIPE Network Coordination Centre
  • OrgId: RIPE
  • Address: P.O. Box 10096
  • City: Amsterdam
  • StateProv:
  • PostalCode: 1001EB
  • Country: NL
  • RegDate:
  • Updated: 2013-07-29
  • Ref: https://rdap.arin.net/registry/entity/RIPE
  • OrgAbuseHandle: ABUSE3850-ARIN
  • OrgAbuseName: Abuse Contact
  • OrgAbusePhone: +31205354444
  • OrgAbuseEmail: [email protected]
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
  • OrgTechHandle: RNO29-ARIN
  • OrgTechName: RIPE NCC Operations
  • OrgTechPhone: +31 20 535 4444
  • OrgTechEmail: [email protected]
  • OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
  • inetnum: 128.199.0.0 - 128.199.255.255
  • netname: DigitalOcean
  • descr: DigitalOcean, LLC
  • country: US
  • admin-c: PT7353-RIPE
  • tech-c: PT7353-RIPE
  • status: LEGACY
  • mnt-by: digitalocean
  • mnt-domains: digitalocean
  • mnt-routes: digitalocean
  • created: 2004-07-20T10:29:14Z
  • last-modified: 2020-03-31T14:17:22Z
  • org: ORG-DOI2-RIPE
  • organisation: ORG-DOI2-RIPE
  • org-name: DigitalOcean, LLC
  • country: US
  • org-type: LIR
  • address: 101 Avenue of the Americas, 10th Floor
  • address: New York
  • address: 10013
  • address: UNITED STATES
  • phone: +1 888 890 6714
  • mnt-ref: digitalocean
  • mnt-ref: RIPE-NCC-HM-MNT
  • mnt-by: RIPE-NCC-HM-MNT
  • mnt-by: digitalocean
  • abuse-c: AD10778-RIPE
  • language: EN
  • created: 2012-11-29T14:59:01Z
  • last-modified: 2020-12-16T13:24:44Z
  • person: Network Operations
  • address: 101 Ave of the Americas, 10th Floor
  • address: New York, NY, 10013
  • address: United States of America
  • phone: +13478756044
  • nic-hdl: PT7353-RIPE
  • mnt-by: digitalocean
  • created: 2015-03-11T16:37:07Z
  • last-modified: 2019-04-17T14:37:51Z
  • org: ORG-DOI2-RIPE

Links to attack logs

bruteforce-ip-list-2020-02-08 bruteforce-ip-list-2021-08-30 bruteforce-ip-list-2021-09-11 bruteforce-ip-list-2022-05-10 bruteforce-ip-list-2019-12-28