136.144.41.117 Threat Intelligence and Host Information

Share on:

Mar 17, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 136.144.41.117 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 60/100

Host and Network Information

Mitre ATT&CK IDs: T1046 - Network Service Scanning, T1423 - Network Service Scanning, T1595.001 - Scanning IP Blocks, T1595.002 - Vulnerability Scanning, T1596.005 - Scan Databases, TA0043 - Reconnaissance
Tags: anna paula, associated, bruteforce, currc3adculo, cyber security, from email, headers, ioc, khtml, last update, linux x8664, malicious, malspam email, msi file, Nextray, phishing, Telnet, tuesday, unique count, utf8, web, windows server, zip archive
View other sources: Spamhaus VirusTotal
Country: United States
Network: AS211252 delis llc
Noticed: 50 times
Protocols Attacked: telnet
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Italy, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 14 2d6256195e69211ca127ab2cc2ac840b7f2f5a00f1426c59e80defa3d9d26ccc 737a2af2161895a72b875161c3f892559d2783ad48b6e00d9a0d645bbafbd3d5 4b47a55cc0a40823cd94133b010e9a105f5db215abb1f9e2d7554121e5602845 b6d886d0638638d4b30d6e15b4b5a2bc59cce37fb004ed55585fade74931b17a e1147db1303aef152514c6e19a3ae871c3aa549499c662e0955e5bbb7b17aa4f b9ff3269c002736db48b42a99ad062ae1204281424b51024ad43a57663932b07 70e8d70f4dd1b70ce85ff2cf5418fc63f35e27af5c92468a680bf341445b741f 974d7b19e589da1bfcc8a3697cb698188a4697ed7ac9c31ff7c4c8d9af90da07 3201df0efb035353e4de83aca51f4a55748de42bb6e49cd2d66a1ab412dcb463 3b7dface74f2325c100be501df2465210f5a830a2807c8884764625d3f19520b

Map

Whois Information

NetRange: 136.144.16.0 - 136.144.127.255
CIDR: 136.144.32.0/19, 136.144.16.0/20, 136.144.64.0/18
NetName: RIPE
NetHandle: NET-136-144-16-0-1
Parent: NET136 (NET-136-0-0-0-0)
NetType: Early Registrations, Transferred to RIPE NCC
OriginAS:
Organization: RIPE Network Coordination Centre (RIPE)
RegDate: 2016-11-08
Updated: 2016-11-08
Ref: https://rdap.arin.net/registry/ip/136.144.16.0
OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2013-07-29
Ref: https://rdap.arin.net/registry/entity/RIPE
OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName: Abuse Contact
OrgAbusePhone: +31205354444
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
inetnum: 136.144.41.0 - 136.144.41.255
netname: MEGACABLE-136-144-41-0
country: MX
geoloc: 19.4315604 -99.2148968
org: ORG-MCDM2-RIPE
admin-c: MCDM40-RIPE
tech-c: MCDM40-RIPE
status: LEGACY
mnt-by: PREFIXBROKER-MNT
created: 2022-10-21T10:37:16Z
last-modified: 2022-10-21T10:37:16Z
organisation: ORG-MCDM2-RIPE
org-name: Megacable Comunicaciones de Mexico, S.A. de C.V.
org-type: OTHER
address: Sierra Candela 111-Piso 8, Lomas de Chapultepec, Miguel Hidalgo
address: 11000 Ciudad de Mexico
address: CDMX
address: Mexico
abuse-c: MCDM40-RIPE
mnt-ref: PREFIXBROKER-MNT
mnt-by: PREFIXBROKER-MNT
created: 2022-10-21T10:37:14Z
last-modified: 2022-10-21T10:37:14Z
role: Megacable Comunicaciones de Mexico, S.A. de C.V. abuse handling
address: Sierra Candela 111-Piso 8, Lomas de Chapultepec, Miguel Hidalgo
address: 11000 Ciudad de Mexico
address: CDMX
address: Mexico
nic-hdl: MCDM40-RIPE
mnt-by: PREFIXBROKER-MNT
created: 2022-10-21T10:37:14Z
last-modified: 2022-10-21T10:37:14Z
abuse-mailbox: [email protected]
route: 136.144.41.0/24
origin: AS14178
mnt-by: PREFIXBROKER-MNT
created: 2022-10-21T10:37:16Z
last-modified: 2022-10-21T10:37:16Z

Links to attack logs