138.118.214.71 Threat Intelligence and Host Information
ipinfopage
General
This page contains threat intelligence information for the IPv4 address 138.118.214.71 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.
🟠 Elevated — 60/100
Geographic Location
Host and Network Information
- View other sources: Spamhaus VirusTotal Shodan AbuseIPDB
- Country: Argentina
- Noticed: 40 times
- Protocols Attacked: portscan
- Countries Attacked: Australia, Canada, Czechia, Denmark, Estonia, Finland, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
- Open Ports: 161, 2000, 21, 4321, 60000, 60001, 80, 8008, 8098, 8291, 85, 9022, 98, 99
- Tor Node: No
Tags
- 01.10.2025
- 2025
- cowrie
- cyber security
- digital ocean
- dionaea
- fatt
- HoneyNet Connect
- honeytrap
- ioc
- mailoney
- malicious
- Nextray
- p0f
- phishing
- portscan
- scan
- scanners
- sensor-tagged
- sentrypeer
- sip
- sipvicious
- ssh
- suricata
- tanner
- tpot
- vultr
MITRE ATT&CK TTPs
- T1078 - Valid Accounts
- T1083 - File and Directory Discovery
- T1098.004 - SSH Authorized Keys
- T1105 - Ingress Tool Transfer
- T1110.004 - Credential Stuffing
- T1110 - Brute Force
- T1595 - Active Scanning
Associated CVEs
- CVE-2004-0174
Passive DNS
- siprosa.sytes.net
Whois Information
NetRange: 138.118.120.0 - 138.118.255.255
CIDR: 138.118.128.0/17, 138.118.120.0/21
NetName: LACNIC-ERX-138-118-0-0
NetHandle: NET-138-118-120-0-1
Parent: NET138 (NET-138-0-0-0-0)
NetType: Transferred to LACNIC
OriginAS:
Organization: Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate: 2010-11-19
Updated: 2023-04-05
Comment: This IP address range is under LACNIC responsibility
Comment: for further allocations to users in LACNIC region.
Comment: Please see http://www.lacnic.net/ for further details,
Ref: https://rdap.arin.net/registry/ip/138.118.120.0
OrgName: Latin American and Caribbean IP address Regional Registry
OrgId: LACNIC
Address: Rambla Republica de Mexico 6125
City: Montevideo
StateProv:
PostalCode: 11400
Country: UY
RegDate: 2002-07-27
Updated: 2018-03-15
Ref: https://rdap.arin.net/registry/entity/LACNIC
OrgTechHandle: LACNIC-ARIN
OrgTechName: LACNIC Whois Info
OrgTechPhone: +598-2604-2222
OrgTechRef: https://rdap.arin.net/registry/entity/LACNIC-ARIN
OrgAbuseHandle: LWI100-ARIN
OrgAbuseName: LACNIC Whois Info
OrgAbusePhone: +598-2604-2222
OrgAbuseEmail: abuse@lacnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/LWI100-ARIN
inetnum: 138.118.212.0/22
status: allocated
aut-num: N/A
owner: Sebastian Souto (SSSERVICIOS)
ownerid: AR-SSSE-LACNIC
responsible: Sebastian Souto
address: Dr. Raul Alfonsín, 433, -
address: 9400 - Rio Gallegos - SC
country: AR
phone: +54 29662966591573 [0000]
owner-c: SES54
tech-c: DIM71
abuse-c: DIM71
inetrev: 138.118.212.0/24
nserver: NS0.DNSMADEEASY.COM
nsstat: 20260314 AA
nslastaa: 20260314
nserver: NS1.DNSMADEEASY.COM
nsstat: 20260314 AA
nslastaa: 20260314
nserver: NS2.DNSMADEEASY.COM
nsstat: 20260314 AA
nslastaa: 20260314
nserver: NS3.DNSMADEEASY.COM
nsstat: 20260314 AA
nslastaa: 20260314
nserver: NS4.DNSMADEEASY.COM
nsstat: 20260314 AA
nslastaa: 20260314
inetrev: 138.118.213.0/24
nserver: NS0.DNSMADEEASY.COM
nsstat: 20260315 AA
nslastaa: 20260315
nserver: NS1.DNSMADEEASY.COM
nsstat: 20260315 AA
nslastaa: 20260315
nserver: NS2.DNSMADEEASY.COM
nsstat: 20260315 AA
nslastaa: 20260315
nserver: NS3.DNSMADEEASY.COM
nsstat: 20260315 AA
nslastaa: 20260315
nserver: NS4.DNSMADEEASY.COM
nsstat: 20260315 AA
nslastaa: 20260315
inetrev: 138.118.214.0/24
nserver: NS0.DNSMADEEASY.COM
nsstat: 20260314 AA
nslastaa: 20260314
nserver: NS1.DNSMADEEASY.COM
nsstat: 20260314 AA
nslastaa: 20260314
nserver: NS2.DNSMADEEASY.COM
nsstat: 20260314 AA
nslastaa: 20260314
nserver: NS3.DNSMADEEASY.COM
nsstat: 20260314 AA
nslastaa: 20260314
nserver: NS4.DNSMADEEASY.COM
nsstat: 20260314 AA
nslastaa: 20260314
inetrev: 138.118.215.0/24
nserver: NS0.DNSMADEEASY.COM
nsstat: 20260311 AA
nslastaa: 20260311
nserver: NS1.DNSMADEEASY.COM
nsstat: 20260311 AA
nslastaa: 20260311
nserver: NS2.DNSMADEEASY.COM
nsstat: 20260311 AA
nslastaa: 20260311
nserver: NS3.DNSMADEEASY.COM
nsstat: 20260311 AA
nslastaa: 20260311
nserver: NS4.DNSMADEEASY.COM
nsstat: 20260311 AA
nslastaa: 20260311
created: 20150615
changed: 20210608
nic-hdl: SES54
person: Sebastian Souto
e-mail: sebastiansouto@ssservicios.com.ar
address: Av. Presidente Dr. Nestor Carlos Kirchner, 1621,
address: 9400 - Rio Gallegos - SC
country: AR
phone: +0054 2966 15591573
created: 20150122
changed: 20220215
nic-hdl: DIM71
person: Diego Mayán
e-mail: diego.mayan@ssservicios.com.ar
address: José Ingenieros 260, 260, -
address: 9400 - Río Gallegos - Santa Cruz
country: AR
phone: +54 2966227519 [0000]
created: 20210608
changed: 20220309