138.199.32.102 Threat Intelligence and Host Information

Share on:

Mar 09, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Host and Network Information

Mitre ATT&CK IDs: T1046 - Network Service Scanning, T1423 - Network Service Scanning, T1595.001 - Scanning IP Blocks, T1595.002 - Vulnerability Scanning, T1596.005 - Scan Databases, TA0043 - Reconnaissance
Tags: Malicious IP, NETBIOS, Scanner, Webattack, blacklist, botnet, mirai, nmap, port-scan, scan, scanning, smb, smtp, ssh, tcp, tsec
View other sources: Spamhaus VirusTotal
Country: United States of America
Network: AS60068 datacamp limited
Noticed: 50 times
Protcols Attacked: SSH
Countries Attacked: Australia, Germany, Italy

Map

Whois Information

NetRange: 138.198.0.0 - 138.199.95.255
CIDR: 138.199.0.0/18, 138.199.64.0/19, 138.198.0.0/16
NetName: RIPE-ERX-138-198-0-0
NetHandle: NET-138-198-0-0-1
Parent: NET138 (NET-138-0-0-0-0)
NetType: Early Registrations, Transferred to RIPE NCC
OriginAS:
Organization: RIPE Network Coordination Centre (RIPE)
RegDate: 2003-12-11
Updated: 2020-10-20
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Ref: https://rdap.arin.net/registry/ip/138.198.0.0
OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2013-07-29
Ref: https://rdap.arin.net/registry/entity/RIPE
OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName: Abuse Contact
OrgAbusePhone: +31205354444
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
inetnum: 138.199.32.96 - 138.199.32.127
netname: CYBGTM-LAX
country: US
descr: Datapacket Los Angeles - CYBGTM
admin-c: DLTS1-RIPE
tech-c: DLTS1-RIPE
abuse-c: ACRO44435-RIPE
descr: [email protected]
status: ASSIGNED PA
mnt-by: DATACAMP-MNT
created: 2021-11-12T12:07:17Z
last-modified: 2021-11-12T14:46:13Z
role: Datacamp Ltd. technical staff
address: DataCamp Limited
address: 207 Regent Street
address: London
address: United Kingdom
nic-hdl: DLTS1-RIPE
abuse-mailbox: [email protected]
mnt-by: DATACAMP-MNT
tech-c: JP4750-RIPE
admin-c: JP4750-RIPE
created: 2014-06-23T09:09:30Z
last-modified: 2021-03-19T13:12:55Z
route: 138.199.32.0/24
origin: AS60068
descr: CDN77 LAX
mnt-by: DATACAMP-MNT
created: 2022-03-02T08:30:30Z
last-modified: 2022-03-02T08:30:30Z

Links to attack logs