141.147.155.140 Threat Intelligence and Host Information

Share on:

Jun 02, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 141.147.155.140 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 10/100

Host and Network Information

JARM: 29d3fd00029d29d00042d43d0000005d86ccb1a0567e012264097a0315d7a7
View other sources: Spamhaus VirusTotal
Country: Japan
Network: AS31898 oracle corporation
Noticed: 1 times
Protocols Attacked: Anonymous Proxy
Passive DNS Results: plex.baeksansoo.duckdns.org rdesktop.baeksansoo.duckdns.org selenium.baeksansoo.duckdns.org vpn.baeksansoo.duckdns.org ff.baeksansoo.duckdns.org weed.baeksansoo.duckdns.org filebrowser.baeksansoo.duckdns.org memos.baeksansoo.duckdns.org heimdall.baeksansoo.duckdns.org portainer.baeksansoo.duckdns.org lxde.baeksansoo.duckdns.org npm.baeksansoo.duckdns.org vaultwarden.baeksansoo.duckdns.org

Malware Detected on Host

Count:

Open Ports Detected

111 22 3128 32400 443 5000 6379 7777 80 8008 81 9000 9999

CVEs Detected

CVE-2016-10735 CVE-2018-14040 CVE-2018-14042 CVE-2018-20676 CVE-2018-20677 CVE-2019-8331 CVE-2021-46784 CVE-2022-41317 CVE-2022-41318 CVE-2023-46724 CVE-2023-46728 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848 CVE-2023-49285 CVE-2023-49286 CVE-2023-49288 CVE-2023-50269 CVE-2023-5824 CVE-2024-23638

Map

Whois Information

NetRange: 141.0.0.0 - 141.255.255.255
CIDR: 141.0.0.0/8
NetName: RIPE-ERX-141
NetHandle: NET-141-0-0-0-0
Parent: ()
NetType: Early Registrations, Maintained by RIPE NCC
OriginAS:
Organization: RIPE Network Coordination Centre (RIPE)
RegDate: 1993-05-01
Updated: 2009-05-18
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Ref: https://rdap.arin.net/registry/ip/141.0.0.0
OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2013-07-29
Ref: https://rdap.arin.net/registry/entity/RIPE
OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName: Abuse Contact
OrgAbusePhone: +31205354444
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
inetnum: 141.147.0.0 - 141.147.255.255
netname: ORACLE-SE
descr: Oracle Corporation
descr: Oracle Corporation Svenska AB
descr: Kronborgsgränd 17
descr: P.O. Box 1215
descr: S-164 28 Kista
country: SE
org: ORG-OSA29-RIPE
admin-c: DM12756-RIPE
tech-c: DM12756-RIPE
status: LEGACY
mnt-by: ORCL-MNT
mnt-lower: ORCL-MNT
mnt-routes: ORCL-MNT
created: 2003-03-05T13:44:22Z
last-modified: 2019-12-04T13:12:18Z
organisation: ORG-OSA29-RIPE
org-name: Oracle Svenska AB
country: SE
org-type: LIR
address: Råsundavägen 4
address: 169 57
address: Solna
address: SWEDEN
phone: +4684773376
fax-no: +4684773376
abuse-c: AR17199-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: ORCL-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: ORCL-MNT
created: 2010-12-02T11:14:19Z
last-modified: 2020-12-16T12:47:27Z
person: Domain Administrator
address: 500 Oracle Parkway, M/S 501ip3
address: Redwood Shores, CA,
address: 94065
address: US
phone: +1.6505062220
nic-hdl: DM12756-RIPE
mnt-by: ORCL-MNT
created: 2014-06-09T11:09:41Z
last-modified: 2014-06-09T11:09:41Z

Links to attack logs