144.172.118.37 Threat Intelligence and Host Information

Share on:

Apr 28, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Likely Malicious Host 🟠 65/100

Host and Network Information

Tags: DNS, Malicious IP, Nextray, SSH, Scanner, TOR, Telnet, VPN, Webattack, attack, blacklist, botnet, bruteforce, cowrie, cyber security, dnsserver, ioc, login, malicious, mirai, phishing, probing, scan, scanner, scanning, smtp, ssh, tcp, telnet, udp, webscan, webscanner bruteforce web app attack
Known tor exit node
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_net_ua, ciarmy, dm_tor, et_tor, stopforumspam, stopforumspam_180d, stopforumspam_365d, stopforumspam_90d
Known TOR node
Country: United States of America
Network: AS398355 data ideas llc.
Known APT: 28* Noticed: 50 times
Protcols Attacked: ntp
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: trackmypackagesaramex.me track-aram-number.one assuragrico.online shahidnewupdate.one agri-mesinformationpersonnel.site romantic-tharp.144-172-118-37.plesk.page www.suspicious-zhukovsky.144-172-118-37.plesk.page suspicious-zhukovsky.144-172-118-37.plesk.page adata.haaa.xyz di.johnnie502.com

Open Ports Detected

21 25 443 53 80 8443 8880 995

Map

Whois Information

NetRange: 144.172.64.0 - 144.172.127.255
CIDR: 144.172.64.0/18
NetName: PONYNET-12
NetHandle: NET-144-172-64-0-1
Parent: NET144 (NET-144-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS53667
Organization: FranTech Solutions (SYNDI-5)
RegDate: 2014-05-07
Updated: 2014-05-07
Ref: https://rdap.arin.net/registry/ip/144.172.64.0
OrgName: FranTech Solutions
OrgId: SYNDI-5
Address: 1621 Central Ave
City: Cheyenne
StateProv: WY
PostalCode: 82001
Country: US
RegDate: 2010-07-21
Updated: 2017-01-28
Ref: https://rdap.arin.net/registry/entity/SYNDI-5
OrgTechHandle: FDI19-ARIN
OrgTechName: Dias, Francisco
OrgTechPhone: +1-778-977-8246
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/FDI19-ARIN
OrgAbuseHandle: FDI19-ARIN
OrgAbuseName: Dias, Francisco
OrgAbusePhone: +1-778-977-8246
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/FDI19-ARIN
NetRange: 144.172.118.0 - 144.172.119.255
CIDR: 144.172.118.0/23
NetName: DATA-IDEAS-LLC
NetHandle: NET-144-172-118-0-1
Parent: PONYNET-12 (NET-144-172-64-0-1)
NetType: Reallocated
OriginAS: AS398355
Organization: Data Ideas llc. (DIL-134)
RegDate: 2020-09-10
Updated: 2020-09-10
Ref: https://rdap.arin.net/registry/ip/144.172.118.0
OrgName: Data Ideas llc.
OrgId: DIL-134
Address: P.O.Box 8434
City: The Woodlands
StateProv: TX
PostalCode: 77387
Country: US
RegDate: 2020-02-07
Updated: 2021-01-08
Ref: https://rdap.arin.net/registry/entity/DIL-134
OrgDNSHandle: ADMIN7366-ARIN
OrgDNSName: Admin
OrgDNSPhone: +1-936-228-8005
OrgDNSEmail: [email protected]
OrgDNSRef: https://rdap.arin.net/registry/entity/ADMIN7366-ARIN
OrgAbuseHandle: ABUSE7815-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-936-228-8005
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE7815-ARIN
OrgTechHandle: ADMIN7366-ARIN
OrgTechName: Admin
OrgTechPhone: +1-936-228-8005
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/ADMIN7366-ARIN
OrgNOCHandle: ADMIN7366-ARIN
OrgNOCName: Admin
OrgNOCPhone: +1-936-228-8005
OrgNOCEmail: [email protected]
OrgNOCRef: https://rdap.arin.net/registry/entity/ADMIN7366-ARIN
OrgRoutingHandle: ADMIN7366-ARIN
OrgRoutingName: Admin
OrgRoutingPhone: +1-936-228-8005
OrgRoutingEmail: [email protected]
OrgRoutingRef: https://rdap.arin.net/registry/entity/ADMIN7366-ARIN

Links to attack logs