144.172.118.4 Threat Intelligence and Host Information

Share on:

Jul 22, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 144.172.118.4 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 60/100

Host and Network Information

Tags: Nextray, RDP, Raspberry Robin, TOR, VPN, cve202229266, cyber security, description, description ip, indicator, indicator type, ioc, malicious, phishing, tor ip, vnc
Known tor exit node
JARM: 2ad2ad16d2ad2ad00042d42d000000332dc9cd7d90589195193c8bb05d84fa
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_de, blocklist_de_ssh, blocklist_net_ua, botscout_1d, botscout_30d, botscout_7d, cleantalk_30d, cleantalk_new_30d, cybercrime, dm_tor, et_compromised, et_tor, greensnow, haley_ssh, sblam, stopforumspam, stopforumspam_180d, stopforumspam_1d, stopforumspam_30d, stopforumspam_365d, stopforumspam_7d, stopforumspam_90d, tor_exits, tor_exits_1d, tor_exits_30d, tor_exits_7d
Known TOR node
Country: United States
Network: AS398355 data ideas llc.
Noticed: 1 times
Protcols Attacked: ssh
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, South Africa, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: 144.172.118.4

Malware Detected on Host

Count: 46 dfc41ce030340214dfb943f97574b23d44728460586c139e7873732fcd44c1af b11e614cdd02aecb8d6ae65bf67bfac8cbefd68830065217e2cb48922743bb12 c1392283ae24b836d9afc2f5dba43dbb5782e8b7c4074de7da7f7dcd8858f905 68801c449b903e06dc672f0bf8dbef9ccbf409a04715c22e111d9028d678460f cf93542e5b93485475fb98443c8bba33c21774239e88c833e491dd50f67a209a 5690536a7ec6f6972d707ae296eccdb30972451608688842dcd6c70e6f5ef5ea 155cc390568a88b0bc789e1d7cf2dda7fc2f0943b31055c9a4f87d95261f4ee0 3523c46d42f35d67ba6841ddc5cdd50b3378220dfc49f512bac44c2c92b6d329 2fd353ffcace535b5c0cdd3b70784bcbf1d4e35879a3109ed8825c2f970d22d3 7282e2fdb25b07554b082f5cf1697315ed5ce3005f985cbe96a34da965869db5

Open Ports Detected

443 80

Map

Whois Information

NetRange: 144.172.64.0 - 144.172.127.255
CIDR: 144.172.64.0/18
NetName: PONYNET-12
NetHandle: NET-144-172-64-0-1
Parent: NET144 (NET-144-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS53667
Organization: FranTech Solutions (SYNDI-5)
RegDate: 2014-05-07
Updated: 2014-05-07
Ref: https://rdap.arin.net/registry/ip/144.172.64.0
OrgName: FranTech Solutions
OrgId: SYNDI-5
Address: 1621 Central Ave
City: Cheyenne
StateProv: WY
PostalCode: 82001
Country: US
RegDate: 2010-07-21
Updated: 2017-01-28
Ref: https://rdap.arin.net/registry/entity/SYNDI-5
OrgAbuseHandle: FDI19-ARIN
OrgAbuseName: Dias, Francisco
OrgAbusePhone: +1-778-977-8246
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/FDI19-ARIN
OrgTechHandle: FDI19-ARIN
OrgTechName: Dias, Francisco
OrgTechPhone: +1-778-977-8246
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/FDI19-ARIN
NetRange: 144.172.118.0 - 144.172.119.255
CIDR: 144.172.118.0/23
NetName: DATA-IDEAS-LLC
NetHandle: NET-144-172-118-0-1
Parent: PONYNET-12 (NET-144-172-64-0-1)
NetType: Reallocated
OriginAS: AS398355
Organization: Data Ideas llc. (DIL-134)
RegDate: 2020-09-10
Updated: 2020-09-10
Ref: https://rdap.arin.net/registry/ip/144.172.118.0
OrgName: Data Ideas llc.
OrgId: DIL-134
Address: P.O.Box 8434
City: The Woodlands
StateProv: TX
PostalCode: 77387
Country: US
RegDate: 2020-02-07
Updated: 2021-01-08
Ref: https://rdap.arin.net/registry/entity/DIL-134
OrgTechHandle: ADMIN7366-ARIN
OrgTechName: Admin
OrgTechPhone: +1-936-228-8005
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/ADMIN7366-ARIN
OrgNOCHandle: ADMIN7366-ARIN
OrgNOCName: Admin
OrgNOCPhone: +1-936-228-8005
OrgNOCEmail: [email protected]
OrgNOCRef: https://rdap.arin.net/registry/entity/ADMIN7366-ARIN
OrgDNSHandle: ADMIN7366-ARIN
OrgDNSName: Admin
OrgDNSPhone: +1-936-228-8005
OrgDNSEmail: [email protected]
OrgDNSRef: https://rdap.arin.net/registry/entity/ADMIN7366-ARIN
OrgRoutingHandle: ADMIN7366-ARIN
OrgRoutingName: Admin
OrgRoutingPhone: +1-936-228-8005
OrgRoutingEmail: [email protected]
OrgRoutingRef: https://rdap.arin.net/registry/entity/ADMIN7366-ARIN
OrgAbuseHandle: ABUSE7815-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-936-228-8005
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE7815-ARIN

Links to attack logs