144.91.69.83 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 144.91.69.83 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 65/100

Host and Network Information

• Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110.004 - Credential Stuffing, T1110 - Brute Force

• Tags: brute force, Bruteforce, Brute-Force, cowrie, scanners, ssh, SSH, vultr

• View other sources: Spamhaus VirusTotal

• Country: Germany
• Network: AS51167 contabo gmbh
• Noticed: 13 times
• Protocols Attacked: ssh
• Countries Attacked: Australia, France
• Passive DNS Results: djnation.online stevezappstudio.online yurofminerals.com trackerssafaris.com chekinews.com auraluxspa.org bliss-forex.world taurusautosltd.com amplifystrategiccommunications.com lubritonproperties.com umuvumu.com cverseafricaacademy.com galaxyherbsdispensary.com topherbsdispensary.com snoopyherbsdispensary.com fruityherbsdispensary.com wildsavannahafricatours.com inventiveconstructionnews.com bumpymaternitywear.co.ke www.topchemshop.com topchemshop.com www.altrondelivery.com massagefavorite.com gobeyondhello.com mail.supremeadventures.co.ke mail.vqou.xyz cpcalendars.aareadymovers.com autodiscover.kezzysolutions.co.ke www.alhabtoorfarm.com diasporaopportunitiesmedia.com vaziplus.co.ke www.vaziplus.co.ke www.uboraworld.com ruguru.org www.vqfc.tisini.co.ke vqfc.tisini.co.ke gemworldenterprise.com www.sportsdias.com.relishlyf.com sportsdias.com.relishlyf.com jemafrica.co.ke jemafrica.co.ke.nexashosting.co.ke www.jemafrica.co.ke.nexashosting.co.ke www.jemafrica.co.ke www.encartardiagnostics.com encartardiagnostics.com pazapesa.top delproceramic.com demo.prospectiq.savoir.co.ke www.demo.prospectiq.savoir.co.ke www.kisiwattivotingsystem.com www.dvjarika.com mail.dvjarika.com dvjarika.com vaporflavours254.com worldbitcointrading.io www.worldbitcointrading.io regionsoffshore.com.fidelityvesta.com www.regionsoffshore.com.fidelityvesta.com brokerwatchers.com nebosafehaven.co.ke www.nebosafehaven.co.ke.mediacomdevsolutions.com www.nebosafehaven.co.ke nebosafehaven.co.ke.mediacomdevsolutions.com www.max-gpt.vigillant.com max-gpt.vigillant.com pos.kezzysolutions.co.ke www.pos.kezzysolutions.co.ke www.milesto40.com riftafricangems.com www.comirandispensary.com storyboardmedia.co.ke clean.worldlineglobal.com www.clean.worldlineglobal.com abdazintl.com maryemasefoundation.org gain.pwlsample.site www.gain.pwlsample.site marathon.co.ke www.marathon.co.ke kabayare.co.ke www.kabayare.co.ke trufuelsenergy.com vertexherbs.com paza-pesa-pointi.top barrelspeed.org alhabtoorfarm.com soccerdaily.co.uk.relishlyf.com www.soccerdaily.co.uk.relishlyf.com www.projects.codezuka.com projects.codezuka.com shoplogs.site.logsforum.cc www.shoplogs.site.logsforum.cc www.dansonmungatana.com dansonmungatana.com citifingrps.com curaleaves.com delaxcapital.org www.delaxcapital.org www.goldencoinxchange.org clintrade.com joyhopekangangi.com dallokymagnifiquessafaris.com lavingtonexpeditors.com www.our-day.today www.magicindustries.co.ke magicindustries.co.ke dev.nanguti.co.ke www.dev.nanguti.co.ke www.sys.midlandschool.co.ke sys.midlandschool.co.ke mauna.africa www.mauna.africa www.fabraagency.com fabraagency.com.jaylinks.co.ke www.fabraagency.com.jaylinks.co.ke zuni.njerezi.xyz www.zuni.njerezi.xyz fabraagency.com affordablepropertiesinkenya.co.ke www.affordablepropertiesinkenya.co.ke www.affodablepropertiesinkenya.co.ke affodablepropertiesinkenya.co.ke www.clook.co.ke clook.co.ke globalpartnershipsorganization.org divinegiftcollection.com www.demoo.fxtradehut.com demoo.fxtradehut.com www.alex.gereru.mrrobottech.co.ke movies.mrrobottech.co.ke alex.gereru.mrrobottech.co.ke www.movies.mrrobottech.co.ke musicpromo.gotchscape.com townshipfoundationeducationcentre.smartcarecleaners.co.ke www.townshipfoundationeducationcentre.smartcarecleaners.co.ke www.dailycannabisdelivery.com carttah.com victorypointproperty.com www.victorypointproperty.com monkeymeth.com www.monkeymeth.com www.kenyaostomyassociation.com kimmie.shellymall.co.ke www.kimmie.shellymall.co.ke www.ragnarok.wonderlandcannabisz.com ragnarok.wonderlandcannabisz.com www.gamer.wonderlandcannabisz.com gamer.wonderlandcannabisz.com www.massagerepublic.live.knhcontractors.co.ke massagerepublic.live.knhcontractors.co.ke www.massagerepublic.live massagerepublic.live afrimountourstravel.com lubagateacherssacco.com kenyaostomyassociation.com www.affiliate.fxtradehut.com affiliate.fxtradehut.com www.mgk01.cc.logsforum.cc mgk01.cc.logsforum.cc sufnech-charity.com www.fitnation.co.ke fitnation.co.ke www.roofco.samuelkuria.com roofco.samuelkuria.com rickvillas.co.ke rickvillas.co.ke.nexashosting.co.ke www.rickvillas.co.ke.nexashosting.co.ke www.rickvillas.co.ke www.cannanstore.com cannanstore.com www.app.swgardens.co.ke app.swgardens.co.ke goldencoinxchange.org chinook-rvs.com www.oceanfirstcargo.com oceanfirstcargo.com mbanda-education-centre.co.ke www.mbanda-education-centre.co.ke www.airtouchcooling.com airtouchcooling.com www.doorstepexpresscourier.com fsichurch.org www.fsichurch.org finance.aciousmedia.co.ke www.finance.aciousmedia.co.ke www.pos.havanastaycation.com pos.havanastaycation.com m-sajili.com chinookrvforsale.com havanastaycation.com mbuinzaukenyasafaris.com www.mali-que-w.sutamuco.com www.mali-que-w.co.ke mali-que-w.co.ke mali-que-w.sutamuco.com www.three.brightstarkasyoka.com three.brightstarkasyoka.com bobcatherbsdispensary.com www.abitrade.zync24tech.com abitrade.zync24tech.com www.abitrade.site www.abitrade.site.zync24tech.com abitrade.site.zync24tech.com abitrade.site starwooddispensary.com www.whatsapp.hostpido.com whatsapp.hostpido.com www.hafroar.xyz deviceandgadgets.com www.deviceandgadgets.com www.bencexoticshoempire.co.ke bencexoticshoempire.co.ke www.pinpointherbsdispensary.com pinpointherbsdispensary.com tech.itsolutions.ke www.tech.itsolutions.ke www.growth-capital.ltd www.imperialgroupssd.com www.silvergreendispensary.com silvergreendispensary.com www.brivanempire.co.ke brivanempire.co.ke www.starway.pwlsample.site starway.pwlsample.site www.treasuretrovepoint.com treasuretrovepoint.com staging-api.zawadidairies.co.ke www.staging-api.zawadidairies.co.ke www.expresscourix.com expresscourix.com milesto40.com rignationea.com nice.freeenet.world www.nice.freeenet.world www.hetadairygoatfarm.tunitechnologiessolutions.com hetadairygoatfarm.tunitechnologiessolutions.com www.linkit-solutions.com www.kaltivateinvestmentslimited.co.ke flwjobs-applying.xyz familygatewaynetworks.com motor.itsolutions.ke www.motor.itsolutions.ke terry.mybasketaccess.co.ke www.terry.mybasketaccess.co.ke africanasity.com www.africanasity.com www.africanasity.com.nexashosting.co.ke africanasity.com.nexashosting.co.ke wavestonefinancialservice.com www.fairways-finance.com fairways-finance.com www.mdmaranyaadvocates.com mdmaranyaadvocates.com regcleanersandgeneralsupplies.co.ke www.regcleanersandgeneralsupplies.co.ke full-jobs-applying.xyz www.smartlinkchama.co.ke smartlinkchama.co.ke smartlinkchama.co.ke.linksmartechnologies.com www.smartlinkchama.co.ke.linksmartechnologies.com www.boracon.wezapestcontrol.com www.boracon.co.ke boracon.co.ke boracon.wezapestcontrol.com www.mails.revenuefundinvestment.net mails.revenuefundinvestment.net www.freekenyasignatures.com freekenyasignatures.com lacasafoundation.org www.mpesa.daja.co.ke mpesa.daja.co.ke kimbopefachurch.org www.the-kindcenter.com the-kindcenter.com cpcontacts.login.yahoo-activity-mail-direct-en-us-2fmail-yahoo.com powerupmassage.info africancrc.com www.informme.vinscreations.co.ke informme.vinscreations.co.ke www.vsa.co.ke vsa.co.ke accounts.spidensolutions.com www.accounts.spidensolutions.com www.zalemobileaccessories.com umazikreative.com spaclean.co.ke www.spaclean.co.ke nfthub.store.primewaveapp.com www.nfthub.store.primewaveapp.com nfthub.store www.nfthub.store centans.aciousmedia.co.ke www.centans.aciousmedia.co.ke www.keniccdrs.savoir.co.ke keniccdrs.savoir.co.ke ssuto.org www.beaurie-applying-jobs.top.mbele.co.ke beaurie-applying-jobs.top.mbele.co.ke jonathanlaw.co.ke www.jonathanlaw.co.ke www.iohealthcare.org dermalfillerbeauty.com trust-financialservices.com dabstarspharmacy.com glencorefinancialservice.com adsprint.smartcarecleaners.co.ke www.adsprint.smartcarecleaners.co.ke www.myshieldhost.com myshieldhost.com whm.myshieldhost.com poaevents.com mail.beaurie-applying-jobs.top www.beaurie-applying-jobs.top beaurie-applying-jobs.top www.jobsearch.co.ke jobsearch.co.ke wzuq.xyz www.octopus.co.ke octopus.co.ke importsbysituma.co.ke www.importsbysituma.co.ke bowerypharmacy.com www.bowerypharmacy.com www.wildlifeanimalstrade.com wildlifeanimalstrade.com www.zwiu.xyz www.zwiu.xyz.waru.co.ke zwiu.xyz.waru.co.ke zwiu.xyz www.java.zola.co.ke java.zola.co.ke www.noya.buzz encartar.nexashosting.co.ke www.encartar.nexashosting.co.ke www.allucance.mellunyventuresltd.co.ke allucance.mellunyventuresltd.co.ke www.husablimited.com app.delaxcapital.com www.app.delaxcapital.com www.delaxcapital.com.fxtradehut.com delaxcapital.com.fxtradehut.com www.delaxcapital.com delaxcapital.com www.ababunamwambafoundation.org.ababuterrah.com www.ababunamwambafoundation.org ababunamwambafoundation.org ababunamwambafoundation.org.ababuterrah.com www.ababuterrah.com ababuterrah.com www.raregenetikzweed.com raregenetikzweed.com ptlpos.habamax.com www.ptlpos.habamax.com importsbysituma.co.ke.primewritershub.com www.importsbysituma.co.ke.primewritershub.com unespic.org techsmartic.com emedenkenyafarmers.co.ke www.emedenkenyafarmers.co.ke www.taxi.celeb.co.ke taxi.celeb.co.ke cadeaujour.xyz cadeau.buzz www.mjazo.live.mbele.co.ke mjazo.live.mbele.co.ke www.mjazo.live mjazo.live mail.mjazo.live www.pata.mjazo.live pata.mjazo.live www.freelancers.servicehub.co.ke freelancers.servicehub.co.ke pavilion-llc.com.smartgainsagencies.co.ke www.pavilion-llc.com.smartgainsagencies.co.ke www.pavilion-llc.com pavilion-llc.com www.biutech.shylockloan.co.ke biutech.shylockloan.co.ke www.onshorerealtors.co.ke onshorerealtors.co.ke www.jobsmartic.co.ke.jobsearch.co.ke jobsmartic.co.ke.jobsearch.co.ke www.jobsmartic.co.ke jobsmartic.co.ke www.cadeaujour.xyz.mabazuu.com cadeaujour.xyz.mabazuu.com www.wpt-nw7q.144-91-69-83.cprapid.com wpt-nw7q.144-91-69-83.cprapid.com www.wpt-nw7q.144-91-69-83.cprapid.com.premierstore.co.ke wpt-nw7q.144-91-69-83.cprapid.com.premierstore.co.ke www.wpt-pb4u.144-91-69-83.cprapid.com.premierstore.co.ke wpt-pb4u.144-91-69-83.cprapid.com.premierstore.co.ke www.app.legacysummit.co.ke hotsolar.co.ke www.hotsolar.co.ke www.goplusadventures.africa.dreamritesecurity.co.ke www.goplusadventures.africa goplusadventures.africa goplusadventures.africa.dreamritesecurity.co.ke www.b.celeb.co.ke b.celeb.co.ke www.eagle-eyemedia.com eagle-eyemedia.com www.denifabrands.co.ke denifabrands.co.ke www.denifabrands.co.ke.mozlexx.com denifabrands.co.ke.mozlexx.com our-day.today whm.hostpido.com globaldocumentsservices.com uat.orpp.or.ke www.uat.orpp.or.ke customthreadshub.com wz.our-day.today www.wz.our-day.today janeliagencies.co.ke www.janeliagencies.co.ke www.uniformsplus.co.ke.jaylinks.co.ke uniformsplus.co.ke.jaylinks.co.ke drklogscafe.cc www.drklogscafe.cc www.uniformsplus.co.ke uniformsplus.co.ke www.janeliagencies.co.ke.jaylinks.co.ke janeliagencies.co.ke.jaylinks.co.ke delaxtrades.com chen-chems.com mjazo.online applebusinesspay.com gradeherbsdispensary.com flexherbsdispensary.com www.pickherbsdispensary.com pickherbsdispensary.com www.logisticsexpress.com.ialexsolutions.co.ke logisticsexpress.com.ialexsolutions.co.ke luxvoya.net www.luxvoya.net luxvoya.net.dreamritesecurity.co.ke www.luxvoya.net.dreamritesecurity.co.ke styledrops.xyz zh.applying-jobs-beaurie.xyz heavenlightpublishers.com habamax.com moffatmshauri.com www.moffatmshauri.com supremeadventures.co.ke www.supremeadventures.co.ke comirandispensary.com stereoherbsdispensary.com recruitment.applying-jobs-beaurie.xyz www.recruitment.applying-jobs-beaurie.xyz www.applying-jobs-beaurie.xyz.zimbindu.co.ke applying-jobs-beaurie.xyz.zimbindu.co.ke applying-jobs-beaurie.xyz mail.applying-jobs-beaurie.xyz www.applying-jobs-beaurie.xyz www.wayfairpage.com wayfairpage.com findnewlife.xyz www.findnewlife.xyz stanffordcompanyltd.co.ke www.stanffordcompanyltd.co.ke kalmoyenterprise.co.ke www.kalmoyenterprise.co.ke www.harlandispensary.com harlandispensary.com myhome.cholacs-systems.co.ke www.myhome.cholacs-systems.co.ke www.services.blissman.ke services.blissman.ke realranchltd.com lehmanntravelsolutions.com facebookajmadison.com www.vigillant.com goodhopecash.top.mershmellostoreonline.com www.goodhopecash.top.mershmellostoreonline.com www.riverr.yousuccessglobal.com riverr.yousuccessglobal.com stelpetenet.com www.hms.nanguti.co.ke hms.nanguti.co.ke www.alexandriaskillscenter.org www.businessplanebooks.co.ke businessplanebooks.co.ke ai2.pwlsample.site www.ai2.pwlsample.site www.talk.aciousmedia.co.ke talk.aciousmedia.co.ke aluflybeesafrica.com ctn-southsudan.com kenyan-lyrics.co.ke globaltranportservices.com www.globaltranportservices.com www.valuestargeneralltd.co.ke valuestargeneralltd.co.ke timely.co.ke www.timely.co.ke www.invest.paxcoins.com invest.paxcoins.com jpallianceassociates.com

Open Ports Detected

10000 22 443 80 8000 8083 8091 81 9000

CVEs Detected

CVE-2016-10735 CVE-2018-14040 CVE-2018-14042 CVE-2018-20676 CVE-2018-20677 CVE-2019-8331

Map

Whois Information

• NetRange: 144.91.64.0 - 144.91.127.255
• CIDR: 144.91.64.0/18
• NetName: RIPE
• NetHandle: NET-144-91-64-0-1
• Parent: NET144 (NET-144-0-0-0-0)
• NetType: Early Registrations, Transferred to RIPE NCC
• OriginAS:
• Organization: RIPE Network Coordination Centre (RIPE)
• RegDate: 2019-06-26
• Updated: 2019-06-26
• Ref: https://rdap.arin.net/registry/ip/144.91.64.0
• OrgName: RIPE Network Coordination Centre
• OrgId: RIPE
• Address: P.O. Box 10096
• City: Amsterdam
• StateProv:
• PostalCode: 1001EB
• Country: NL
• RegDate:
• Updated: 2013-07-29
• Ref: https://rdap.arin.net/registry/entity/RIPE
• OrgAbuseHandle: ABUSE3850-ARIN
• OrgAbuseName: Abuse Contact
• OrgAbusePhone: +31205354444
• OrgAbuseEmail: [email protected]
• OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
• OrgTechHandle: RNO29-ARIN
• OrgTechName: RIPE NCC Operations
• OrgTechPhone: +31 20 535 4444
• OrgTechEmail: [email protected]
• OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
• inetnum: 144.91.64.0 - 144.91.95.255
• netname: CONTABO
• descr: Contabo GmbH
• country: DE
• org: ORG-GG22-RIPE
• admin-c: MH7476-RIPE
• tech-c: MH7476-RIPE
• status: ASSIGNED PA
• mnt-by: MNT-CONTABO
• created: 2019-06-27T12:39:01Z
• last-modified: 2019-06-27T12:39:01Z
• organisation: ORG-GG22-RIPE
• org-name: Contabo GmbH
• country: DE
• org-type: LIR
• address: Aschauer Strasse 32a
• address: 81549
• address: Munchen
• address: GERMANY
• phone: +498921268372
• fax-no: +498921665862
• abuse-c: MH12453-RIPE
• mnt-ref: RIPE-NCC-HM-MNT
• mnt-ref: MNT-CONTABO
• mnt-ref: MNT-OCIRIS
• mnt-by: RIPE-NCC-HM-MNT
• mnt-by: MNT-CONTABO
• created: 2009-12-09T13:41:08Z
• last-modified: 2021-09-14T10:49:04Z
• person: Wilhelm Zwalina
• address: Contabo GmbH
• address: Aschauer Str. 32a
• address: 81549 Muenchen
• phone: +49 89 21268372
• fax-no: +49 89 21665862
• nic-hdl: MH7476-RIPE
• mnt-by: MNT-CONTABO
• mnt-by: MNT-GIGA-HOSTING
• created: 2010-01-04T10:41:37Z
• last-modified: 2020-04-24T16:09:30Z
• route: 144.91.68.0/23
• descr: CONTABO
• origin: AS51167
• mnt-by: MNT-CONTABO
• created: 2019-06-28T06:34:58Z
• last-modified: 2019-06-28T06:34:58Z

Links to attack logs

digitaloceansingapore-ssh-bruteforce-ip-list-2023-10-10 ** ** vultrparis-ssh-bruteforce-ip-list-2023-10-12 vultrparis-ssh-bruteforce-ip-list-2023-10-16 **