148.163.89.221 Threat Intelligence and Host Information

May 04, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 148.163.89.221 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 40/100

Host and Network Information

  • Tags: agenttesla, asec, asec blog, avemaria, formbook, lokibot, nanocore, rapit, redline, remcos, request, Scanner, scanning, smtp, ssh, tcp, tool, Webattack

  • JARM: 29d29d00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae

  • View other sources: Spamhaus VirusTotal

Malware Detected on Host

Count: 42 a6e7c2c51f30da041d26e544a7f63e95dd3cbe07acff3f20b4d3c16d67791707 60db1dc16e4e4cc256442ae44f0ed34c3e66fc35c0642c19c8bbbb3ca74f8980 8bf0a1ba9dc25f7df1af88daaaeee3b478e75bc7d1a8cc5a0896e865c6ec188f 2ae40b1126b34c1d6c8b6e3305d1b026ff4b04a02f427f9ec36ed1a51869ab7e 4fe47fe998da2dd2a1c5d50c51746a9171f3f902c8d4befaeffbbef6ca41b6f2 fa32761983b0d3287a42870aef5f5fee8bb8da48d3b3b8edcf10eec6b3891f95 8aa0f329126c1d8062f9a05124252e65cde407a519d6702082b051fb17659414 2a8016c44db6432889d4ac2a029d47c8a4ee64f5f170ca3404199532c324e610 8a96f3efb591cc18ec5c88ebaa18204fcfcdad1653d4da278449f88d8d20b579 96be5ed38c47b5af09c0cf5b45f05ca31926c0df956c1fc30fa0207c4d9eab78

Map

Whois Information

Links to attack logs

****** ****** ******

Share on: