148.230.241.161 Threat Intelligence and Host Information
ipinfopage
General
This page contains threat intelligence information for the IPv4 address
148.230.241.161 and was generated either as a result of
observed malicious activity or as an information gathering exercise to assist with
enrichment of security events and context. All information is gathered passively
through aggregation of public sources, or observations through activity upon honeynets.
The host score is calculated through a series of statistically weighted values and
machine learning which takes into account metadata such as host information, frequency,
volume and global distribution of malicious activity, association with other known
malicious hosts or networks, proxying or anonymising behaviour such as with tor exit
nodes, residential proxies or VPN services, and many other attributes. These values are
historical and indicative only - and should not be taken to be an accurate representation
of the users, businesses or networks in which they reside.
🟢 Minimal —
9/100
Geographic Location
Host and Network Information
- View other sources:
Spamhaus
VirusTotal
Shodan
AbuseIPDB
- Country: Mexico
- Network: AS3549 level 3 parent llc
- Noticed: 2 times
- Protocols Attacked: mssql
- Open Ports: 1099, 135, 1434, 3388, 443, 445, 49328, 49985, 5357, 554, 593, 7547, 82, 9080
- Tor Node: No
Attack Log References
Whois Information
NetRange: 148.222.252.0 - 148.250.255.255
CIDR: 148.224.0.0/12, 148.248.0.0/15, 148.222.252.0/22, 148.223.0.0/16, 148.240.0.0/13, 148.250.0.0/16
NetName: LACNIC-ERX-148-201-0-0
NetHandle: NET-148-222-252-0-1
Parent: NET148 (NET-148-0-0-0-0)
NetType: Transferred to LACNIC
OriginAS:
Organization: Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate: 2003-10-29
Updated: 2023-06-30
Ref: https://rdap.arin.net/registry/ip/148.222.252.0
OrgName: Latin American and Caribbean IP address Regional Registry
OrgId: LACNIC
Address: Rambla Republica de Mexico 6125
City: Montevideo
StateProv:
PostalCode: 11400
Country: UY
RegDate: 2002-07-27
Updated: 2018-03-15
Ref: https://rdap.arin.net/registry/entity/LACNIC
OrgAbuseHandle: LWI100-ARIN
OrgAbuseName: LACNIC Whois Info
OrgAbusePhone: +598-2604-2222
OrgAbuseEmail: abuse@lacnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/LWI100-ARIN
OrgTechHandle: LACNIC-ARIN
OrgTechName: LACNIC Whois Info
OrgTechPhone: +598-2604-2222
OrgTechRef: https://rdap.arin.net/registry/entity/LACNIC-ARIN
inetnum: 148.230.128.0/17
status: allocated
aut-num: N/A
owner: TOTAL PLAY TELECOMUNICACIONES SA DE CV
ownerid: MX-TPTE-LACNIC
responsible: Alejandro Enrique Rodriguez Sanchez
address: PERIFERICO SUR, 4119, FUENTES DEL PEDREGAL
address: 14140 - TLALPAN - CX
country: MX
phone: +52 5585825000
owner-c: DSC34
tech-c: DSC34
abuse-c: DSC34
inetrev: 148.230.128.0/17
nserver: NS3.TOTALPLAY.COM.MX
nsstat: 20240608 AA
nslastaa: 20240608
nserver: NS4.TOTALPLAY.COM.MX
nsstat: 20240608 AA
nslastaa: 20240608
nserver: NS5.TOTALPLAY.COM.MX
nsstat: 20240608 AA
nslastaa: 20240608
created: 19971226
changed: 20231113
nic-hdl: DSC34
person: DSI CyAAL
e-mail: lacnic@gruposalinas.com.mx
address: Insurgentes Sur, 3579, La Joya
address: 14000 - Tlalpan - CX
country: MX
phone: +52 5517207000 [72779]
created: 20210209
changed: 20210216