148.233.136.213 Threat Intelligence and Host Information

Dec 13, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 148.233.136.213 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 15/100

Host and Network Information

View other sources: Spamhaus VirusTotal

Country: Mexico
Network: “reputation”: 0, “indicator”: “148.233.136.213
Noticed: 1 times
Protocols Attacked: Anonymous Proxy

Malware Detected on Host

Count: 1 cedbd48cb46bd9e21716d50a73e8cfc46c8db2d2122bfbab33c6e215875f8ecf

Open Ports Detected

Possibly Malicious Host 🟢 15/100

443 80 ## Host and Network Information

View other sources: Spamhaus VirusTotal

CVEs Detected

CVE-2007-4723 CVE-2009-0796 CVE-2009-1390 CVE-2009-2299 CVE-2009-3765 CVE-2009-3766 CVE-2009-3767

Country: CVE-2011-1176 Mexico CVE-2011-2688
Network: CVE-2012-3526 “reputation”: 0, “indicator”: “148.233.136.213 CVE-2012-4001 CVE-2012-4360 CVE-2013-0941 CVE-2013-0942 CVE-2013-2765 CVE-2013-4365 CVE-2019-0190 CVE-2022-3996 CVE-2022-4203 CVE-2022-4304
Noticed: 1 times CVE-2022-4450 CVE-2023-0215
Protocols Attacked: CVE-2023-0216 Anonymous Proxy CVE-2023-0217 CVE-2023-0286

Malware Detected on Host

CVE-2023-0401 Count: 1 CVE-2023-0464 CVE-2023-0465 CVE-2023-0466 CVE-2023-1255 CVE-2023-2650 CVE-2023-2975 CVE-2023-31122 CVE-2023-3817 CVE-2023-43622 CVE-2023-45802 CVE-2023-4807 CVE-2023-5363 CVE-2023-5678 CVE-2023-6129 CVE-2024-0727 CVE-2024-27316 CVE-2024-38474 CVE-2024-38476 CVE-2024-38477 CVE-2024-40898

Whois Information

NetRange: 148.230.64.0 - 148.250.255.255
CIDR: 148.240.0.0/13, 148.250.0.0/16, 148.232.0.0/13, 148.230.128.0/17, 148.230.64.0/18, 148.231.0.0/16, 148.248.0.0/15 cedbd48cb46bd9e21716d50a73e8cfc46c8db2d2122bfbab33c6e215875f8ecf * NetName: LACNIC-ERX-148-201-0-0
NetHandle: NET-148-230-64-0-1
Parent: NET148 (NET-148-0-0-0-0)
NetType: Transferred to LACNIC
OriginAS:
Organization: Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate: 2003-10-29
Updated: 2024-08-08
Ref: https://rdap.arin.net/registry/ip/148.230.64.0
OrgName: Latin American and Caribbean IP address Regional Registry
OrgId: LACNIC
Address: Rambla Republica de Mexico 6125

Open Ports Detected

City: Montevideo 443 * StateProv:
PostalCode: 11400 80 * Country: UY
RegDate: 2002-07-27
Updated: 2018-03-15
Ref: https://rdap.arin.net/registry/entity/LACNIC
OrgAbuseHandle: LWI100-ARIN
OrgAbuseName: LACNIC Whois Info
OrgAbusePhone: +598-2604-2222
OrgAbuseEmail: abuse@lacnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/LWI100-ARIN
OrgTechHandle: LACNIC-ARIN
OrgTechName: LACNIC Whois Info

CVEs Detected

OrgTechPhone: +598-2604-2222
OrgTechRef: https://rdap.arin.net/registry/entity/LACNIC-ARIN CVE-2007-4723
inetnum: 148.233.136.208/28 CVE-2009-0796
status: reallocated CVE-2009-1390
aut-num: N/A CVE-2009-2299
owner: UNINET CVE-2009-3765
ownerid: MX-USCV4-LACNIC CVE-2009-3766
responsible: No hay informacion CVE-2009-3767
address: AVENIDA (AV.) INSURGENTES SUR, 3500, PISO 4 PEÑA POBRE CVE-2011-1176
address: 14060 - TLALPAN - CX
country: MX
phone: +52 5554876500
owner-c: GEC10 CVE-2011-2688
tech-c: GEC10 CVE-2012-3526
abuse-c: GEC10 CVE-2012-4001
created: 20001007
changed: 20210928 CVE-2012-4360
inetnum-up: 148.233.0.0/16 CVE-2013-0941 CVE-2013-0942
nic-hdl: GEC10 CVE-2013-2765
person: Gestion de Direccionamiento UniNet CVE-2013-4365
e-mail: gccips@uninet.com.mx CVE-2019-0190
address: AV. INSURGENTES SUR, 3500, TORRE TELMEX COL. PEÑA POBRE CVE-2022-3996
address: 14060 - TLALPAN - CX CVE-2022-4203
country: MX CVE-2022-4304
phone: +52 5554876578 CVE-2022-4450
created: 20110706 CVE-2023-0215
changed: 20240510 CVE-2023-0216 CVE-2023-0217 CVE-2023-0286 CVE-2023-0401 CVE-2023-0464 CVE-2023-0465 CVE-2023-0466 CVE-2023-1255 CVE-2023-2650 CVE-2023-2975 CVE-2023-31122 CVE-2023-3817 CVE-2023-43622 CVE-2023-45802 CVE-2023-4807 CVE-2023-5363 CVE-2023-5678 CVE-2023-6129 CVE-2024-0727 CVE-2024-27316 CVE-2024-38474 CVE-2024-38476 CVE-2024-38477 CVE-2024-40898

Whois Information

NetRange: 148.230.64.0 - 148.250.255.255
CIDR: 148.248.0.0/15, 148.250.0.0/16, 148.230.128.0/17, 148.231.0.0/16, 148.230.64.0/18, 148.240.0.0/13, 148.232.0.0/13
NetName: LACNIC-ERX-148-201-0-0
NetHandle: NET-148-230-64-0-1
Parent: NET148 (NET-148-0-0-0-0)
NetType: Transferred to LACNIC
OriginAS:
Organization: Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate: 2003-10-29
Updated: 2024-08-08
Ref: https://rdap.arin.net/registry/ip/148.230.64.0
OrgName: Latin American and Caribbean IP address Regional Registry
OrgId: LACNIC
Address: Rambla Republica de Mexico 6125
City: Montevideo
StateProv:
PostalCode: 11400
Country: UY
RegDate: 2002-07-27
Updated: 2018-03-15
Ref: https://rdap.arin.net/registry/entity/LACNIC
OrgTechHandle: LACNIC-ARIN
OrgTechName: LACNIC Whois Info
OrgTechPhone: +598-2604-2222
OrgTechRef: https://rdap.arin.net/registry/entity/LACNIC-ARIN
OrgAbuseHandle: LWI100-ARIN
OrgAbuseName: LACNIC Whois Info
OrgAbusePhone: +598-2604-2222
OrgAbuseEmail: abuse@lacnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/LWI100-ARIN

Links to attack logs

Share on: