148.66.130.187 Threat Intelligence and Host Information

Share on:

Mar 17, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 148.66.130.187 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 15/100

Host and Network Information

JARM: 29d29d15d29d29d00042d42d00000072e74222ce193a6f991becaa3da6c94d
View other sources: Spamhaus VirusTotal
Country: Singapore
Network: AS26496 godaddy.com llc
Noticed: 1 times
Protocols Attacked: Anonymous Proxy
Passive DNS Results: www.vgcpharmacy.in vgcpharmacy.in aryangloballaw.com aryanglobalcollege.com rlpharmacycollege.com stjosephconventschool.org demo.dmmv.co.in uwf2.semesterguru.com ojas.semesterguru.com dmmv.co.in www.dmmv.co.in uwf3.semesterguru.com uwf.semesterguru.com venus.semesterguru.com swarnamala.semesterguru.com airfibernetworks.co.in www.airfibernetworks.co.in creataum.semesterguru.com vaidyamrit.in www.vaidyamrit.in 187.130.66.148.host.secureserver.net demo.clinicage.com test-sanchetna.semesterguru.com shribaldeointercollege.in www.shribaldeointercollege.in shribaldeobalikavidhyalay.in www.shribaldeobalikavidhyalay.in sjrs.semesterguru.com www.sanchetnafinance.com clinicage.com www.clinicage.com www.sjrsinfracity.com sjrsinfracity.com kas-election.semesterguru.com www.shriakpgc.net shriakpgc.net vaidyamrit.semesterguru.com www.sriakpgc.net sriakpgc.net school.lrinstitutes.com soul-test.semesterguru.com beer.semesterguru.com beer-factory.semesterguru.com suraj.semesterguru.com icps.co.in www.icps.co.in www.lrinstitutes.com surjit.semesterguru.com www.govindaskashi.com lrinstitutes.com www.silkenmore.in www.hastkargha.com www.rugsmahal.com test.semesterguru.com alka.semesterguru.com eduweb-demo.semesterguru.com www.semesterguru.com www.trendbanarasi.com vgs.semesterguru.com akpgc.semesterguru.com www.old.hastkargha.com ns2.hastkargha.com old.hastkargha.com ns1.hastkargha.com new.hastkargha.com www.new.hastkargha.com govindaskashi.semesterguru.com tajmahalrugs.semesterguru.com rugsmahal.com python.semesterguru.com cms-1.semesterguru.com cms-2.semesterguru.com trendbanarasi.com wpwcom.semesterguru.com govindaskashi.com sanchetnafinance.com silkenmore.in hastkargha.com cpcalendars.hastkargha.com semesterguru.com ip-148-66-130-187.ip.secureserver.net

Open Ports Detected

111 2082 2083 2086 2087 2095 2096 22 443 444 465 53 587 80 81 993 995

CVEs Detected

CVE-2007-2768 CVE-2008-3844 CVE-2016-20012 CVE-2017-15906 CVE-2018-15473 CVE-2018-15919 CVE-2018-20685 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408 CVE-2023-48795 CVE-2023-51384 CVE-2023-51385 CVE-2023-51767

Map

Whois Information

NetRange: 148.66.128.0 - 148.66.159.255
CIDR: 148.66.128.0/19
NetName: APNIC
NetHandle: NET-148-66-128-0-1
Parent: NET148 (NET-148-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2016-08-18
Updated: 2016-08-18
Ref: https://rdap.arin.net/registry/ip/148.66.128.0
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
inetnum: 148.66.128.0 - 148.66.159.255
netname: GODADDY-NET-SG
descr: Godaddy.com
country: SG
org: ORG-GA30-AP
admin-c: GNA32-AP
tech-c: GNA32-AP
abuse-c: AG713-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-GODADDY-NET-SG
mnt-routes: MAINT-GODADDY-NET-SG
mnt-irt: IRT-GODADDY-NET-SG
last-modified: 2020-05-18T23:16:40Z
irt: IRT-GODADDY-NET-SG
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: GNA32-AP
tech-c: GNA32-AP
mnt-by: MAINT-GODADDY-NET-SG
last-modified: 2023-10-31T18:18:14Z
organisation: ORG-GA30-AP
org-name: Godaddy.com
org-type: LIR
country: SG
phone: +011-1-480-284-9138
fax-no: +011-1-480-505-8800
e-mail: [email protected]
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2023-09-05T02:15:38Z
role: ABUSE GODADDYNETSG
country: ZZ
phone: +000000000
e-mail: [email protected]
admin-c: GNA32-AP
tech-c: GNA32-AP
nic-hdl: AG713-AP
abuse-mailbox: [email protected]
mnt-by: APNIC-ABUSE
last-modified: 2023-10-31T18:18:54Z
role: GODADDYCOM - network administrator
country: SG
phone: +011-1-480-505-8800
e-mail: [email protected]
admin-c: GNA32-AP
tech-c: GNA32-AP
nic-hdl: GNA32-AP
mnt-by: MAINT-GODADDY-NET-SG
last-modified: 2016-04-26T06:49:47Z
route: 148.66.130.0/24
origin: AS26496
descr: Godaddy.com
mnt-by: MAINT-GODADDY-NET-SG
last-modified: 2023-10-31T18:27:28Z

Links to attack logs