148.72.177.90 Threat Intelligence and Host Information

Aug 21, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 148.72.177.90 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 65/100

Host and Network Information

Mitre ATT&CK IDs: T1498 - Network Denial of Service, T1499.002 - Service Exhaustion Flood, T1499 - Endpoint Denial of Service
Tags: cc.py, DDoS, DDOS, HEAD Floods, Killnet, KillNet, proxy, T1498, T1499
JARM: 2ad2ad16d2ad2ad22c2ad2ad2ad2adc7639a2c8ee8049d85e08031e30b69d9
View other sources: Spamhaus VirusTotal
Contained within other IP sets: socks_proxy_30d, stopforumspam_180d, stopforumspam_365d, stopforumspam_90d, stopforumspam

Country: United States
Network:
Noticed: 26 times
Protocols Attacked: Anonymous Proxy
Passive DNS Results: bikinisborabora.cl defiendefamilia.cl www.defiendefamilia.cl defiendetufamilia.cl www.defiendetufamilia.cl ropapublicitaria.cl www.ropapublicitaria.cl odorox.cl www.yakito.cl yakito.cl sistema.enerfrost.cl edirekta.cl ftp.edirekta.cl www.edirekta.cl www.antarcticomega.com antarcticomega.com accionacapital.com www.accionacapital.com acinterpretes.cl ftp.acinterpretes.cl pop.acinterpretes.cl smtp.acinterpretes.cl www.acinterpretes.cl startupoffice.cl www.startupoffice.cl sistema.startupoffice.cl palestino.cl www.palestino.cl www.transporteslatoscana.com ftp.transporteslatoscana.com transporteslatoscana.com www.teresachomali.com teresachomali.com www.odorox.cl ftp.lab9.cl www.lab9.cl lab9.cl comunidadpalestinachile.cl antarcticomega.cl www.antarcticomega.cl profit.inteliworks.cl www.crm.inteliworks.cl crm.inteliworks.cl www.shepherds.cl shepherds.cl www.camcha.cl camcha.cl theoriginalwinebalm.com www.theoriginalwinebalm.com www.asesoria-contable.cl asesoria-contable.cl www.comunidadpalestinachile.cl abujusef.cl www.abujusef.cl www.refabrica2.com refabrica2.com ftp.incomare.com incomare.com www.incomare.com riescoycia.cl www.riescoycia.cl ftp.salimhodali.cl www.salimhodali.cl salimhodali.cl www.inveximp.com ftp.inveximp.com inveximp.com ftp.giacamanstore.cl giacamanstore.cl www.giacamanstore.cl ftp.defiendelaboral.cl www.defiendelaboral.cl defiendelaboral.cl ftp.asinversion.cl www.asinversion.cl asinversion.cl ftp.elmanio.cl elmanio.cl www.elmanio.cl versani.cl pop.versani.cl smtp.versani.cl ftp.versani.cl www.versani.cl www.hiloslupe.cl hiloslupe.cl smtp.hiloslupe.cl pop.hiloslupe.cl ftp.hiloslupe.cl www.elghalyoun.cl elghalyoun.cl laoriental.cl www.laoriental.cl www.cacoem.com cacoem.com smtp.jeconsultants.cl ftp.jeconsultants.cl www.jeconsultants.cl pop.jeconsultants.cl jeconsultants.cl pop.gespin.cl smtp.gespin.cl www.gespin.cl gespin.cl ftp.gespin.cl socios.clubpalestino.cl clubpalestino.cl www.clubpalestino.cl www.clubluckyhouse.com clubluckyhouse.com colegioarabe.cl www.colegioarabe.cl clubdetirolibertadores.com www.clubdetirolibertadores.com lahsenycia.cl www.lahsenycia.cl

Open Ports Detected

10000 10001 10002 10009 10014 10020 10031 10034 10041 10042 10046 10047 10048 10049 10066 10087 3389 443 5000 5001 5006 5010 6001 6002 6003 6009 6020 6036 6070 80

Map

Whois Information

NetRange: 148.72.164.0 - 148.72.177.255
CIDR: 148.72.168.0/21, 148.72.176.0/23, 148.72.164.0/22
NetName: VIG-97
NetHandle: NET-148-72-164-0-1
Parent: NET148 (NET-148-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: velia.net (VIG-97)
RegDate: 2015-10-26
Updated: 2024-10-21
Ref: https://rdap.arin.net/registry/ip/148.72.164.0
OrgName: velia.net
OrgId: VIG-97
Address: Hessen-Homburg-Platz 1
City: Hanau
StateProv:
PostalCode: 63452
Country: DE
RegDate: 2023-05-05
Updated: 2024-11-26
Ref: https://rdap.arin.net/registry/entity/VIG-97
OrgRoutingHandle: STEWA571-ARIN
OrgRoutingName: Steward, Ron
OrgRoutingPhone: +1-555-867-5309
OrgRoutingEmail: rsteward@velia.net
OrgRoutingRef: https://rdap.arin.net/registry/entity/STEWA571-ARIN
OrgNOCHandle: HOSTM2182-ARIN
OrgNOCName: hostmaster
OrgNOCPhone: +49 221 429 143
OrgNOCEmail: net-arin@velia.net
OrgNOCRef: https://rdap.arin.net/registry/entity/HOSTM2182-ARIN
OrgTechHandle: STEWA571-ARIN
OrgTechName: Steward, Ron
OrgTechPhone: +1-555-867-5309
OrgTechEmail: rsteward@velia.net
OrgTechRef: https://rdap.arin.net/registry/entity/STEWA571-ARIN
OrgTechHandle: HOSTM2182-ARIN
OrgTechName: hostmaster
OrgTechPhone: +49 221 429 143
OrgTechEmail: net-arin@velia.net
OrgTechRef: https://rdap.arin.net/registry/entity/HOSTM2182-ARIN
OrgAbuseHandle: HOSTM2182-ARIN
OrgAbuseName: hostmaster
OrgAbusePhone: +49 221 429 143
OrgAbuseEmail: net-arin@velia.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/HOSTM2182-ARIN
OrgDNSHandle: HOSTM2182-ARIN
OrgDNSName: hostmaster
OrgDNSPhone: +49 221 429 143
OrgDNSEmail: net-arin@velia.net
OrgDNSRef: https://rdap.arin.net/registry/entity/HOSTM2182-ARIN
OrgRoutingHandle: HOSTM2182-ARIN
OrgRoutingName: hostmaster
OrgRoutingPhone: +49 221 429 143
OrgRoutingEmail: net-arin@velia.net
OrgRoutingRef: https://rdap.arin.net/registry/entity/HOSTM2182-ARIN

Links to attack logs

Share on: