148.76.97.250 Threat Intelligence and Host Information

Apr 29, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 148.76.97.250 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 67/100

Host and Network Information

Mitre ATT&CK IDs: T1498 - Network Denial of Service, T1499.002 - Service Exhaustion Flood, T1499 - Endpoint Denial of Service
Tags: cc.py, cyber security, DDoS, DDOS, HEAD Floods, ioc, Killnet, KillNet, malicious, Nextray, phishing, proxy, T1498, T1499
View other sources: Spamhaus VirusTotal
Contained within other IP sets: botscout_30d, botscout_7d, stopforumspam_180d, stopforumspam_1d, stopforumspam_30d, stopforumspam_365d, stopforumspam_7d, stopforumspam_90d, stopforumspam

Country: United States
Network:
Noticed: 50 times
Protocols Attacked: Anonymous Proxy
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: www.goldmsp.com www.ccc-erp.com erpcomponents.com completecontacterp.com www.erpbrokersoftware.com completecontactcrm.com erpplususa.com ccc-erp.com componentserp.com la-53.com www.myerpnow.com www.rfqlion.com rfqlion.com www.la-53.com www.erpgem.com www.erpelectronics.com www.erpplususa.com www.erpcomponents.com www.erpaerospace.com www.erpcomponent.com www.componentserp.com www.completecontactcrm.com www.esitmsp.com erpgem.com myerpnow.com erpelectronics.com erpcomponent.com erpaerospace.com erpbrokersoftware.com goldmsp.com esitmsp.com

Open Ports Detected

Map

Whois Information

NetRange: 148.74.0.0 - 148.76.223.255
CIDR: 148.76.128.0/18, 148.74.0.0/15, 148.76.0.0/17, 148.76.192.0/19
NetName: OPTO
NetHandle: NET-148-74-0-0-1
Parent: NET148 (NET-148-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Optimum Online (OPTO)
RegDate: 2015-05-14
Updated: 2017-03-14
Ref: https://rdap.arin.net/registry/ip/148.74.0.0
OrgName: Optimum Online
OrgId: OPTO
Address: 111 new south RD
City: Hicksville
StateProv: NY
PostalCode: 11801
Country: US
RegDate: 1999-07-29
Updated: 2024-11-25
Ref: https://rdap.arin.net/registry/entity/OPTO
OrgTechHandle: OH4-ORG-ARIN
OrgTechName: OOL Hostmaster
OrgTechPhone: +1-516-803-2300
OrgTechEmail: abuse@alticeusa.com
OrgTechRef: https://rdap.arin.net/registry/entity/OH4-ORG-ARIN
OrgAbuseHandle: OH4-ORG-ARIN
OrgAbuseName: OOL Hostmaster
OrgAbusePhone: +1-516-803-2300
OrgAbuseEmail: abuse@alticeusa.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/OH4-ORG-ARIN
NetRange: 148.76.64.0 - 148.76.127.255
CIDR: 148.76.64.0/18
NetName: OOL-CPE-LP-148-76-64-0-18
NetHandle: NET-148-76-64-0-1
Parent: OPTO (NET-148-74-0-0-1)
NetType: Reallocated
OriginAS: AS54004
Organization: Optimum Lightpath (CSCHO-3)
RegDate: 2019-01-16
Updated: 2019-01-16
Ref: https://rdap.arin.net/registry/ip/148.76.64.0
OrgName: Optimum Lightpath
OrgId: CSCHO-3
Address: 1111 Stewart Ave
City: Bethpage
StateProv: NY
PostalCode: 11714
Country: US
RegDate: 2007-07-23
Updated: 2024-07-24
Ref: https://rdap.arin.net/registry/entity/CSCHO-3
OrgAbuseHandle: OLE2-ARIN
OrgAbuseName: Optimum Lightpath Eng
OrgAbusePhone: +1-866-611-3434
OrgAbuseEmail: ipadmin@lightpathfiber.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/OLE2-ARIN
OrgTechHandle: OLE2-ARIN
OrgTechName: Optimum Lightpath Eng
OrgTechPhone: +1-866-611-3434
OrgTechEmail: ipadmin@lightpathfiber.com
OrgTechRef: https://rdap.arin.net/registry/entity/OLE2-ARIN
OrgNOCHandle: OOLAB-ARIN
OrgNOCName: OOL Hostmaster
OrgNOCPhone: +1-516-803-2400
OrgNOCEmail: abuse@cv.net
OrgNOCRef: https://rdap.arin.net/registry/entity/OOLAB-ARIN
NetRange: 148.76.97.248 - 148.76.97.255
CIDR: 148.76.97.248/29
NetName: CVNET-944C61F8
NetHandle: NET-148-76-97-248-1
Parent: OOL-CPE-LP-148-76-64-0-18 (NET-148-76-64-0-1)
NetType: Reassigned
OriginAS: AS6128
Customer: NU-AGE MANAGED SERVICES LLC (C07288440)
RegDate: 2019-02-01
Updated: 2019-02-01
Ref: https://rdap.arin.net/registry/ip/148.76.97.248
CustName: NU-AGE MANAGED SERVICES LLC
Address: P.O. BOX 1543
Address: ATTN: ANTHONY CHILLINO
City: PEARL RIVER
StateProv: NY
PostalCode: 10965
Country: US
RegDate: 2019-02-01
Updated: 2019-02-01
Ref: https://rdap.arin.net/registry/entity/C07288440
OrgAbuseHandle: OLE2-ARIN
OrgAbuseName: Optimum Lightpath Eng
OrgAbusePhone: +1-866-611-3434
OrgAbuseEmail: ipadmin@lightpathfiber.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/OLE2-ARIN
OrgTechHandle: OLE2-ARIN
OrgTechName: Optimum Lightpath Eng
OrgTechPhone: +1-866-611-3434
OrgTechEmail: ipadmin@lightpathfiber.com
OrgTechRef: https://rdap.arin.net/registry/entity/OLE2-ARIN
OrgNOCHandle: OOLAB-ARIN
OrgNOCName: OOL Hostmaster
OrgNOCPhone: +1-516-803-2400
OrgNOCEmail: abuse@cv.net
OrgNOCRef: https://rdap.arin.net/registry/entity/OOLAB-ARIN

Links to attack logs

Share on: