149.102.130.252 Threat Intelligence and Host Information

General

IP Address
149.102.130.252
IPv4 Address
Location
🇬🇧 Portsmouth, United Kingdom
GB
Network
AS51167
Contabo GmbH
Threat Score
38/100
Medium Risk
cowriescansipsipvicioussshssh-brute
Attack Intelligence
MITRE ATT&CK Techniques
T1595 - Active Scanning
Open Ports Detected
22
Geographic Location
Country
United Kingdom
City
Portsmouth
Region
England
Coordinates
50.8514, -0.9903
Network Information
ASN
AS51167
Organization
Contabo GmbH
Network
AS51167 Contabo GmbH
WHOIS Information
NetRange
149.102.0.0 - 149.102.255.255
CIDR
149.102.0.0/16
NetName
COGENT-149-102-16
NetHandle
NET-149-102-0-0-1
Parent
NET149 (NET-149-0-0-0-0)
NetType
Direct Allocation
OriginAS
Organization
Cogent Communications, LLC (COGC)
RegDate
2000-05-30
Updated
2025-09-23
Ref
https://rdap.arin.net/registry/entity/COGC
OrgName
Cogent Communications, LLC
OrgId
COGC
Address
2450 N Street NW
City
Washington
StateProv
DC
PostalCode
20037
Country
US
Comment
Geofeed https://geofeed.cogentco.com/geofeed.csv
OrgTechHandle
IPALL-ARIN
OrgTechName
IP Allocation
OrgTechPhone
+1-877-875-4311
OrgTechEmail
ipalloc@cogentco.com
OrgTechRef
https://rdap.arin.net/registry/entity/IPALL-ARIN

  • Country: United Kingdom
  • Network:
  • Noticed: 2 times
  • Protocols Attacked: SSH
  • Countries Attacked: Australia

CVEs Detected

CVE-2023-44487 CVE-2025-23419

Disclaimer
This page contains threat intelligence information for the IPv4 address 149.102.130.252 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.