152.70.235.185 Threat Intelligence and Host Information

Share on:

Mar 17, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 152.70.235.185 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 11/100

Host and Network Information

JARM: 40d40d40d00000000043d40d40d43dd812443a829002f8e614d83abb6b19de
View other sources: Spamhaus VirusTotal
Country: South Korea
Network: AS31898 oracle corporation
Noticed: 1 times
Protocols Attacked: Anonymous Proxy
Passive DNS Results: astro.webredirect.org kr13.630318.xyz ml.azong.ml

Open Ports Detected

111 443 80 8181 8880

CVEs Detected

CVE-2021-23017 CVE-2021-3618 CVE-2023-44487

Map

Whois Information

NetRange: 152.70.0.0 - 152.70.255.255
CIDR: 152.70.0.0/16
NetName: ORACLE-SCA-CORP-SPACE
NetHandle: NET-152-70-0-0-1
Parent: NET152 (NET-152-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Oracle Corporation (ORACLE-4)
RegDate: 1991-08-21
Updated: 2016-10-10
Ref: https://rdap.arin.net/registry/ip/152.70.0.0
OrgName: Oracle Corporation
OrgId: ORACLE-4
Address: 500 Oracle Parkway
Address: Attn: Domain Administrator
City: Redwood Shores
StateProv: CA
PostalCode: 94065
Country: US
RegDate: 1988-04-29
Updated: 2021-08-02
Ref: https://rdap.arin.net/registry/entity/ORACLE-4
OrgTechHandle: ORACL1-ARIN
OrgTechName: ORACLE NIS
OrgTechPhone: +1-650-506-2220
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/ORACL1-ARIN
OrgRoutingHandle: ORACL2-ARIN
OrgRoutingName: ORACLEROUTING
OrgRoutingPhone: +1-800-392-2999
OrgRoutingEmail: [email protected]
OrgRoutingRef: https://rdap.arin.net/registry/entity/ORACL2-ARIN
OrgAbuseHandle: NISAM-ARIN
OrgAbuseName: Network Information Systems Abuse Management
OrgAbusePhone: +1-650-506-2220
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/NISAM-ARIN

Links to attack logs