157.7.195.17 Threat Intelligence and Host Information

Sep 15, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 157.7.195.17 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 5/100

Host and Network Information

View other sources: Spamhaus VirusTotal

Country: Japan
Network: AS7506 gmo internet
Noticed: 1 times
Protocols Attacked: Anonymous Proxy
Passive DNS Results: ad3k7tf.buzz

Open Ports Detected

10000 10073 10134 10143 1024 10243 10443 10554 1063 1080 10909 10911 1099 11000 11112 1119 11210 11211 11300 11434 1153 1167 1177 12000 12235 1234 12345 1290 1311 1337 1344 13579 1388 1400 14147 14265 1433 14344 1442 1471 1515 1521 15301 1588 1599 16010 16030 1604 16285 16670 16993 17000 1723 1800 1801 18080 18081 18245 1833 18443 1880 1911 1925 1926 1935 1947 1962 2000 20000 2002 2006 2008 20256 2052 2061 2067 2068 2070 2077 2080 2081 2082 2086 2087 20880 21027 2121 21379 2154 2181 22 22000 22001 2220 2222 22222 2245 2320 2323 2332 23424 2345 2351 2375 2379 2404 2455 2480 2554 2556 25565 2628 27015 27017 2761 2762 28000 28015 3000 30002 30003 3001 3050 3058 3074 3078 3080 3087 3102 3103 3107 3116 3117 3119 3128 31337 31401 31443 3221 3260 3268 3269 32764 3299 3306 3333 3388 3389 3408 3443 3460 3479 3523 3541 3542 3551 3567 3749 3780 3951 3953 4000 4001 4022 4040 4064 4157 4242 4243 4282 4321 4369 443 4434 4443 4500 4524 4567 4664 4782 4786 4808 4840 4848 4899 4911 4949 5000 5001 5004 5005 5006 5007 5009 5010 5025 5080 5090 5172 5190 5201 5222 5269 5357 5432 5435 5443 5555 5560 5568 5601 5605 5634 5672 5697 5801 5901 5908 5938 5984 5986 6001 6002 6004 6009 6080 6265 6379 6443 6565 6633 6653 6664 6697 6887 7001 7003 7070 7071 7171 7218 7316 7415 7434 7443 7445 7465 7474 7500 7547 7548 7557 7634 7654 7657 7700 7777 7778 7779 7887 7989 80 8000 8006 8009 8010 8018 8029 8031 8040 8043 8045 8050 8052 8054 8057 8060 8080 8081 8083 8085 8086 8087 8089 8090 8096 8099 8103 8106 8107 8123 8126 8139 8140 8181 8200 8291 8333 8334 8384 8402 8424 8443 8444 8445 8500 8545 8554 8575 8688 8728 8765 8779 8800 8801 8802 8806 8817 8819 8821 8824 8829 8838 8844 8847 8857 8863 8879 8889 8899 9000 9001 9002 9004 9009 9010 9012 9016 9024 9038 9040 9042 9046 9049 9050 9051 9090 9091 9092 9095 9096 9100 9102 9151 9160 9191 9200 9219 9306 9310 9367 9389 9398 9418 9443 9527 9530 9595 9600 9633 9743 9800 9861 9876 9898 9943 9981 9999

Map

Whois Information

NetRange: 157.6.0.0 - 157.14.191.255
CIDR: 157.14.128.0/18, 157.8.0.0/14, 157.12.0.0/15, 157.14.0.0/17, 157.6.0.0/15
NetName: APNIC-ERX-157-6-0-0-1
NetHandle: NET-157-6-0-0-1
Parent: NET157 (NET-157-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2004-04-07
Updated: 2024-06-26
Comment: This IP address range is not registered in the ARIN database.
Comment: This range was transferred to the APNIC Whois Database as
Comment: part of the ERX (Early Registration Transfer) project.
Comment: For details, refer to the APNIC Whois Database via
Comment:
Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment: for the Asia Pacific region. APNIC does not operate networks
Comment: using this IP address range and is not able to investigate
Comment: spam or abuse reports relating to these addresses. For more
Ref: https://rdap.arin.net/registry/ip/157.6.0.0
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
inetnum: 157.7.32.0 - 157.7.255.255
netname: interQ
descr: GMO Internet Group, Inc.
descr: SAINTcity,3-1-1,kyomachi,Kokurakita-ku,Kitakyushu-shi,Fukuoka,802-0002,Japan
admin-c: JNIC1-AP
tech-c: JNIC1-AP
country: JP
mnt-by: MAINT-JPNIC
mnt-lower: MAINT-JPNIC
mnt-irt: IRT-JPNIC-JP
status: ALLOCATED PORTABLE
last-modified: 2022-11-10T02:20:04Z
irt: IRT-JPNIC-JP
address: Uchikanda OS Bldg 4F, 2-12-6 Uchi-Kanda
address: Chiyoda-ku, Tokyo 101-0047, Japan
e-mail: hostmaster@nic.ad.jp
abuse-mailbox: hostmaster@nic.ad.jp
phone: +81-3-5297-2311
fax-no: +81-3-5297-2312
admin-c: JNIC1-AP
tech-c: JNIC1-AP
mnt-by: MAINT-JPNIC
last-modified: 2022-06-14T04:26:58Z
role: Japan Network Information Center
address: Uchikanda OS Bldg 4F, 2-12-6 Uchi-Kanda
address: Chiyoda-ku, Tokyo 101-0047, Japan
country: JP
phone: +81-3-5297-2311
fax-no: +81-3-5297-2312
e-mail: hostmaster@nic.ad.jp
admin-c: JI13-AP
tech-c: JE53-AP
nic-hdl: JNIC1-AP
mnt-by: MAINT-JPNIC
last-modified: 2022-01-05T03:04:02Z
inetnum: 157.7.194.0 - 157.7.195.255
netname: CNODE-JP3
descr: GMO Internet Group, Inc.
country: JP
admin-c: JP00080271
tech-c: JP00080271
last-modified: 2023-03-26T05:50:07Z

Links to attack logs

anonymous-proxy-ip-list-2024-09-11 anonymous-proxy-ip-list-2024-09-13

Share on: