157.92.13.189 Threat Intelligence and Host Information
ipinfopage
General
This page contains threat intelligence information for the IPv4 address
157.92.13.189 and was generated either as a result of
observed malicious activity or as an information gathering exercise to assist with
enrichment of security events and context. All information is gathered passively
through aggregation of public sources, or observations through activity upon honeynets.
The host score is calculated through a series of statistically weighted values and
machine learning which takes into account metadata such as host information, frequency,
volume and global distribution of malicious activity, association with other known
malicious hosts or networks, proxying or anonymising behaviour such as with tor exit
nodes, residential proxies or VPN services, and many other attributes. These values are
historical and indicative only - and should not be taken to be an accurate representation
of the users, businesses or networks in which they reside.
🟠 Elevated —
57/100
Geographic Location
Host and Network Information
- View other sources:
Spamhaus
VirusTotal
Shodan
AbuseIPDB
- Country: Argentina
- Noticed: 33 times
- Protocols Attacked: SSH
- Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
- Tor Node: No
- cowrie
- cyber security
- ioc
- malicious
- Nextray
- phishing
- ssh
MITRE ATT&CK TTPs
- T1078 - Valid Accounts
- T1083 - File and Directory Discovery
- T1098.004 - SSH Authorized Keys
- T1105 - Ingress Tool Transfer
- T1110.004 - Credential Stuffing
- T1110 - Brute Force
Attack Log References
Whois Information
NetRange: 157.92.0.0 - 157.92.255.255
CIDR: 157.92.0.0/16
NetName: LACNIC-ERX-157-92-0-0
NetHandle: NET-157-92-0-0-1
Parent: NET157 (NET-157-0-0-0-0)
NetType: Transferred to LACNIC
OriginAS:
Organization: Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate: 2004-04-07
Updated: 2007-12-17
Comment: This IP address range is under LACNIC responsibility
Comment: for further allocations to users in LACNIC region.
Comment: Please see http://www.lacnic.net/ for further details,
Ref: https://rdap.arin.net/registry/ip/157.92.0.0
OrgName: Latin American and Caribbean IP address Regional Registry
OrgId: LACNIC
Address: Rambla Republica de Mexico 6125
City: Montevideo
StateProv:
PostalCode: 11400
Country: UY
RegDate: 2002-07-27
Updated: 2018-03-15
Ref: https://rdap.arin.net/registry/entity/LACNIC
OrgTechHandle: LACNIC-ARIN
OrgTechName: LACNIC Whois Info
OrgTechPhone: +598-2604-2222
OrgTechRef: https://rdap.arin.net/registry/entity/LACNIC-ARIN
OrgAbuseHandle: LWI100-ARIN
OrgAbuseName: LACNIC Whois Info
OrgAbusePhone: +598-2604-2222
OrgAbuseEmail: abuse@lacnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/LWI100-ARIN
inetnum: 157.92.0.0/16
status: assigned
aut-num: N/A
owner: Universidad Nacional de Buenos Aires
ownerid: AR-UNBA-LACNIC
responsible: Centro de Comunicación Científica
address: Marcelo T. de Alvear, 2142, Piso 18 sector B
address: C1122AAH - Buenos Aires -
country: AR
phone: +54 11 45083961
owner-c: UBA
tech-c: UBA
abuse-c: UBA
inetrev: 157.92.0.0/16
nserver: NS1.UBA.AR
nsstat: 20251012 AA
nslastaa: 20251012
nserver: NS2.UBA.AR [lame - not published]
nsstat: 20251012 TIMEOUT
nslastaa: 20231214
created: 19911217
changed: 20030303
nic-hdl: UBA
person: Universidad de Buenos Aires
e-mail: oper@ccc.uba.ar
address: Marcelo T. de Alvear, 2142, Piso 18
address: C1122AAH - Buenos Aires -
country: AR
phone: +54 011 45083961
created: 20091027
changed: 20131030