159.148.5.233 Threat Intelligence and Host Information

Share on:

Jul 23, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 159.148.5.233 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 25/100

Host and Network Information

Tags: Nextray, cyber security, ioc, malicious, phishing
View other sources: Spamhaus VirusTotal
Country: Latvia
Network: AS2588 sia latnet
Noticed: 1 times
Protcols Attacked: SSH
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: birojs.ozols.lv birojs.ozolsgrupa.lv

Malware Detected on Host

Count: 1 c2241d595ec95d4c43c37c3bfedeaccd0bf87477b2b4ee439a2bfe65ebb202e1

Map

Whois Information

NetRange: 159.147.0.0 - 159.149.255.255
CIDR: 159.147.0.0/16, 159.148.0.0/15
NetName: RIPE-ERX-159-147-0-0
NetHandle: NET-159-147-0-0-1
Parent: NET159 (NET-159-0-0-0-0)
NetType: Early Registrations, Transferred to RIPE NCC
OriginAS:
Organization: RIPE Network Coordination Centre (RIPE)
RegDate: 2003-10-29
Updated: 2003-10-29
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Ref: https://rdap.arin.net/registry/ip/159.147.0.0
OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2013-07-29
Ref: https://rdap.arin.net/registry/entity/RIPE
OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName: Abuse Contact
OrgAbusePhone: +31205354444
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
inetnum: 159.148.0.0 - 159.148.255.255
netname: BITELATVIJA
org: ORG-SSN2-RIPE
descr: BITE Latvija
country: LV
admin-c: SNLV-RIPE
tech-c: SNLV-RIPE
status: LEGACY
mnt-by: RIPE-NCC-LEGACY-MNT
mnt-by: SNLV-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2022-12-14T13:28:17Z
organisation: ORG-SSN2-RIPE
org-name: SIA “BITE Latvija”
country: LV
org-type: LIR
address: Uriekstes street 2A
address: LV-1005
address: Riga
address: LATVIA
phone: +37125851601
phone: +37167788120
fax-no: +37167788129
admin-c: JJ1652-RIPE
admin-c: VTA
admin-c: VJVJ
admin-c: RFRF
mnt-ref: SNLV-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: SNLV-MNT
abuse-c: snlv-ripe
tech-c: snlv-ripe
created: 2008-07-24T13:53:22Z
last-modified: 2021-08-18T08:35:25Z
role: BITE Latvija NOC
address: Uriekstes 2A, Riga, Latvia
abuse-mailbox: [email protected]
admin-c: JJ1652-RIPE
tech-c: JJ1652-RIPE
tech-c: KB4709-RIPE
tech-c: RFRF
tech-c: VTA
tech-c: VJVJ
nic-hdl: SNLV-RIPE
mnt-by: SNLV-MNT
created: 2008-07-29T18:17:25Z
last-modified: 2022-02-17T00:19:52Z
route: 159.148.0.0/16
origin: AS2588
mnt-by: AS2588-MNT
created: 2001-10-29T15:35:17Z
last-modified: 2022-05-02T08:07:58Z

Links to attack logs

bruteforce-ip-list-2020-10-23