159.192.121.240 Threat Intelligence and Host Information

Share on:

Apr 07, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 159.192.121.240 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 65/100

Host and Network Information

Mitre ATT&CK IDs: T1498 - Network Denial of Service, T1499.002 - Service Exhaustion Flood, T1499 - Endpoint Denial of Service
Tags: cc.py, cyber security, DDoS, DDOS, HEAD Floods, ioc, Killnet, KillNet, malicious, Nextray, phishing, T1498, T1499
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_net_ua, sblam, socks_proxy_1d, socks_proxy_30d, socks_proxy_7d, stopforumspam_180d, stopforumspam_30d, stopforumspam_365d, stopforumspam_7d, stopforumspam_90d, stopforumspam
Country: Thailand
Network: AS131090 cat telecom public company ltd
Noticed: 50 times
Protocols Attacked: Anonymous Proxy
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 1 5ee96cce83902ae9cb52fafac4479412f4d12bfc9b699cb81763f140e7b979a8

Open Ports Detected

2000 9000

Map

Whois Information

NetRange: 159.192.0.0 - 159.192.255.255
CIDR: 159.192.0.0/16
NetName: APNIC
NetHandle: NET-159-192-0-0-1
Parent: NET159 (NET-159-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2015-03-31
Updated: 2015-03-31
Ref: https://rdap.arin.net/registry/ip/159.192.0.0
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
inetnum: 159.192.0.0 - 159.192.127.255
netname: CAT-BB-NET
descr: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
country: TH
admin-c: TU38-AP
tech-c: WP273-AP
tech-c: PD452-AP
tech-c: CB840-AP
tech-c: IC174-AP
abuse-c: AC1752-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-TH-THIX-CAT
mnt-irt: IRT-CATBB-TH
last-modified: 2020-06-16T15:29:31Z
irt: IRT-CATBB-TH
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: CB840-AP
tech-c: TU38-AP
tech-c: PS474-AP
tech-c: WP273-AP
tech-c: PD452-AP
tech-c: IC174-AP
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2023-12-06T04:03:03Z
role: ABUSE CATBBTH
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
country: ZZ
phone: +000000000
e-mail: [email protected]
admin-c: CB840-AP
tech-c: TU38-AP
tech-c: PS474-AP
tech-c: WP273-AP
tech-c: PD452-AP
tech-c: IC174-AP
nic-hdl: AC1752-AP
abuse-mailbox: [email protected]
mnt-by: APNIC-ABUSE
last-modified: 2023-12-06T04:10:29Z
person: CAT Broadband
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
country: TH
phone: +66-261-42138
e-mail: [email protected]
nic-hdl: CB840-AP
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2018-02-07T08:56:35Z
person: IP-network CAT Telecom
nic-hdl: IC174-AP
e-mail: [email protected]
address: Data Comm. Dept. National Telecom Public Company Limited
address: NT Tower
address: 72 Charoenkrung Road Bangrak Bangkok THAILAND 10501
phone: +66-2-6142374
fax-no: +66-2-6142270
country: TH
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2022-09-05T09:44:01Z
person: Passanon dumsood
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
country: TH
phone: +66-261-42138
e-mail: [email protected]
nic-hdl: PD452-AP
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2017-06-13T04:19:50Z
person: Theerachai Udomkitpanya
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok
country: TH
phone: +66-261-42918
e-mail: [email protected]
nic-hdl: TU38-AP
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2017-11-23T10:20:25Z
person: Weerapong Pankaew
nic-hdl: WP273-AP
e-mail: [email protected]
address: CAT-BB-NET
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
phone: +66-261-42138
fax-no: +66-261-42682
country: TH
mnt-by: MAINT-NEW
last-modified: 2008-09-25T12:45:58Z
route: 159.192.121.0/24
origin: AS131090
descr: CAT Telecom Public Company Limited
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2023-10-02T07:04:07Z

Links to attack logs