159.192.138.170 Threat Intelligence and Host Information

May 01, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 159.192.138.170 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 60/100

Host and Network Information

Mitre ATT&CK IDs: T1498 - Network Denial of Service, T1499.002 - Service Exhaustion Flood, T1499 - Endpoint Denial of Service
Tags: attack ddos, botnet, cc.py, Cyclops, ddos, DDoS, DDOS, Gamardeon, HEAD Floods, HermeticWiper, IsaacWiper, Killnet, KillNet, list ips, PartyTicket, portscan, proxy, russia, russian, T1498, T1499, ukraine, WhisperGate
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_net_ua, proxylists_30d, proxylists_7d

Country: Thailand
Network:
Noticed: 36 times
Protocols Attacked: Anonymous Proxy
Countries Attacked: Poland, Russian Federation, Sweden

Malware Detected on Host

Count: 4 ab9cd59d789e6c7841b9d28689743e700d492b5fae1606f184889cc7e6acadcc 489caefb095725e68d83e9b2009e97e02a8eacc7833d534e6e12a61c32788479 f4c0e951ac66b09816f04c3e256ef94a78f8d1285448bb7c64d1f396f99e1201 374c4ea8a7c412b9a07dfd1730fd8ba69894106b0930f63f98297f05f7f08233

Map

Whois Information

NetRange: 159.192.0.0 - 159.192.255.255
CIDR: 159.192.0.0/16
NetName: APNIC
NetHandle: NET-159-192-0-0-1
Parent: NET159 (NET-159-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2015-03-31
Updated: 2015-03-31
Ref: https://rdap.arin.net/registry/ip/159.192.0.0
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
inetnum: 159.192.128.0 - 159.192.255.255
netname: CAT-BB-NET
descr: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
country: TH
admin-c: TU38-AP
tech-c: WP273-AP
tech-c: PD452-AP
tech-c: CB840-AP
tech-c: IC174-AP
abuse-c: AC1752-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-TH-THIX-CAT
mnt-irt: IRT-CATBB-TH
last-modified: 2020-06-16T15:30:32Z
irt: IRT-CATBB-TH
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
e-mail: admin-thix@cat.net.th
abuse-mailbox: admin-thix@cat.net.th
admin-c: CB840-AP
tech-c: TU38-AP
tech-c: PS474-AP
tech-c: WP273-AP
tech-c: PD452-AP
tech-c: IC174-AP
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2025-01-15T04:40:28Z
role: ABUSE CATBBTH
country: ZZ
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
phone: +000000000
e-mail: admin-thix@cat.net.th
admin-c: CB840-AP
tech-c: TU38-AP
tech-c: PS474-AP
tech-c: WP273-AP
tech-c: PD452-AP
tech-c: IC174-AP
nic-hdl: AC1752-AP
abuse-mailbox: admin-thix@cat.net.th
mnt-by: APNIC-ABUSE
last-modified: 2025-01-15T04:40:55Z
person: CAT Broadband
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
country: TH
phone: +66-261-42138
e-mail: nmc@cat.net.th
nic-hdl: CB840-AP
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2018-02-07T08:56:35Z
person: IP-network CAT Telecom
nic-hdl: IC174-AP
e-mail: noc@cat.net.th
address: Data Comm. Dept. National Telecom Public Company Limited
address: NT Tower
address: 72 Charoenkrung Road Bangrak Bangkok THAILAND 10501
phone: +66-2-6142374
fax-no: +66-2-6142270
country: TH
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2022-09-05T09:44:01Z
person: Passanon dumsood
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
country: TH
phone: +66-261-42138
e-mail: passanon.d@cat.net.th
nic-hdl: PD452-AP
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2017-06-13T04:19:50Z
person: Theerachai Udomkitpanya
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok
country: TH
phone: +66-261-42918
e-mail: theerachai.u@cattelecom.com
nic-hdl: TU38-AP
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2017-11-23T10:20:25Z
person: Weerapong Pankaew
nic-hdl: WP273-AP
e-mail: pankaew@cat.net.th
address: CAT-BB-NET
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
phone: +66-261-42138
fax-no: +66-261-42682
country: TH
mnt-by: MAINT-NEW
last-modified: 2008-09-25T12:45:58Z
route: 159.192.138.0/24
origin: AS131090
descr: CAT Telecom Public Company Limited
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2023-10-02T07:04:27Z

Links to attack logs

Share on: