161.97.187.24 Threat Intelligence and Host Information
Share on:
Apr 07, 2024
ipinfopage
General
This page contains threat intelligence information for the IPv4 address 161.97.187.24 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.
Potentially Malicious Host 🟡 35/100
Host and Network Information
- Tags: cyber security, ioc, kfsensor, malicious, Nextray, phishing, rdp, ssh
-
JARM: 3fd3fd00000000000043d3fd3fd43d79451d8c63b099acafdbabb24551d0e6
-
View other sources: Spamhaus VirusTotal
- Country: Germany
- Network: AS51167 contabo gmbh
- Noticed: 50 times
- Protocols Attacked: ssh
- Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
- Passive DNS Results: machineshop.rocker.services url.rocker.pro oauth.rocker.pro shop.pma.rocker.pro shop.pma.rocker.services code.rocker.pro ytdl.rocker.pro www.october.rocker.pro october.rocker.pro shop-dev.rocker.pro project.rocker.pro www.project.rocker.pro traefik.rocker.pro jesse.rocker.pro m.rocker.pro www.m.rocker.pro machine-pma.rocker.services mc.rocker.pro adguard.rocker.services adguard.rocker.pro mspma.rocker.services mspma.rocker.pro mtapma.rocker.pro portainer.rocker.pro mta.rocker.pro freedom.rocker.pro freedompma.rocker.pro mqtt.rocker.pro email.rocker.pro rosaspmaa.rocker.pro rosaspma.rocker.pro a2zdev.rocker.pro pma.rocker.pro penpot.rocker.pro penpot.rocker.services www.rocker.pro ark.rocker.services xp.rocker.services xp.rocker.pro xpresspma.rocker.pro xpresspma.rocker.services itp-pma.rocker.services itp.rocker.services xpress.rocker.pro xpress.rocker.services wiki.rocker.pro wiki.rocker.services email.rocker.services www.rocker.services www.kgsec.hu kgsec.hu noparafa.hu www.noparafa.hu paperless.rocker.pro paperless.rocker.services darktable.rocker.pro darktable.rocker.services paster.rocker.pro paste.rocker.services cloud.rocker.pro rocker.pro registry.rocker.pro registry.rocker.services docker.rocker.pro docker.rocker.services git.rocker.pro grafana.rocker.pro pma-il.rocker.services pma-mail.rocker.services azuracast.rocker.services speedtest.rocker.services icecast.rocker.services ticket-db.rocker.services itp-ftp.rocker.services cloud.rocker.services projects.rocker.services npm.rocker.services prometheus.rocker.services pma-pizzamix.rocker.services amazon-pma.rocker.services grafana.rocker.services soy.rocker.services csir.rocker.services amazon.rocker.services superset.rocker.services storage-pma.rocker.services portal-pma.rocker.services rate-portal.rocker.services rate.rocker.services ratepma.rocker.services ts.rocker.services storage.rocker.services storage-db.rocker.services mc-pma.rocker.services mc.rocker.services board.rocker.services ticket.rocker.services www.lowlandfest.hu lowland.rocker.services metabase.rocker.services lowlandfest.hu flexcoop.rocker.services znc.rocker.services minecraft.rocker.services jenkins.rocker.services git.rocker.services home.rocker.services pma.laravel.rocker.services pma.rocker.services portainer.rocker.services traefik.rocker.services rocker.services
Open Ports Detected
110 143 21 22 25 3306 443 587 80 8087 993 995
Map
Whois Information
- NetRange: 161.97.64.0 - 161.97.189.255
- CIDR: 161.97.184.0/22, 161.97.176.0/21, 161.97.188.0/23, 161.97.160.0/20, 161.97.128.0/19, 161.97.64.0/18
- NetName: RIPE
- NetHandle: NET-161-97-64-0-1
- Parent: NET161 (NET-161-0-0-0-0)
- NetType: Early Registrations, Transferred to RIPE NCC
- OriginAS:
- Organization: RIPE Network Coordination Centre (RIPE)
- RegDate: 2020-05-07
- Updated: 2020-05-07
- Ref: https://rdap.arin.net/registry/ip/161.97.64.0
- OrgName: RIPE Network Coordination Centre
- OrgId: RIPE
- Address: P.O. Box 10096
- City: Amsterdam
- StateProv:
- PostalCode: 1001EB
- Country: NL
- RegDate:
- Updated: 2013-07-29
- Ref: https://rdap.arin.net/registry/entity/RIPE
- OrgAbuseHandle: ABUSE3850-ARIN
- OrgAbuseName: Abuse Contact
- OrgAbusePhone: +31205354444
- OrgAbuseEmail: [email protected]
- OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
- OrgTechHandle: RNO29-ARIN
- OrgTechName: RIPE NCC Operations
- OrgTechPhone: +31 20 535 4444
- OrgTechEmail: [email protected]
- OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
- inetnum: 161.97.184.0 - 161.97.187.255
- netname: CONTABO
- descr: Contabo GmbH
- org: ORG-GG22-RIPE
- country: DE
- admin-c: MH7476-RIPE
- tech-c: MH7476-RIPE
- status: ASSIGNED PA
- mnt-by: MNT-CONTABO
- created: 2020-05-08T06:42:55Z
- last-modified: 2020-05-08T06:48:19Z
- organisation: ORG-GG22-RIPE
- org-name: Contabo GmbH
- country: DE
- org-type: LIR
- address: Aschauer Strasse 32a
- address: 81549
- address: Munchen
- address: GERMANY
- phone: +498921268372
- fax-no: +498921665862
- abuse-c: MH12453-RIPE
- mnt-ref: RIPE-NCC-HM-MNT
- mnt-ref: MNT-CONTABO
- mnt-ref: MNT-OCIRIS
- mnt-by: RIPE-NCC-HM-MNT
- mnt-by: MNT-CONTABO
- created: 2009-12-09T13:41:08Z
- last-modified: 2021-09-14T10:49:04Z
- person: Wilhelm Zwalina
- address: Contabo GmbH
- address: Aschauer Str. 32a
- address: 81549 Muenchen
- phone: +49 89 21268372
- fax-no: +49 89 21665862
- nic-hdl: MH7476-RIPE
- mnt-by: MNT-CONTABO
- mnt-by: MNT-GIGA-HOSTING
- created: 2010-01-04T10:41:37Z
- last-modified: 2020-04-24T16:09:30Z
- route: 161.97.186.0/23
- origin: AS51167
- mnt-by: MNT-CONTABO
- created: 2020-05-08T07:28:15Z
- last-modified: 2020-05-08T07:28:15Z