165.3.87.162 Threat Intelligence and Host Information

Oct 16, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 165.3.87.162 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 5/100

Host and Network Information

  • Country: United Kingdom
  • Network:
  • Noticed: 1 times
  • Protocols Attacked: SSH
  • Passive DNS Results: ly30.cc ly24.cc ly35.cc ly01.cc ly31.cc ly36.cc 88vl.vip 7615.app 7620.app 16919.vip 16911.vip 16931.vip 16950.vip 16902.vip 16943.vip 16941.vip 16929.vip 16956.vip 16947.vip 16907.vip 16945.vip 16946.vip 16955.vip 16903.vip 16921.vip 16936.vip 16954.vip 16940.vip 16942.vip 16924.vip 16904.vip 16944.vip 16930.vip 16948.vip 16939.vip 16916.vip 16914.vip 624.gg 7606.app 7608.app 7605.app 7610.app 878a.vip 2688.co 19047.vip onomezv.cn 19059.vip 19048.vip 19069.vip 19044.vip 19068.vip ly.app ly8888.vip 19077.vip 19001.vip 19002.vip asff.wanggang.asia 19020.vip 19042.vip 19018.vip 19011.vip 19008.vip 694.gg 6874.app 6902.app 6873.app 6879.app 6901.app 6904.app 6871.app 6872.app 6853.app 0860.app 0876.app 0868.app 0879.app jundao2014.f3322.org

Malware Detected on Host

Count: 1 2de11a7a9b08db3b3db4785c122d00b6e6e8098d961800d0da6b550e5925d410

Map

Whois Information

  • NetRange: 165.3.0.0 - 165.5.255.255
  • CIDR: 165.4.0.0/15, 165.3.0.0/16
  • NetName: AFRINIC-165-3-0-0
  • NetHandle: NET-165-3-0-0-1
  • Parent: NET165 (NET-165-0-0-0-0)
  • NetType: Transferred to AfriNIC
  • OriginAS:
  • Organization: African Network Information Center (AFRINIC)
  • RegDate: 2005-02-21
  • Updated: 2005-02-21
  • Comment: This IP address range is under AFRINIC responsibility.
  • Comment: Please see http://www.afrinic.net/ for further details,
  • Ref: https://rdap.arin.net/registry/ip/165.3.0.0
  • OrgName: African Network Information Center
  • OrgId: AFRINIC
  • Address: Level 11ABC
  • Address: Raffles Tower
  • Address: Lot 19, Cybercity
  • City: Ebene
  • StateProv:
  • PostalCode:
  • Country: MU
  • RegDate: 2004-05-17
  • Updated: 2015-05-04
  • Comment: AfriNIC - http://www.afrinic.net
  • Comment: The African & Indian Ocean Internet Registry
  • Ref: https://rdap.arin.net/registry/entity/AFRINIC
  • OrgTechHandle: GENER11-ARIN
  • OrgTechName: Generic POC
  • OrgTechPhone: +230 4666616
  • OrgTechEmail: abusepoc@afrinic.net
  • OrgTechRef: https://rdap.arin.net/registry/entity/GENER11-ARIN
  • OrgAbuseHandle: GENER11-ARIN
  • OrgAbuseName: Generic POC
  • OrgAbusePhone: +230 4666616
  • OrgAbuseEmail: abusepoc@afrinic.net
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/GENER11-ARIN
  • inetnum: 165.3.0.0 - 165.3.127.255
  • netname: WOOLTRU1
  • descr: Woolworths Holdings Limited
  • descr: WOOLWORTHS HOUSE,
  • descr: 93 LONGMARKET STREET, CAPE TOWN, WESTERN CAPE, 8001
  • country: ZA
  • admin-c: GA23-AFRINIC
  • tech-c: RD11-AFRINIC
  • status: ASSIGNED PA
  • mnt-by: WOOLWORTHS-MNT
  • parent: 165.3.0.0 - 165.3.255.255
  • person: Greg Allen
  • address: 91 Longmarket Street
  • address: Cape Town
  • address: South Africa
  • phone: tel:+27-21-407-2982
  • nic-hdl: GA23-AFRINIC
  • mnt-by: GENERATED-LXTPFLBC3DZNZEEK0XYYUTAVGUU70A1X-MNT
  • person: Roberto Damon
  • address: 91 Longmarket Street
  • address: Cape Town
  • address: South Africa
  • phone: tel:+27-21-407-6367
  • nic-hdl: RD11-AFRINIC
  • mnt-by: GENERATED-YPTIR3KCWFHPZ2MKTEBOBAN1SVWYVRCW-MNT

Links to attack logs

****** ****** ****** nmap-scanning-hosts-2020-07-31

Share on: