167.160.91.18 Threat Intelligence and Host Information

Apr 07, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 167.160.91.18 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 35/100

Host and Network Information

Tags: awsbah, awsjap, awssafrica, blacklist, botnet, bruteforce, cyber security, digital ocean, ioc, malicious, Malicious IP, mirai, Nextray, phishing, scan, sip, SIP, tcp, udp, vultr
JARM: 3fd21b20d00000021c43d21b21b43de0a012c76cf078b8d06f4620c2286f5e
View other sources: Spamhaus VirusTotal

Country: United States
Network: AS63018 dedicated.com
Noticed: 50 times
Protocols Attacked: sip
Countries Attacked: Bahrain, Canada, Czechia, Denmark, Estonia, France, Germany, Japan, Latvia, Lithuania, Norway, Poland, Romania, Singapore, South Africa, Turkey, Ukraine, United Kingdom, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: dash.vcs.gg us.lax.sr1.viquity.pro panel.viquity.pro la1.gbe0.com mockpurge.net

Malware Detected on Host

Count: 1 c07ef423d250afc51232320a8a54fc84dba00a7da7228511464f0a81a3fb3b54

Open Ports Detected

3000 443 80

Map

Whois Information

NetRange: 167.160.88.0 - 167.160.95.255
CIDR: 167.160.88.0/21
NetName: UDL-17
NetHandle: NET-167-160-88-0-2
Parent: NET167 (NET-167-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Dedicated.com (UDL-17)
RegDate: 2018-10-12
Updated: 2018-10-12
Ref: https://rdap.arin.net/registry/ip/167.160.88.0
OrgName: Dedicated.com
OrgId: UDL-17
Address: 4400 ne 77th ave ste 275
City: Vancouver
StateProv: WA
PostalCode: 98662
Country: US
RegDate: 2016-10-05
Updated: 2022-12-02
Comment: dedicated.com
Ref: https://rdap.arin.net/registry/entity/UDL-17
OrgAbuseHandle: ABUSE5262-ARIN
OrgAbuseName: ABUSE
OrgAbusePhone: +1-844-533-1300
OrgAbuseEmail: admin@dedicated.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE5262-ARIN
OrgNOCHandle: HICKS100-ARIN
OrgNOCName: Hicks, Robby
OrgNOCPhone: +1-844-533-1300
OrgNOCEmail: admins@dedicated.com
OrgNOCRef: https://rdap.arin.net/registry/entity/HICKS100-ARIN
OrgTechHandle: HICKS100-ARIN
OrgTechName: Hicks, Robby
OrgTechPhone: +1-844-533-1300
OrgTechEmail: admins@dedicated.com
OrgTechRef: https://rdap.arin.net/registry/entity/HICKS100-ARIN
OrgTechHandle: HAROU3-ARIN
OrgTechName: Harouff, Damian
OrgTechPhone: +1-844-533-1300
OrgTechEmail: damian@dedicated.com
OrgTechRef: https://rdap.arin.net/registry/entity/HAROU3-ARIN
OrgTechHandle: MGN4-ARIN
OrgTechName: Nappo, Matthew G
OrgTechPhone: +1-844-533-1300
OrgTechEmail: admin@usdedicated.com
OrgTechRef: https://rdap.arin.net/registry/entity/MGN4-ARIN

Links to attack logs

Share on: