168.197.252.162 Threat Intelligence and Host Information
ipinfopage
General
This page contains threat intelligence information for the IPv4 address
168.197.252.162 and was generated either as a result of
observed malicious activity or as an information gathering exercise to assist with
enrichment of security events and context. All information is gathered passively
through aggregation of public sources, or observations through activity upon honeynets.
The host score is calculated through a series of statistically weighted values and
machine learning which takes into account metadata such as host information, frequency,
volume and global distribution of malicious activity, association with other known
malicious hosts or networks, proxying or anonymising behaviour such as with tor exit
nodes, residential proxies or VPN services, and many other attributes. These values are
historical and indicative only - and should not be taken to be an accurate representation
of the users, businesses or networks in which they reside.
🟡 Low Risk —
35/100
Geographic Location
Host and Network Information
- View other sources:
Spamhaus
VirusTotal
Shodan
AbuseIPDB
- Country: Brazil
- Noticed: 30 times
- Protocols Attacked: Anonymous Proxy
- Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
- Tor Node: No
- cyber security
- ioc
- malicious
- Nextray
- phishing
Attack Log References
Whois Information
NetRange: 168.197.0.0 - 168.197.255.255
CIDR: 168.197.0.0/16
NetName: LACNIC-ERX-168-197-0-0
NetHandle: NET-168-197-0-0-1
Parent: NET168 (NET-168-0-0-0-0)
NetType: Transferred to LACNIC
OriginAS:
Organization: Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate: 2010-11-03
Updated: 2010-11-17
Comment: This IP address range is under LACNIC responsibility
Comment: for further allocations to users in LACNIC region.
Comment: Please see http://www.lacnic.net/ for further details,
Ref: https://rdap.arin.net/registry/ip/168.197.0.0
OrgName: Latin American and Caribbean IP address Regional Registry
OrgId: LACNIC
Address: Rambla Republica de Mexico 6125
City: Montevideo
StateProv:
PostalCode: 11400
Country: UY
RegDate: 2002-07-27
Updated: 2018-03-15
Ref: https://rdap.arin.net/registry/entity/LACNIC
OrgAbuseHandle: LWI100-ARIN
OrgAbuseName: LACNIC Whois Info
OrgAbusePhone: +598-2604-2222
OrgAbuseEmail: abuse@lacnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/LWI100-ARIN
OrgTechHandle: LACNIC-ARIN
OrgTechName: LACNIC Whois Info
OrgTechPhone: +598-2604-2222
OrgTechRef: https://rdap.arin.net/registry/entity/LACNIC-ARIN
inetnum: 168.197.252.0/22
aut-num: AS262907
abuse-c: BRTSO52
owner: BRASIL TECPAR | AMIGO | AVATO
ownerid: 07.756.651/0001-55
responsible: MAGNUM FOLETTO
country: BR
owner-c: MMF140
tech-c: OROTE
inetrev: 168.197.252.0/22
nserver: nameserver1.avato.com.br
nsstat: 20260302 AA
nslastaa: 20260302
nserver: nameserver2.avato.com.br
nsstat: 20260302 AA
nslastaa: 20260302
created: 20160916
changed: 20231120
nic-hdl-br: MMF140
person: Magnum Mello Foletto
e-mail: magnum.foletto@me.com
country: BR
created: 20010922
changed: 20251016
nic-hdl-br: BRTSO52
person: Brasil TecPar SOC
e-mail: soc@brasiltecpar.com.br
country: BR
created: 20220309
changed: 20230817
nic-hdl-br: OROTE
person: Opera��es de Rede - Omega Tecnologia
e-mail: noc@techomega.com.br
country: BR
created: 20061114
changed: 20230227