173.247.227.70 Threat Intelligence and Host Information

Share on:

Apr 13, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Likely Malicious Host 🟠 55/100

Host and Network Information

Mitre ATT&CK IDs: T1132 - Data Encoding, T1190 - Exploit Public-Facing Application, T1210 - Exploitation of Remote Services, T1498 - Network Denial of Service, T1595 - Active Scanning, TA0037 - Command and Control
Tags: CVE-2021-35394, IoT, Nextray, Port scan, Realtek Jungle SDK, RedGoBot, SSH, Telnet, anna paula, associated, attack, august, botnet, currc3adculo, cve202135394, cyber security, december, figure, france, from email, gafgyt, headers, icmp, ioc, kfsensor, login, malicious, malspam email, malware, malware/botnet, malware/gafgyt, malware/mirai, malware/redgobot, mirai, mozi, msi file, netherlands, november, palo alto, phishing, probing, rdp, scanner, scanning, shell script, ssh, supply chain, technology/realteksdk, tuesday, united, utf8, vietnam, vulnerability, vulnerability/cve-2021-35394, webscan, webscanner bruteforce web app attack, wildfire, zip archive
View other sources: Spamhaus VirusTotal
Country: United States of America
Network: AS17139 corporate colocation inc.
Noticed: 50 times
Protcols Attacked: telnet
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: reralenrerpridedi.net

Map

Whois Information

NetRange: 173.247.224.0 - 173.247.239.255
CIDR: 173.247.224.0/20
NetName: CORPCOLO-NET04
NetHandle: NET-173-247-224-0-1
Parent: NET173 (NET-173-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS17139
Organization: Corporate Colocation Inc. (CORPO-6)
RegDate: 2010-07-29
Updated: 2022-08-04
Ref: https://rdap.arin.net/registry/ip/173.247.224.0
OrgName: Corporate Colocation Inc.
OrgId: CORPO-6
Address: 2109 Micheltornea Street
City: Los Angeles
StateProv: CA
PostalCode: 90039
Country: US
RegDate: 2003-11-11
Updated: 2017-01-28
Ref: https://rdap.arin.net/registry/entity/CORPO-6
OrgTechHandle: NOC1601-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-213-477-2335
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/NOC1601-ARIN
OrgAbuseHandle: ABUSE657-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-888-742-4147
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE657-ARIN
RAbuseHandle: NOC1601-ARIN
RAbuseName: Network Operations Center
RAbusePhone: +1-213-477-2335
RAbuseEmail: [email protected]
RAbuseRef: https://rdap.arin.net/registry/entity/NOC1601-ARIN
RNOCHandle: NOC1601-ARIN
RNOCName: Network Operations Center
RNOCPhone: +1-213-477-2335
RNOCEmail: [email protected]
RNOCRef: https://rdap.arin.net/registry/entity/NOC1601-ARIN
RTechHandle: NOC1601-ARIN
RTechName: Network Operations Center
RTechPhone: +1-213-477-2335
RTechEmail: [email protected]
RTechRef: https://rdap.arin.net/registry/entity/NOC1601-ARIN

Links to attack logs