181.52.85.249 Threat Intelligence and Host Information

Share on:
Apr 19, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Likely Malicious Host 🟠 55/100

Host and Network Information

  • Mitre ATT&CK IDs: T1110 - Brute Force
  • Tags: Nextray, RDP, SSH, abuse, bruteforce, cyber security, fraud, ioc, ipqs, ipqualityscore, malicious, phishing, tcp http wordpress php bruteforce honeypot Malicious IP b, vnc, web attack
  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: nixspam, proxylists, proxylists_1d, proxylists_30d, proxylists_7d, proxz_30d, proxz_7d, stopforumspam_180d, stopforumspam_365d

  • Country: Colombia
  • Network: AS10620 telmex colombia s.a.
  • Noticed: 4 times
  • Protcols Attacked: spam
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: smartlabs.smarttic.com.co www.smartlabs.smarttic.com.co arduino.smarttic.com.co www.arduino.smarttic.com.co

Malware Detected on Host

Count: 2 ada8398e65a6f3056d739b5f947543f703ced4db6d79e2d85ad58775ae0e92af 2a3f7f441f869fa7b3de642b075c2ca3cd9678e52731face6908eb9f78b99c22

Open Ports Detected

554 80

Map

Whois Information

  • inetnum: 181.48.0.0/13
  • status: allocated
  • aut-num: AS14080
  • aut-num: AS10620
  • owner: Telmex Colombia S.A.
  • ownerid: CO-ACSA-LACNIC
  • responsible: Operaciones Core IP
  • address: CLARO FIJO COLOMBIA - Cra 68A No. 24B-10, 11111,
  • address: 11111 - Bogota - DC
  • country: CO
  • phone: +57 01 7480000
  • owner-c: ATI
  • tech-c: ATI
  • abuse-c: ATI
  • inetrev: 181.48.0.0/16
  • nserver: NS3.TELMEXLA.NET.CO
  • nsstat: 20230416 AA
  • nslastaa: 20230416
  • nserver: NS2.TELMEXLA.NET.CO
  • nsstat: 20230416 AA
  • nslastaa: 20230416
  • inetrev: 181.49.0.0/16
  • nserver: NS3.TELMEXLA.NET.CO
  • nsstat: 20230418 AA
  • nslastaa: 20230418
  • nserver: NS2.TELMEXLA.NET.CO
  • nsstat: 20230418 AA
  • nslastaa: 20230418
  • inetrev: 181.50.0.0/16
  • nserver: NS3.TELMEXLA.NET.CO
  • nsstat: 20230417 AA
  • nslastaa: 20230417
  • nserver: NS2.TELMEXLA.NET.CO
  • nsstat: 20230417 AA
  • nslastaa: 20230417
  • inetrev: 181.51.0.0/16
  • nserver: NS3.TELMEXLA.NET.CO
  • nsstat: 20230418 AA
  • nslastaa: 20230418
  • nserver: NS2.TELMEXLA.NET.CO
  • nsstat: 20230418 AA
  • nslastaa: 20230418
  • inetrev: 181.52.0.0/16
  • nserver: NS3.TELMEXLA.NET.CO
  • nsstat: 20230417 AA
  • nslastaa: 20230417
  • nserver: NS2.TELMEXLA.NET.CO
  • nsstat: 20230417 AA
  • nslastaa: 20230417
  • inetrev: 181.53.0.0/16
  • nserver: NS3.TELMEXLA.NET.CO
  • nsstat: 20230417 AA
  • nslastaa: 20230417
  • nserver: NS2.TELMEXLA.NET.CO
  • nsstat: 20230417 AA
  • nslastaa: 20230417
  • inetrev: 181.54.0.0/16
  • nserver: NS3.TELMEXLA.NET.CO
  • nsstat: 20230416 AA
  • nslastaa: 20230416
  • nserver: NS2.TELMEXLA.NET.CO
  • nsstat: 20230416 AA
  • nslastaa: 20230416
  • inetrev: 181.55.0.0/16
  • nserver: NS3.TELMEXLA.NET.CO
  • nsstat: 20230418 AA
  • nslastaa: 20230418
  • nserver: NS2.TELMEXLA.NET.CO
  • nsstat: 20230418 AA
  • nslastaa: 20230418
  • created: 20110502
  • changed: 20110502
  • nic-hdl: ATI
  • person: Network Security Team
  • e-mail: [email protected]
  • address: 111321 - Bogota - DC
  • country: CO
  • phone: +57 017480456 [81966]
  • created: 20020909
  • changed: 20230313

Links to attack logs

forum-spam-ip-list-2020-12-25