181.56.166.194 Threat Intelligence and Host Information
ipinfopage
General
This page contains threat intelligence information for the IPv4 address
181.56.166.194 and was generated either as a result of
observed malicious activity or as an information gathering exercise to assist with
enrichment of security events and context. All information is gathered passively
through aggregation of public sources, or observations through activity upon honeynets.
The host score is calculated through a series of statistically weighted values and
machine learning which takes into account metadata such as host information, frequency,
volume and global distribution of malicious activity, association with other known
malicious hosts or networks, proxying or anonymising behaviour such as with tor exit
nodes, residential proxies or VPN services, and many other attributes. These values are
historical and indicative only - and should not be taken to be an accurate representation
of the users, businesses or networks in which they reside.
🟠 Elevated —
61/100
Geographic Location
Host and Network Information
- View other sources:
Spamhaus
VirusTotal
Shodan
AbuseIPDB
- Country: Colombia
- Noticed: 3 times
- Protocols Attacked: SSH
- Countries Attacked: Australia
- Open Ports: 10000, 143, 2000, 21, 22, 3000, 3478, 4000, 443, 465, 53, 587, 80, 8080, 9090, 993, 995
- Tor Node: No
- cowrie
- scan
- sip
- sipvicious
- ssh
MITRE ATT&CK TTPs
- T1078 - Valid Accounts
- T1083 - File and Directory Discovery
- T1098.004 - SSH Authorized Keys
- T1105 - Ingress Tool Transfer
- T1110.004 - Credential Stuffing
- T1110 - Brute Force
- T1595 - Active Scanning
Associated CVEs
Passive DNS
Attack Log References
Whois Information
inetnum: 181.56.0.0/13
status: allocated
aut-num: AS14080
aut-num: AS10620
owner: Telmex Colombia S.A.
ownerid: CO-ACSA-LACNIC
responsible: Operaciones Core IP
address: CLARO FIJO COLOMBIA - Cra 68A No. 24B-10, 11111,
address: 11111 - Bogota - DC
country: CO
phone: +57 01 7480000
owner-c: ATI
tech-c: ATI
abuse-c: ATI
inetrev: 181.58.0.0/16
nserver: NS3.TELMEXLA.NET.CO
nsstat: 20250716 AA
nslastaa: 20250716
nserver: NS2.TELMEXLA.NET.CO
nsstat: 20250716 AA
nslastaa: 20250716
inetrev: 181.59.0.0/16
nserver: NS3.TELMEXLA.NET.CO
nsstat: 20250717 AA
nslastaa: 20250717
nserver: NS2.TELMEXLA.NET.CO
nsstat: 20250717 AA
nslastaa: 20250717
inetrev: 181.60.0.0/16
nserver: NS3.TELMEXLA.NET.CO
nsstat: 20250714 AA
nslastaa: 20250714
nserver: NS2.TELMEXLA.NET.CO
nsstat: 20250714 AA
nslastaa: 20250714
inetrev: 181.61.0.0/16
nserver: NS3.TELMEXLA.NET.CO
nsstat: 20250716 AA
nslastaa: 20250716
nserver: NS2.TELMEXLA.NET.CO
nsstat: 20250716 AA
nslastaa: 20250716
inetrev: 181.62.0.0/16
nserver: NS3.TELMEXLA.NET.CO
nsstat: 20250718 AA
nslastaa: 20250718
nserver: NS2.TELMEXLA.NET.CO
nsstat: 20250718 AA
nslastaa: 20250718
inetrev: 181.63.0.0/16
nserver: NS3.TELMEXLA.NET.CO
nsstat: 20250717 AA
nslastaa: 20250717
nserver: NS2.TELMEXLA.NET.CO
nsstat: 20250717 AA
nslastaa: 20250717
inetrev: 181.56.0.0/16
nserver: NS3.TELMEXLA.NET.CO
nsstat: 20250714 AA
nslastaa: 20250714
nserver: NS2.TELMEXLA.NET.CO
nsstat: 20250714 AA
nslastaa: 20250714
inetrev: 181.57.0.0/16
nserver: NS3.TELMEXLA.NET.CO
nsstat: 20250717 AA
nslastaa: 20250717
nserver: NS2.TELMEXLA.NET.CO
nsstat: 20250717 AA
nslastaa: 20250717
created: 20121016
changed: 20121016
nic-hdl: ATI
person: Network Security Team
e-mail: ciro.mantilla@claro.com.co
address: 111321 - Bogota - DC
country: CO
phone: +57 6017500300 [81966]
created: 20020909
changed: 20250218