183.91.4.228 Threat Intelligence and Host Information

Jun 19, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 183.91.4.228 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 65/100

Host and Network Information

Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110.004 - Credential Stuffing, T1110 - Brute Force
Tags: brute force, Bruteforce, Brute-Force, cowrie, port 22, scanners, ssh, SSH, tcp/22, vultr
JARM: 15d2ad16d29d29d00015d2ad15d29d759ec1306066cf124555d1af8ae5e222
View other sources: Spamhaus VirusTotal

Country: Vietnam
Network: AS45903 cmc telecom infrastructure company
Noticed: 17 times
Protocols Attacked: ssh
Countries Attacked: Australia, France, Poland, Spain, United States of America
Passive DNS Results: myapi.test.ymeet.me chat-socket-new.test.ymeet.me cdn-aws.test.ymeet.me cus.test.reiviet.com data.test.reiviet.com publish-api.test.reiviet.com dev2.test.reiviet.com dev1.test.reiviet.com alt.test.reiviet.com admin.test.reiviet.com dashboard.test.reiviet.com 123abc.test.reiviet.com phudo2.test.reiviet.com hello5.test.reiviet.com covidnamthu01.test.reiviet.com covidnamthu1.test.reiviet.com d01.test.reiviet.com l04012020.test.reiviet.com d03.test.reiviet.com bluestack2333.test.reiviet.com skn1.test.reiviet.com pp.test.reiviet.com test1234522.test.reiviet.com kay.test.reiviet.com sa.test.reiviet.com perr.test.reiviet.com thang.test.reiviet.com covid2.test.reiviet.com builder.test.reiviet.com test1113.test.reiviet.com test111.test.reiviet.com test5.test.reiviet.com online-api.test.reiviet.com onlinetropical.test.reiviet.com sakanav1.test.reiviet.com v1.test.reiviet.com datnenhuongtest.test.reiviet.com king442.test.reiviet.com sknv11.test.reiviet.com baytam.test.reiviet.com newsen.test.reiviet.com xbba.test.reiviet.com vd3.test.reiviet.com skn11.test.reiviet.com tempnew.test.reiviet.com ll.test.reiviet.com vin.test.reiviet.com landing44v2.test.reiviet.com xxxx22.test.reiviet.com xxxx224.test.reiviet.com landing4411.test.reiviet.com landing441111.test.reiviet.com lolololollolol.test.reiviet.com longdvh2.test.reiviet.com sensenon.test.reiviet.com senss.test.reiviet.com lanhai.test.reiviet.com test.rei.com.test.reiviet.com test.test.reiviet.com lp1604.test.reiviet.com phudo.test.reiviet.com phudo1604-2.test.reiviet.com sasa.test.reiviet.com lp1504.test.reiviet.com sknt.test.reiviet.com vietduc.test.reiviet.com lp1404.test.reiviet.com xb.test.reiviet.com test4.test.reiviet.com hanhtest5.test.reiviet.com hanhtest1.test.reiviet.com sebastianvettel.test.reiviet.com duongtd1.test.reiviet.com duongtd3.test.reiviet.com ngay1304.test.reiviet.com mmj0.test.reiviet.com mmj9.test.reiviet.com mmj4.test.reiviet.com mmj2.test.reiviet.com landingpage.test.reiviet.com ana.test.reiviet.com test.reiviet.com mmjtest.reiviet.com friday12.test.reiviet.com friday7.test.reiviet.com friday4.test.reiviet.com friday3.test.reiviet.com friday2.test.reiviet.com tranduongxx.test.reiviet.com duongsakana2.test.reiviet.com duongsakana.test.reiviet.com longdvh.test.reiviet.com skn3.test.reiviet.com abc.test.reiviet.com skn.test.reiviet.com viet.test.reiviet.com skn2.test.reiviet.com flctropicalcityhalong.test.reiviet.com a.test.reiviet.com test12345222.test.reiviet.com sakana2.test.reiviet.com gold.test.reiviet.com datnen.test.reiviet.com duantest5.test.reiviet.com long337.test.reiviet.com testhoalac.test.reiviet.com luan123.test.reiviet.com test1115.test.reiviet.com vietduccomplex.test.reiviet.com duongtd2.test.reiviet.com test11191.test.reiviet.com test1119.test.reiviet.com test1117.test.reiviet.com abczyz.test.reiviet.com fordelete.test.reiviet.com test1112.test.reiviet.com test11.test.reiviet.com test2.test.reiviet.com jenkins.test.ymeet.me tranduong.test.reiviet.com goldsun.test.reiviet.com prjtemp.test.reiviet.com eco.test.reiviet.com hi.test.reiviet.com new.test.reiviet.com hehe.test.reiviet.com lpid87.test.reiviet.com lpid88.test.reiviet.com lpid89.test.reiviet.com lp93.test.reiviet.com duongtdx.test.reiviet.com scsc.test.reiviet.com lad44.test.reiviet.com landing44.test.reiviet.com lad4.test.reiviet.com test.reiviet.com.test.reiviet.com upload-api.test.reiviet.com api.test.reiviet.com test3.test.reiviet.com hanhtest2.test.reiviet.com mmj.test.reiviet.com ncov.test.reiviet.com mmj8.test.reiviet.com mmj6.test.reiviet.com mmj5.test.reiviet.com chat-services.test.ymeet.me chat-socket.test.ymeet.me chat-api.test.ymeet.me chat-services-api.test.ymeet.me chat-services-listener.test.ymeet.me api.test.ymeet.me api2.test.ymeet.me auth.test.ymeet.me socket.test.ymeet.me test.ymeet.me

Open Ports Detected

443 5601 80

CVEs Detected

CVE-2017-20005 CVE-2017-7529 CVE-2018-16843 CVE-2018-16844 CVE-2018-16845 CVE-2019-20372 CVE-2019-9511 CVE-2019-9513 CVE-2019-9516 CVE-2021-23017 CVE-2021-3618 CVE-2023-44487

Map

Whois Information

inetnum: 183.91.0.0 - 183.91.31.255
netname: CMCTELECOM-VN
descr: CMC Telecom Infrastructure Company
descr: CMC Tower, Duy Tan, Cau Giay, Hanoi, Vietnam
country: VN
admin-c: HVA2-AP
tech-c: NVH31-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-VN-VNNIC
mnt-lower: MAINT-VN-VNNIC
mnt-routes: MAINT-VN-VNNIC
mnt-irt: IRT-VNNIC-AP
last-modified: 2023-08-31T05:00:45Z
irt: IRT-VNNIC-AP
address: Ha Noi, VietNam
phone: +84-24-35564944
fax-no: +84-24-37821462
e-mail: hm-changed@vnnic.vn
abuse-mailbox: hm-changed@vnnic.vn
admin-c: NTTT1-AP
tech-c: NTTT1-AP
mnt-by: MAINT-VN-VNNIC
last-modified: 2017-11-08T09:40:06Z
person: Hoang Viet Anh
address: CMCTELECOM-VN
country: VN
phone: +84-366235766
e-mail: anh.hv@cmctelecom.vn
nic-hdl: HVA2-AP
mnt-by: MAINT-VN-VNNIC
last-modified: 2023-08-31T04:22:33Z
person: Nguyen Van Hieu
address: CMCTELECOM-VN
country: VN
phone: +84-968189689
e-mail: hieu.nv@cmctelecom.vn
nic-hdl: NVH31-AP
mnt-by: MAINT-VN-VNNIC
last-modified: 2022-08-28T04:27:35Z
route: 183.91.4.0/24
descr: CMCTELECOM-VN
origin: AS45903
mnt-by: MAINT-VN-VNNIC
last-modified: 2022-09-16T17:47:57Z

Links to attack logs

Share on: