192.124.249.117 Threat Intelligence and Host Information

Dec 26, 2025 ipinfopage

General

IP Address
192.124.249.117
IPv4 Address
Location
🇺🇸 Menifee, United States
US
Network
AS30148
SUCURI-SEC
Threat Score
59/100
High Risk
0reportaaaaadomainsalloctoseekall
Attack Intelligence
MITRE ATT&CK Techniques
T1012 - Query Registry, T1027 - Obfuscated Files or Information, T1036 - Masquerading, T1056 - Input Capture, T1057 - Process Discovery, T1059.007 - JavaScript, T1059 - Command and Scripting Interpreter, T1060 - Registry Run Keys / Startup Folder, T1071.003 - Mail Protocols, T1071.004 - DNS, T1071 - Application Layer Protocol, T1082 - System Information Discovery, T1083 - File and Directory Discovery, T1105 - Ingress Tool Transfer, T1106 - Native API, T1119 - Automated Collection, T1129 - Shared Modules, T1140 - Deobfuscate/Decode Files or Information, T1546.015 - Component Object Model Hijacking, T1546 - Event Triggered Execution, T1583.005 - Botnet, TA0011 - Command and Control
Open Ports Detected
443
Geographic Location
Country
United States
City
Menifee
Region
California
Coordinates
33.6647, -117.1743
Network Information
ASN
AS30148
Organization
SUCURI-SEC
Network
AS30148 SUCURI-SEC
WHOIS Information
NetRange
192.124.249.0 - 192.124.249.255
CIDR
192.124.249.0/24
NetName
SUCURI-ARIN-002
NetHandle
NET-192-124-249-0-1
Parent
NET192 (NET-192-0-0-0-0)
NetType
Direct Allocation
OriginAS
Organization
Sucuri (SUCUR-2)
RegDate
2014-12-11
Updated
2020-04-29
Comment
—–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–
Ref
https://rdap.arin.net/registry/entity/SUCUR-2
OrgName
Sucuri
OrgId
SUCUR-2
Address
30141 Antelope Rd
City
Menifee
StateProv
CA
PostalCode
92584
Country
US
OrgAbuseHandle
SOC55-ARIN
OrgAbuseName
Security Operations Center
OrgAbusePhone
+1-951-234-3945
OrgAbuseEmail
soc@sucuri.net
OrgAbuseRef
https://rdap.arin.net/registry/entity/SOC55-ARIN

Malware Detected on Host

Count: 750 bf4807277fa48bca8b466f087752d0422a1ca16d3b39906b423940032fbaceb2 77f009c02d685d456e6655cbc5dead382e57274c9d373b6bdffa4d3db31a4a4b 0a057dea13cb84171aef01dca85165dcbdea3e416fbf4cd6ca6c7bcbd6062199 8fb806dee4d86c902023487612a46188659bbdac10ea7523e5065342d3ed24e5 e9a9cdc90fff5d7101a9f4d805cac09f3e940532f8735688f0bd1744e58e2fc6 2953b7b65b0b5e0b22e768a193993f2157376026f49d25ba03182cc1d5cbc0ef a877e4fc8a4fd9d5d78458d15bf0081d157130b0fea2140d8ad0f3a311ba2627 c2e25059c9a86b099b052dcc3a7b9e96393b12e8f58c2b191c0d5980d8212f69 ed17e226111ae61266dbb46066c1d7b7d9937e9323d288d756e57730589cb715 4f6d9ce69997ee3e0aac4d34f817055e5bc80dd3f9cf76d2647eb6a3b93bf977

Disclaimer
This page contains threat intelligence information for the IPv4 address 192.124.249.117 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.