192.252.133.206 Threat Intelligence and Host Information

Oct 08, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 192.252.133.206 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 35/100

Host and Network Information

Tags: cyber security, ioc, malicious, Nextray, phishing
View other sources: Spamhaus VirusTotal

Country: Canada
Network: AS22652 fibrenoire inc.
Noticed: 29 times
Protocols Attacked: mssql
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: sbcteams01.csn.qc.ca webmail.elpcinc.com

Map

Whois Information

NetRange: 192.252.128.0 - 192.252.143.255
CIDR: 192.252.128.0/20
NetName: FNI-CIDR-13
NetHandle: NET-192-252-128-0-1
Parent: NET192 (NET-192-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS22652
Organization: Videotron Ltee (VL-439)
RegDate: 2013-06-27
Updated: 2024-01-30
Ref: https://rdap.arin.net/registry/ip/192.252.128.0
OrgName: Videotron Ltee
OrgId: VL-439
Address: 612 rue Saint-Jacques
City: Montreal
StateProv: QC
PostalCode: H3C 4M8
Country: CA
RegDate: 2022-11-22
Updated: 2024-09-17
Ref: https://rdap.arin.net/registry/entity/VL-439
OrgTechHandle: TECHN618-ARIN
OrgTechName: Technical Support
OrgTechPhone: +1-877-907-3002
OrgTechEmail: ipadmin-vsa@videotron.com
OrgTechRef: https://rdap.arin.net/registry/entity/TECHN618-ARIN
OrgAbuseHandle: ABUSE1784-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-514-380-7100
OrgAbuseEmail: abuse@fibrenoire.ca
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1784-ARIN
NetRange: 192.252.133.192 - 192.252.133.255
CIDR: 192.252.133.192/26
NetName: ELPC01-C3
NetHandle: NET-192-252-133-192-1
Parent: FNI-CIDR-13 (NET-192-252-128-0-1)
NetType: Reassigned
OriginAS:
Organization: 9195-5302 Quebec inc. (ELPC inc) (QE-15)
RegDate: 2015-01-06
Updated: 2015-01-06
Ref: https://rdap.arin.net/registry/ip/192.252.133.192
OrgName: 9195-5302 Quebec inc. (ELPC inc)
OrgId: QE-15
Address: Casier Postal 7
City: Lourdes-de-Joliette
StateProv: QC
PostalCode: J0K 1K0
Country: CA
RegDate: 2015-01-06
Updated: 2015-01-06
Ref: https://rdap.arin.net/registry/entity/QE-15
OrgAbuseHandle: ABUSE4963-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-888-335-3572
OrgAbuseEmail: abuse@ELPCinc.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE4963-ARIN
OrgTechHandle: ABUSE4963-ARIN
OrgTechName: Abuse
OrgTechPhone: +1-888-335-3572
OrgTechEmail: abuse@ELPCinc.com
OrgTechRef: https://rdap.arin.net/registry/entity/ABUSE4963-ARIN
network:Auth-Area:fibrenoire.ca
network:Class-Name:network
network:ID:192.252.133.192/26
network:Network-Name:CONF04-192.252.133.192/26
network:IP-Network:192.252.133.192/26
network:Origin-AS:22652
network:Org-Name:Confederation Des Syndicats Nationaux (C.S.N.)
network:Street-Address:1601 Av De Lorimier
network:City:Montreal
network:State:QC
network:Postal-Code:H2K 4M5
network:Country-Code:CA
network:Created:May 28 2021 11:45AM
network:Updated:May 28 2021 11:45AM

Links to attack logs

****** aws-mssql-bruteforce-ip-list-2020-11-03 ****** ******

Share on: