194.0.127.102 Threat Intelligence and Host Information

Share on:

Feb 24, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Host and Network Information

Mitre ATT&CK IDs: T1595 - Active Scanning
Tags: Malicious IP, Port scan, Scanner, Webattack, awsau, awsjap, blacklist, botnet, bruteforce, digital ocean, mirai, mssql, nmap, port-scan, scan, scanning, smb, smtp, ssh, tcp, vultr
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_net_ua, turris_greylist
Country: Kazakhstan
Network: AS21299 kar-tel llc
Noticed: 50 times
Protcols Attacked: mssql
Countries Attacked: Australia, France, Germany, Japan, Singapore, United Kingdom

Open Ports Detected

7547

Map

Whois Information

inetnum: 194.0.124.0 - 194.0.127.255
netname: KZ-IPNET-KAR-TEL-20061030
country: KZ
org: ORG-KL166-RIPE
admin-c: AP27236-RIPE
tech-c: AP27236-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-by: kz-ipnet-kar-tel-1-mnt
mnt-routes: kz-ipnet-kar-tel-1-mnt
created: 2006-10-30T11:23:44Z
last-modified: 2018-04-04T15:31:27Z
organisation: ORG-KL166-RIPE
org-name: Kar-Tel LLC
country: KZ
org-type: LIR
address: st. Kadergaly Galairy 2
address: 010010
address: Astana
address: KAZAKHSTAN
phone: +77273500606
admin-c: KL3551-RIPE
tech-c: KL3551-RIPE
abuse-c: AR33409-RIPE
mnt-ref: kz-ipnet-kar-tel-1-mnt
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: kz-ipnet-kar-tel-1-mnt
created: 2015-09-04T15:41:30Z
last-modified: 2020-12-16T13:03:27Z
person: Artyom Pilipenko
address: st. Kadergaly Galairy 2
phone: +77273500606
nic-hdl: AP27236-RIPE
mnt-by: kz-ipnet-kar-tel-1-mnt
created: 2017-04-07T04:22:24Z
last-modified: 2017-04-07T04:22:24Z
route: 194.0.127.0/24
origin: AS21299
mnt-by: ORBITA-PLUS-MNT
mnt-by: TNSPLUS-MNT
mnt-by: SATELCOM-MNT
created: 2017-12-12T11:33:27Z
last-modified: 2017-12-12T11:33:27Z

Links to attack logs