194.147.142.196 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 194.147.142.196 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 25/100

Host and Network Information

• Tags: Nextray, cyber security, ioc, malicious, phishing

• View other sources: Spamhaus VirusTotal

• Country: Netherlands
• Network: AS60631 pars parva system co. ltd.
• Noticed: 1 times
• Protcols Attacked: ntp
• Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
• Passive DNS Results: incitrading.com tikmeh.com sevdadress.com choobest.ir bistweb.com portal.testrun.ir webfarin.com www.bakinghousetehran.ir bakinghousetehran.ir sherlinakid.com ftp.sherlinakid.ir www.sherlinakid.ir sherlinakid.ir pop.sherlinakid.ir smtp.sherlinakid.ir panel.hostparse.ir daysabt.com smtp.ezamplusamir.ir ftp.ezamplusamir.ir pop.ezamplusamir.ir www.ezamplusamir.ir ezamplusamir.ir karnotejarat.com gmt-academy.com ftp.mahdemusic.ir pop.mahdemusic.ir mahdemusic.ir www.mahdemusic.ir smtp.mahdemusic.ir heyrundesign.com ftp.nooriman.ir smtp.nooriman.ir www.nooriman.ir nooriman.ir pop.nooriman.ir pop.salamati-pg.ir salamati-pg.ir smtp.salamati-pg.ir www.salamati-pg.ir ftp.salamati-pg.ir chasht.vanillinsweets.ir ighano.com webgplus.ir ariamod.ir www.ariamod.ir pop.ariamod.ir smtp.ariamod.ir ftp.ariamod.ir sh-op.ir smtp.sh-op.ir pop.sh-op.ir ftp.sh-op.ir www.sh-op.ir smtp.novinsara.com novinsara.com ftp.novinsara.com www.novinsara.com pop.novinsara.com kzht.ir www.kzht.ir ftp.kzht.ir smtp.kzht.ir pop.kzht.ir smtp.alizadehgan.com www.alizadehgan.com ftp.alizadehgan.com pop.alizadehgan.com sarzaminemiane.ir richhands.us pm.iuav.xyz smtp.khasto.ir pop.khasto.ir khasto.ir ftp.khasto.ir www.khasto.ir ftp.amirhossein-gholami4.ir amirhossein-gholami4.ir pop.amirhossein-gholami4.ir smtp.amirhossein-gholami4.ir www.amirhossein-gholami4.ir www.khosh-rayehe.ir smtp.khosh-rayehe.ir ftp.khosh-rayehe.ir pop.khosh-rayehe.ir khosh-rayehe.ir course-sale.ir dentallsmile.ir mahgolsa-sheykhi.ir academyhoghogh.com bahrnet.ir ftp.mester-wordpres.ir pop.mester-wordpres.ir mester-wordpres.ir www.mester-wordpres.ir smtp.mester-wordpres.ir tavanjamco.ir iran-petshop.ir ftp.highclassonline.com www.highclassonline.com smtp.highclassonline.com pop.highclassonline.com highclassonline.com www.demo.deebmedia.ir demo.deebmedia.ir ftp.technofarsi.ir smtp.technofarsi.ir pop.technofarsi.ir www.technofarsi.ir technofarsi.ir ghoghnostech.com www.atrsarv.com atrsarv.com tehranbbf.ir pop.elizekabab.com www.elizekabab.com elizekabab.com smtp.elizekabab.com ftp.elizekabab.com pop.jbbazaar.ir www.jbbazaar.ir jbbazaar.ir smtp.jbbazaar.ir ftp.jbbazaar.ir www.tehrangymclub.com ftp.tehrangymclub.com pop.tehrangymclub.com smtp.tehrangymclub.com ftp.mirshadow.ir www.mirshadow.ir smtp.mirshadow.ir pop.mirshadow.ir mirshadow.ir www.e-francais.com pop.e-francais.com e-francais.com smtp.e-francais.com ftp.e-francais.com pop.nanika.ir smtp.nanika.ir www.nanika.ir nanika.ir ftp.nanika.ir tniran.ir pop.tniran.ir smtp.tniran.ir www.tniran.ir ftp.tniran.ir aghayevape2.com pop.learndesignweb.ir smtp.learndesignweb.ir learndesignweb.ir www.learndesignweb.ir ftp.learndesignweb.ir shaah-business.ir pop.shaah-business.ir www.shaah-business.ir smtp.shaah-business.ir ftp.shaah-business.ir arsasks.ir www.arsasks.ir azmoon.karakaryabi.com ftp.jazirehelectronic.ir smtp.jazirehelectronic.ir www.jazirehelectronic.ir pop.jazirehelectronic.ir jazirehelectronic.ir jalalicosmetics.shop www.jalalicosmetics.shop smtp.sara-f23.ir ftp.sara-f23.ir www.sara-f23.ir pop.sara-f23.ir www.mahno.online mahno.online www.daryaazizi.ir smtp.daryaazizi.ir ftp.daryaazizi.ir pop.daryaazizi.ir pop.ecoclima.ir www.ecoclima.ir ftp.ecoclima.ir ecoclima.ir smtp.ecoclima.ir shavarz.com www.shavarz.com sara-f23.ir daryaazizi.ir api.mehrcharitable.ir jalalicosmetics.com pop.jalalicosmetics.com smtp.jalalicosmetics.com www.jalalicosmetics.com sahandbcg.com alizadehgan.com smtp.balotsabz.ir www.balotsabz.ir balotsabz.ir pop.balotsabz.ir ftp.balotsabz.ir smtp.hanacademy1.ir www.hanacademy1.ir ftp.hanacademy1.ir pop.hanacademy1.ir hanacademy1.ir mrchasb.com tehrangymclub.com smtp.vansbeauty.ir pop.vansbeauty.ir greyfin.ir zivinhome.ir elfiro.sadeghtaheryfar.ir ftp.aradsanatasia.com pop.aradsanatasia.com smtp.aradsanatasia.com aradsanatasia.com www.aradsanatasia.com shop.gympulse.ir ftp.zeinabnikoodesign.ir pop.zeinabnikoodesign.ir smtp.zeinabnikoodesign.ir www.zeinabnikoodesign.ir zeinabnikoodesign.ir pop.callfa.ir www.callfa.ir callfa.ir smtp.callfa.ir pop.hamidtr.ir hamidtr.ir smtp.hamidtr.ir ftp.hamidtr.ir www.hamidtr.ir srkermanceo.ir pop.srkermanceo.ir smtp.srkermanceo.ir www.srkermanceo.ir ftp.srkermanceo.ir smtp.helthy-food.ir helthy-food.ir ftp.helthy-food.ir pop.helthy-food.ir www.helthy-food.ir pop.shahremasoliat.ir shahremasoliat.ir ftp.shahremasoliat.ir www.shahremasoliat.ir smtp.shahremasoliat.ir mehdi-adamzadeh.ir www.greatpet.ir saeedmoqimi.ir www.setare-golshan.ir smtp.setare-golshan.ir ftp.setare-golshan.ir setare-golshan.ir pop.setare-golshan.ir www.vanillacoffee.ir smtp.vanillacoffee.ir vanillacoffee.ir pop.vanillacoffee.ir ftp.vanillacoffee.ir nehzatmedia.org ftp.nehzatmedia.org pop.nehzatmedia.org www.nehzatmedia.org smtp.nehzatmedia.org map.nehzatmedia.org www.portfolion.ir pop.portfolion.ir ftp.portfolion.ir smtp.portfolion.ir portfolion.ir www.apt34.ir apt34.ir smtp.apt34.ir ftp.apt34.ir pop.apt34.ir greatpet.ir hasanshalbafan.ir motamed-legal.ir smtp.motamed-legal.ir ftp.motamed-legal.ir www.motamed-legal.ir pop.motamed-legal.ir pop.tpayam.com www.tpayam.com smtp.tpayam.com ftp.tpayam.com nanosil.ir www.nanosil.ir pop.itandata.ir ftp.itandata.ir smtp.itandata.ir www.itandata.ir smtp.premardom.ir www.premardom.ir ftp.premardom.ir premardom.ir pop.premardom.ir 123.serverused.com ftp.hananrash.ir www.hananrash.ir pop.hananrash.ir smtp.hananrash.ir itandata.ir pop.pcbiran.com pcbiran.com www.pcbiran.com ftp.pcbiran.com smtp.pcbiran.com www.lawnchtech.ir lawnchtech.ir smtp.lawnchtech.ir ftp.lawnchtech.ir pop.lawnchtech.ir hananrash.ir faezeh-rohani.ir www.faezeh-rohani.ir panel.shahinpayamak.ir www.bistino.com smtp.bistino.com pop.bistino.com bistino.com ftp.bistino.com www.pakatcarton.ir smtp.pakatcarton.ir pakatcarton.ir pop.pakatcarton.ir ftp.pakatcarton.ir pop.arzankala-shop.ir ftp.arzankala-shop.ir arzankala-shop.ir smtp.arzankala-shop.ir www.arzankala-shop.ir www.vahidbarkhoramshahr.ir pop.vahidbarkhoramshahr.ir ftp.vahidbarkhoramshahr.ir smtp.vahidbarkhoramshahr.ir vahidbarkhoramshahr.ir pop.namomovie.ir namomovie.ir ftp.namomovie.ir www.namomovie.ir smtp.namomovie.ir www.sajadseyedi.ir smtp.sajadseyedi.ir sajadseyedi.ir pop.sajadseyedi.ir ftp.sajadseyedi.ir pop.hesaberoz.ir ftp.hesaberoz.ir www.hesaberoz.ir hesaberoz.ir smtp.hesaberoz.ir deepintelligence.ir pop.deepintelligence.ir www.shahinpayamak.ir pop.shahinpayamak.ir ftp.shahinpayamak.ir smtp.shahinpayamak.ir bookbahar.ir shahinpayamak.ir ftp.formashin.com smtp.formashin.com www.formashin.com pop.formashin.com www.iran-ohs.ir www.noorin-store.ir smtp.noorin-store.ir noorin-store.ir farinfarco.com www.farinfarco.com pop.farinfarco.com smtp.farinfarco.com ftp.farinfarco.com ftp.amoarzani.ir pop.amoarzani.ir amoarzani.ir www.amoarzani.ir smtp.amoarzani.ir iran-ohs.ir ftp.pistaacademy.ir smtp.pistaacademy.ir www.pistaacademy.ir pop.pistaacademy.ir pistaacademy.ir ftp.khuba.ir pop.khuba.ir khuba.ir www.khuba.ir smtp.khuba.ir ftp.khoobaa.ir khoobaa.ir www.khoobaa.ir pop.khoobaa.ir smtp.khoobaa.ir www.hoobaa.ir ftp.hoobaa.ir pop.hoobaa.ir smtp.hoobaa.ir hoobaa.ir www.momisafar.ir momisafar.ir ftp.ecukara.com ecukara.com www.ecukara.com smtp.ecukara.com pop.ecukara.com ftp.mobinanajari.ir mobinanajari.ir smtp.mobinanajari.ir pop.mobinanajari.ir www.mobinanajari.ir tasvirmarket.ir www.tasvirmarket.ir srtf.ir www.srtf.ir pop.srtf.ir smtp.srtf.ir ftp.srtf.ir ftp.academyakam.ir pop.academyakam.ir academyakam.ir www.academyakam.ir smtp.academyakam.ir ftp.teakwabis.ir teakwabis.ir smtp.teakwabis.ir www.teakwabis.ir pop.teakwabis.ir ftp.sepideardestany.ir pop.sepideardestany.ir www.sepideardestany.ir sepideardestany.ir smtp.sepideardestany.ir blog.shegerd.net smtp.musicepars.ir musicepars.ir ftp.musicepars.ir www.musicepars.ir pop.musicepars.ir newsadinfo.ir www.newsadinfo.ir smtp.tarjomate.ir www.tarjomate.ir ftp.tarjomate.ir pop.tarjomate.ir pop.fiuores.com www.fiuores.com smtp.fiuores.com ftp.fiuores.com formashin.com www.fit4fitt.com pop.siiliiniiagallery.ir smtp.siiliiniiagallery.ir www.siiliiniiagallery.ir ftp.siiliiniiagallery.ir siiliiniiagallery.ir foreverbanoo.ir salarasshop.ir nodratzehi.com www.nodratzehi.com ftp.nodratzehi.com smtp.nodratzehi.com pop.nodratzehi.com r.mehvarevasl.ir pop.javanipt.ir smtp.javanipt.ir www.javanipt.ir ftp.javanipt.ir www.grand.restaurant grand.restaurant ftp.rohammarketing.com smtp.rohammarketing.com rohammarketing.com pop.rohammarketing.com www.rohammarketing.com amniatsazan.com razan.ir ftp.negarinsoft.ir ftp.hamrahgostaratras.ir pop.hamrahgostaratras.ir hamrahgostaratras.ir smtp.hamrahgostaratras.ir www.hamrahgostaratras.ir www.arh-store.ir pop.arh-store.ir ftp.arh-store.ir smtp.arh-store.ir arh-store.ir bishe-station.com smtp.bishe-station.com ftp.bishe-station.com www.bishe-station.com pop.bishe-station.com halahame.ir pop.pestekeshavarzi.ir smtp.pestekeshavarzi.ir ftp.pestekeshavarzi.ir pop.pestehrafsanjan24.ir smtp.pestehrafsanjan24.ir www.pestehrafsanjan24.ir

Open Ports Detected

110 143 2222 25 443 465 80 995

Map

Whois Information

• inetnum: 194.147.142.128 - 194.147.142.255
• netname: Parspack
• abuse-c: AR50522-RIPE
• country: IR
• admin-c: AR50522-RIPE
• tech-c: AR50522-RIPE
• status: ASSIGNED PA
• mnt-by: PTP-MNT
• created: 2021-12-08T17:38:45Z
• last-modified: 2022-01-24T04:15:46Z
• role: Abuse-C Role
• address: Unit 4, No. 2, 35th west alley
• address: 1998865778
• address: Tehran
• address: IRAN, ISLAMIC REPUBLIC OF
• nic-hdl: AR50522-RIPE
• abuse-mailbox: [email protected]
• mnt-by: mnt-ir-parsparva3-1
• created: 2019-01-29T15:40:15Z
• last-modified: 2019-01-29T15:40:15Z
• route: 194.147.142.0/24
• origin: AS60631
• mnt-by: PTP-MNT
• mnt-by: PTP-MNT
• created: 2022-01-24T04:18:23Z
• last-modified: 2022-01-24T04:18:23Z

Links to attack logs

** awsau-ntp-bruteforce-ip-list-2021-09-03