195.140.146.69 Threat Intelligence and Host Information

Share on:
Apr 24, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Potentially Malicious Host 🟡 35/100

Host and Network Information

  • Mitre ATT&CK IDs: T1110 - Brute Force
  • Tags: Brute-Force, Bruteforce, SSH, aws, digital ocean, scanners, ssh, vultr

  • View other sources: Spamhaus VirusTotal

  • Country: Russian Federation
  • Network: AS29182 jsc iot
  • Noticed: 21 times
  • Protcols Attacked: ssh
  • Countries Attacked: France, Germany, Poland, Singapore, United Kingdom, United States of America
  • Passive DNS Results: www.rusmk.ru rusmk.ru jordanella.xyz suffunditur.ru rhodeus.xyz dividere.ru anisoptera.ru sprata.ru emysi.ru archaicus.ru suffundi.ru marinus.xyz jaculusan.ru obstetricans.xyz pipasa.xyz trichopodus.xyz metcalfas.online abrumpere.online nucifera.xyz pomfreti.ru variare.ru sclerops.xyz acantholyda.ru superfluere.ru apaturinae.ru trichogaster.xyz mystaceus.xyz babylont.ru pyrethrum.xyz niloticu.xyz panchax.ru niloticus.ru rutilus.xyz papayana.xyz tigrinum.xyz strigigena.ru testudos.ru lepidopteras.ru sufflari.ru blaberidae.ru corvusi.ru rufescens.ru juncear.xyz hippoglossus.ru libellulat.ru eurypterida.ru turgescere.ru senegala.xyz napellus.xyz silvestris.xyz sebaer.xyz libre2.space hamadryas.online blattodea.ru tubercur.ru proteug.ru erati.ru mesant.online acanthophis.online

Open Ports Detected

443

Map

Whois Information

  • inetnum: 195.140.144.0 - 195.140.147.255
  • netname: RU-WEBDC-20180606
  • country: RU
  • org: ORG-JD76-RIPE
  • admin-c: WNO5-RIPE
  • tech-c: WNO5-RIPE
  • status: ALLOCATED PA
  • mnt-by: RIPE-NCC-HM-MNT
  • mnt-by: WEBDC-MNT
  • created: 2018-06-06T11:12:11Z
  • last-modified: 2022-05-19T07:12:26Z
  • organisation: ORG-JD76-RIPE
  • org-name: JSC Datacenter
  • country: RU
  • org-type: LIR
  • address: Nagornoye Shosse, 2
  • address: 141400
  • address: Khimki, MSK
  • address: RUSSIAN FEDERATION
  • phone: +7(495)663-71-36
  • admin-c: AM44131-RIPE
  • tech-c: AA33569-RIPE
  • abuse-c: AR46749-RIPE
  • mnt-ref: WEBDC-MNT
  • mnt-by: RIPE-NCC-HM-MNT
  • mnt-by: WEBDC-MNT
  • created: 2018-06-04T13:52:29Z
  • last-modified: 2022-04-07T04:25:42Z
  • role: WebDC Network Operations
  • address: 141400, Russia, Khimki
  • address: Nagornoye Shosse, 2
  • phone: +7(495)663-71-36
  • admin-c: AM44131-RIPE
  • tech-c: AA33569-RIPE
  • nic-hdl: WNO5-RIPE
  • abuse-mailbox: [email protected]
  • mnt-by: WEBDC-MNT
  • created: 2022-04-07T08:40:05Z
  • last-modified: 2022-04-07T08:40:05Z
  • route: 195.140.146.0/23
  • origin: AS29182
  • mnt-by: WEBDC-MNT
  • created: 2018-06-15T04:47:56Z
  • last-modified: 2018-06-15T04:47:56Z

Links to attack logs

vultrwarsaw-ssh-bruteforce-ip-list-2023-04-20 dofrank-ssh-bruteforce-ip-list-2023-04-24 vultrparis-ssh-bruteforce-ip-list-2023-03-24 dofrank-ssh-bruteforce-ip-list-2023-04-21 dolondon-ssh-bruteforce-ip-list-2023-03-30 dosing-ssh-bruteforce-ip-list-2023-04-08