197.210.194.147 Threat Intelligence and Host Information
Share on:General
This page contains threat intelligence information for the IPv4 address 197.210.194.147 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.
Possibly Malicious Host 🟢 29/100
Host and Network Information
-
Tags: Malicious IP, Nextray, Scanner, Webattack, blacklist, botnet, bruteforce, cyber security, digital ocean, ioc, malicious, mirai, mssql, nmap, phishing, port-scan, scan, scanning, smb, smtp, ssh, tcp, vultr
- View other sources: Spamhaus VirusTotal
-
Contained within other IP sets: turris_greylist
- Country: Nigeria
- Network: AS29465 mtn nigeria communication limited
- Noticed: 1 times
- Protcols Attacked: mssql
- Countries Attacked: Australia, Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom, United Kingdom of Great Britain and Northern Ireland, United States of America
Malware Detected on Host
Count: 2 4e590168924fff810d423a7c795c5e9ff653e97e4144aee874894d80fd45039f c0e783cc543267fdaadb30aefeb1f04700ddfa80e375c592c85762e6ab1b28d2
Open Ports Detected
Map
Whois Information
- inetnum: 197.210.0.0 - 197.210.255.255
- netname: MTN-Nigeria
- descr: MTN Nigeria
- country: NG
- org: ORG-MN1-AFRINIC
- admin-c: CA48-AFRINIC
- admin-c: BRM1-AFRINIC
- admin-c: TI13-AFRINIC
- tech-c: ISP1-AFRINIC
- tech-c: CA48-AFRINIC
- tech-c: TI13-AFRINIC
- status: ALLOCATED PA
- mnt-by: AFRINIC-HM-MNT
- mnt-lower: MTNNIGERA1-MNT
- parent: 197.0.0.0 - 197.255.255.255
- organisation: ORG-MN1-AFRINIC
- org-name: MTN Nigeria
- org-type: LIR
- country: NG
- address: Yellodrome building, adeola hopewell street, Victoria island
- address: Victoria island
- phone: tel:+234-803-123-0141
- admin-c: CA48-AFRINIC
- admin-c: TI13-AFRINIC
- admin-c: BRM1-AFRINIC
- tech-c: CA48-AFRINIC
- tech-c: ISP1-AFRINIC
- tech-c: TI13-AFRINIC
- mnt-ref: AFRINIC-HM-MNT
- mnt-ref: MTNNIGERA1-MNT
- mnt-by: AFRINIC-HM-MNT
- person: Business Risk Management
- address: Golden Plaza Building, Falomo roundabout, ikoyi
- phone: +08031230141
- nic-hdl: BRM1-AFRINIC
- abuse-mailbox: [email protected]
- mnt-by: GENERATED-5DN7BDIQBRY0JCMBEE6EBZSP56LLR9GU-MNT
- person: Chukwuebuka Ani
- address: Yellodrome building, adeola hopewell address: street, Victoria island
- address: Victoria island
- address: Nigeria
- phone: tel:+234-803-200-0490
- nic-hdl: CA48-AFRINIC
- mnt-by: GENERATED-EBHBOB966K2GDPMBHLHKG9KPYWB1VW9T-MNT
- person: Internet Services Planning
- nic-hdl: ISP1-AFRINIC
- address: Yellodrome building, adeola hopewell street, Victoria island
- address: Lagos
- address: Other
- phone: tel:+234-803-123-0141
- mnt-by: MTNNIGERA1-MNT
- person: Taiwo Ikugbonmire
- nic-hdl: TI13-AFRINIC
- address: Yellodrome building, adeola hopewell address: street, Victoria island
- address: Victoria island
- address: Nigeria
- address: Lagos
- address: Other
- phone: tel:+234-803-200-284
- mnt-by: GENERATED-OTDTXORXHN6F82OVDX2NEJDCXAME7BSN-MNT
- route: 197.210.194.0/24
- origin: AS29465
- descr: MTN NIGERIA PREFIX
- mnt-by: MTNNIGERA1-MNT
Links to attack logs
nmap-scanning-list-2022-01-15 vultrparis-mssql-bruteforce-ip-list-2022-04-29 nmap-scanning-list-2021-09-27 dolondon-mssql-bruteforce-ip-list-2022-09-06 dobengaluru-mssql-bruteforce-ip-list-2023-06-12 vultrparis-mssql-bruteforce-ip-list-2021-11-26 nmap-scanning-list-2023-03-31 nmap-scanning-list-2022-01-27 nmap-scanning-list-2022-02-27 dobengaluru-mssql-bruteforce-ip-list-2023-06-04 awsindia-mssql-bruteforce-ip-list-2022-05-13 vultrparis-mssql-bruteforce-ip-list-2023-08-06 nmap-scanning-list-2023-07-02 dosing-mssql-bruteforce-ip-list-2021-08-25 vultrparis-mssql-bruteforce-ip-list-2021-11-06 dosing-mssql-bruteforce-ip-list-2021-10-24 nmap-scanning-list-2022-08-02 nmap-scanning-list-2022-09-09 nmap-scanning-list-2023-07-16 dosing-mssql-bruteforce-ip-list-2021-09-14 dofrank-mssql-bruteforce-ip-list-2021-12-24 vultrparis-mssql-bruteforce-ip-list-2022-01-22 dofrank-mssql-bruteforce-ip-list-2022-07-05 awsjap-mssql-bruteforce-ip-list-2022-05-09 vultrparis-mssql-bruteforce-ip-list-2021-12-26 dofrank-mssql-bruteforce-ip-list-2022-09-14 nmap-scanning-list-2022-08-19 vultrparis-mssql-bruteforce-ip-list-2021-08-25 dofrank-mssql-bruteforce-ip-list-2021-09-07
Usernames utilised by this host:
sa,