197.211.116.42 Threat Intelligence and Host Information

Share on:
Apr 24, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Potentially Malicious Host 🟡 34/100

Host and Network Information

  • Tags: Nextray, bruteforce, cyber security, digital ocean, ioc, malicious, phishing, telnet

  • View other sources: Spamhaus VirusTotal

  • Country: Malawi
  • Network: AS37187 african network information center
  • Noticed: 2 times
  • Protcols Attacked: telnet
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 4 aacfdc2b4cfcf17ae87049090a41f2edc0f4933b324ee4e35aa2d35a44a8f4d8 42ac87e4d25f5a63c7b298f784820e90e6e56890eedb9465ef0235685109cbe6 42ac87e4d25f5a63c7b298f784820e90e6e56890eedb9465ef0235685109cbe6 2c5bfe861a6cfcec2eeb95d270d25de1b710c3a7fd929a60a0c2ae719690d41c

Open Ports Detected

22 53

Map

Whois Information

  • inetnum: 197.211.112.0 - 197.211.119.255
  • netname: Skyband_4G_WiMAX
  • descr: Assigned for Skyband Mobile WiMAX Network
  • country: MW
  • admin-c: DP4-AFRINIC
  • admin-c: LK2-AFRINIC
  • tech-c: LK2-AFRINIC
  • status: ASSIGNED PA
  • mnt-by: SKYBAND-MNT
  • parent: 197.211.96.0 - 197.211.127.255
  • person: D PINTO
  • address: P O Box 1147
  • address: Lilongwe
  • address: malawi
  • address: Lilongwe
  • address: Malawi
  • phone: tel:+265-1-756-559
  • fax-no: tel:+265-1-756-560
  • nic-hdl: DP4-AFRINIC
  • mnt-by: GENERATED-IFIF4ZF6ABVOL2RWPSDOZVHZ6RIGXEI1-MNT
  • person: LIMBIKA KANJADZA
  • nic-hdl: LK2-AFRINIC
  • address: P O Box 2461
  • address: BLANTYRE
  • address: MALAWI
  • address: Blantyre
  • address: Malawi
  • phone: tel:+265-1-820-200
  • phone: tel:+265-824011
  • mnt-by: GENERATED-MTWNGNJHREMYUIZNRTKEGRGNPYCZ2MVM-MNT
  • route: 197.211.116.0/24
  • descr: Skyband Corporation Limited
  • origin: AS37187
  • mnt-by: SKYBAND-MNT

Links to attack logs

dotoronto-telnet-bruteforce-ip-list-2022-07-23