197.211.55.20 Threat Intelligence and Host Information

ipinfopage

General

This page contains threat intelligence information for the IPv4 address 197.211.55.20 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

🟡 Low Risk — 35/100

Geographic Location

Host and Network Information

  • View other sources: Spamhaus VirusTotal Shodan AbuseIPDB
  • Country: Nigeria
  • Noticed: 19 times
  • Protocols Attacked: ssh
  • Countries Attacked: Australia
  • Open Ports: 10000, 21, 22
  • Tor Node: No
  • Associated Malware Samples: 1

Tags

  • Bruteforce
  • Brute-Force
  • cisco
  • cowrie
  • dionaea
  • fatt
  • honeytrap
  • info
  • LAMP
  • mailoney
  • malicious
  • notice
  • p0f
  • scan
  • sensor-tagged
  • sentrypeer
  • sftp
  • sip
  • sipvicious
  • ssh
  • SSH
  • suricata
  • tanner
  • tpot

MITRE ATT&CK TTPs

  • T1595 - Active Scanning

Attack Log References

Whois Information

inetnum: 197.211.32.0 - 197.211.63.255 netname: GLO-1 descr: Globacom Limited country: NG org: ORG-GL1-AFRINIC admin-c: PA2-AFRINIC admin-c: BA53-AFRINIC admin-c: AA299-AFRINIC tech-c: MO65-AFRINIC tech-c: PA2-AFRINIC tech-c: BA53-AFRINIC tech-c: NB33-AFRINIC tech-c: AA299-AFRINIC status: ALLOCATED PA mnt-by: AFRINIC-HM-MNT mnt-lower: GLO-ONLINE-ADMIN parent: 197.0.0.0 - 197.255.255.255 organisation: ORG-GL1-AFRINIC org-name: Globacom Limited org-type: LIR country: NG address: 1,MIKE ADENUGA CLOSE address: Victoria island address: Lagos phone: tel:+234-805-557-4458 phone: tel:+234-805-557-8843 phone: tel:+234-805-557-4337 phone: tel:+234-805-557-4909 admin-c: BA53-AFRINIC admin-c: PA2-AFRINIC admin-c: AA299-AFRINIC tech-c: NB33-AFRINIC tech-c: BA53-AFRINIC tech-c: PA2-AFRINIC tech-c: MO65-AFRINIC tech-c: AA299-AFRINIC mnt-ref: AFRINIC-HM-MNT mnt-ref: GLO-ONLINE-ADMIN mnt-by: AFRINIC-HM-MNT person: Adeyemi Adebambo address: Mike Ave address: LA E14 2AA address: Nigeria phone: tel:+234-805-557-4742 nic-hdl: AA299-AFRINIC mnt-by: GENERATED-VRIM7G1XHMBAKWQ9F0LPXMWTRAQJG1A0-MNT person: Benjamin Anyanwu address: 1 MAT Towers address: Off Adeola Odeku Street VI 23401 address: Nigeria phone: tel:+234-805-557-4458 nic-hdl: BA53-AFRINIC mnt-by: GENERATED-QV1ANC3PKEVAOOA0BMMB2JWHK3HRZNCO-MNT person: Matthew Olumoyegun nic-hdl: MO65-AFRINIC address: 1 MAT VI, Lagos address: Lagos address: Nigeria address: lagos 0123401 address: Nigeria phone: tel:+234-805-557-4909 phone: tel:+234-805-557-4910 mnt-by: GENERATED-AP4ZTLLY2DYWSVDWDFAB63VZHDCLOPYZ-MNT person: Naveen Babu nic-hdl: NB33-AFRINIC address: 1 MAT VI, Lagos address: Lagos address: Nigeria address: lagos address: Nigeria phone: tel:+234-805-557-4337 mnt-by: GENERATED-H0MUDPKGOXDMVHLST8CQWTXERIFNANFJ-MNT person: Prasoon Agarwal address: 1- Mike Adenuga Close, Victoria Island address: Lagos address: Lagos address: Nigeria phone: tel:+234-805-557-1050 phone: tel:+234-805-557-4458 phone: tel:+234-805-557-4458 nic-hdl: PA2-AFRINIC mnt-by: GENERATED-UZTCTD5VGK2EFW6UYFASG27JFJHXEZUQ-MNT route: 197.211.55.0/24 origin: AS37148 descr: GLO-1 mnt-by: GLO-ONLINE-ADMIN