198.199.114.69 Threat Intelligence and Host Information

Share on:
Aug 18, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 198.199.114.69 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 30/100

Host and Network Information

  • Tags: Malicious IP, Skype, badrequest, blacklist, botnet, bruteforce, mirai, probing, scan, scanning, tcp, webscan, webscanner, webscanner bruteforce web app attack

  • View other sources: Spamhaus VirusTotal

  • Country: United States
  • Network: AS14061 digitalocean llc
  • Noticed: 1 times
  • Protcols Attacked: snmp
  • Countries Attacked: Malaysia, United States of America
  • Passive DNS Results: morninj.com reach4hopeutah.org mornin.org lesterland.lessig.org ever.ly

Malware Detected on Host

Count: 328 e1bf926051af7e95844709f7adc1ec3b606387408fda6890410cfdff76b1d3ea fc1d358bf14568281a0ab2855d06a41b89592c773ac6139ba00d2a89856cdb72 43f70f22afeae98b6c8f429a026394a4566931b245859395a10d371df5f5cfda 6ecc806f06c66efecef6639b73f6cb76c3eb4f381ab214eb3e6d7b642ac4b0e2 58b5981aaeda243505c6d30c942d6dd87e09893e6aee4122aca81a53eea9aec0 65c38c5249855cfecc1165e20feef54cf1e4e85ace6ec81eafb4e435b171ab62 6ac57c44dabf9110297daf78245fb0590c93b4969901933b97e7e78706864e5a 37850c755fdba95cd6ec669d439fc612bea972c97de7c6a0afde79ec6bd73233 4cfbec7cd3b167cf0eebfb6ec0927ea429db23376e577d9c0c964dac88e92713 d8ad0ff7d46d7d6e47c267924bf524a2152ddc1c559b2c51fd34c3c61865c32a

Open Ports Detected

22

Map

Whois Information

  • NetRange: 198.199.64.0 - 198.199.127.255
  • CIDR: 198.199.64.0/18
  • NetName: DIGITALOCEAN-198-199-64-0
  • NetHandle: NET-198-199-64-0-1
  • Parent: NET198 (NET-198-0-0-0-0)
  • NetType: Direct Allocation
  • OriginAS: AS14061
  • Organization: DigitalOcean, LLC (DO-13)
  • RegDate: 2013-03-27
  • Updated: 2013-03-27
  • Comment: Routing and Peering Policy can be found at https://www.as14061.net
  • Comment:
  • Ref: https://rdap.arin.net/registry/ip/198.199.64.0
  • OrgName: DigitalOcean, LLC
  • OrgId: DO-13
  • Address: 101 Ave of the Americas
  • Address: FL2
  • City: New York
  • StateProv: NY
  • PostalCode: 10013
  • Country: US
  • RegDate: 2012-05-14
  • Updated: 2023-07-07
  • Ref: https://rdap.arin.net/registry/entity/DO-13
  • OrgTechHandle: NOC32014-ARIN
  • OrgTechName: Network Operations Center
  • OrgTechPhone: +1-347-875-6044
  • OrgTechEmail: [email protected]
  • OrgTechRef: https://rdap.arin.net/registry/entity/NOC32014-ARIN
  • OrgAbuseHandle: ABUSE5232-ARIN
  • OrgAbuseName: Abuse, DigitalOcean
  • OrgAbusePhone: +1-347-875-6044
  • OrgAbuseEmail: [email protected]
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE5232-ARIN
  • OrgNOCHandle: NOC32014-ARIN
  • OrgNOCName: Network Operations Center
  • OrgNOCPhone: +1-347-875-6044
  • OrgNOCEmail: [email protected]
  • OrgNOCRef: https://rdap.arin.net/registry/entity/NOC32014-ARIN

Links to attack logs

digitaloceantoronto-snmp-bruteforce-ip-list-2023-08-18