199.188.103.138 Threat Intelligence and Host Information

Apr 04, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 199.188.103.138 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 40/100

Host and Network Information

  • Tags: cyber security, ioc, malicious, Nextray, phishing

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: haley_ssh

  • Country: United States
  • Network:
  • Noticed: 30 times
  • Protocols Attacked: ntp ssh
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 7 b20cc83dd4fb4e9e977aeb81c637e2e1fe8c927ef25f2822309bd06e2b8b40a1 2ebb4fa022e5698c07c274ccbb8e6f08fe45713728ca303d73e5bafc97ef9ee5 45a8e6075362e479a0cef13cc584c55675a17a455c9bdb7f0c0a46f4643bff4e 77d9178e0d9e9fdd5cc04560b7da5fb521e57266d27b74cd7a00fd2f64bf50ec 2af05879d5f1cbaecc22b739485f27d5a2e2c8ed02261c9c0df6b10367ac8fd3 7fe403cfb6f23884cca5ab676d3e021c1383bd2438bf642a768b7cf7860b9110 421816543d5070f5e8d8dec2791e85fe862e7c27fd02f7a104154b7a3fdb489a

Map

Whois Information

Links to attack logs

awsjap-ssh-bruteforce-ip-list-2021-03-04 awsau-ntp-bruteforce-ip-list-2021-03-08 ****** ****** awsjap-ntp-bruteforce-ip-list-2021-03-08 ****** ******

Share on: