199.188.103.138 Threat Intelligence and Host Information

Share on:
Apr 29, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Potentially Malicious Host 🟡 40/100

Host and Network Information

  • Tags: C&C, Malicious IP, Nextray, aws, awsau, awsjap, blacklist, botnet, cowrie, cyber security, ioc, la, lafusioncenter, louisiana, malicious, mirai, ntp, phishing, scan, scanners, ssh, tcp, telnet, tsec
  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: haley_ssh

  • Country: United States of America
  • Network: AS36352 colocrossing
  • Noticed: 50 times
  • Protcols Attacked: ntp ssh
  • Countries Attacked: Australia, Canada, Czechia, Denmark, Estonia, France, Germany, Japan, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 7 b20cc83dd4fb4e9e977aeb81c637e2e1fe8c927ef25f2822309bd06e2b8b40a1 2ebb4fa022e5698c07c274ccbb8e6f08fe45713728ca303d73e5bafc97ef9ee5 45a8e6075362e479a0cef13cc584c55675a17a455c9bdb7f0c0a46f4643bff4e 77d9178e0d9e9fdd5cc04560b7da5fb521e57266d27b74cd7a00fd2f64bf50ec 2af05879d5f1cbaecc22b739485f27d5a2e2c8ed02261c9c0df6b10367ac8fd3 7fe403cfb6f23884cca5ab676d3e021c1383bd2438bf642a768b7cf7860b9110 421816543d5070f5e8d8dec2791e85fe862e7c27fd02f7a104154b7a3fdb489a

Map

Whois Information

  • NetRange: 199.188.100.0 - 199.188.103.255
  • CIDR: 199.188.100.0/22
  • NetName: CC-06
  • NetHandle: NET-199-188-100-0-1
  • Parent: NET199 (NET-199-0-0-0-0)
  • NetType: Direct Allocation
  • OriginAS: AS36352
  • Organization: ColoCrossing (VGS-9)
  • RegDate: 2012-05-02
  • Updated: 2012-05-02
  • Ref: https://rdap.arin.net/registry/ip/199.188.100.0
  • OrgName: ColoCrossing
  • OrgId: VGS-9
  • Address: 325 Delaware Avenue
  • Address: Suite 300
  • City: Buffalo
  • StateProv: NY
  • PostalCode: 14202
  • Country: US
  • RegDate: 2005-06-20
  • Updated: 2019-10-17
  • Ref: https://rdap.arin.net/registry/entity/VGS-9
  • OrgAbuseHandle: ABUSE3246-ARIN
  • OrgAbuseName: Abuse
  • OrgAbusePhone: +1-800-518-9716
  • OrgAbuseEmail: [email protected]
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3246-ARIN
  • OrgTechHandle: NETWO882-ARIN
  • OrgTechName: Network Operations
  • OrgTechPhone: +1-800-518-9716
  • OrgTechEmail: [email protected]
  • OrgTechRef: https://rdap.arin.net/registry/entity/NETWO882-ARIN
  • OrgNOCHandle: NETWO882-ARIN
  • OrgNOCName: Network Operations
  • OrgNOCPhone: +1-800-518-9716
  • OrgNOCEmail: [email protected]
  • OrgNOCRef: https://rdap.arin.net/registry/entity/NETWO882-ARIN

Links to attack logs

awsjap-ssh-bruteforce-ip-list-2021-03-04 awsau-ntp-bruteforce-ip-list-2021-03-08 awsjap-ntp-bruteforce-ip-list-2021-03-08