199.249.230.153 Threat Intelligence and Host Information

Share on:
Apr 29, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Likely Malicious Host 🟠 70/100

Host and Network Information

  • Tags: Nextray, TOR, VPN, anna paula, associated, currc3adculo, cve202229266, cyber security, description, description ip, from email, headers, indicator, indicator type, ioc, malicious, malspam email, msi file, phishing, probing, scanning, tuesday, utf8, webscan, webscanner bruteforce web app attack, zip archive
  • Known tor exit node
  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: blocklist_net_ua, dm_tor, et_tor, sblam, stopforumspam, stopforumspam_180d, stopforumspam_1d, stopforumspam_30d, stopforumspam_365d, stopforumspam_7d, stopforumspam_90d, tor_exits

  • Known TOR node
  • Country: United States of America
  • Network: AS62744 quintex alliance consulting
  • Noticed: 50 times
  • Protcols Attacked: spam
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: block2.mmms.eu

Malware Detected on Host

Count: 41 30cfa7c58175c33519c68953b339b14353326a73ce153dafb027e07a23aaaa74 c435ff86cdc86c0385e301a6784237e382efd803b035091cbcec20ca42b1fcee b11e614cdd02aecb8d6ae65bf67bfac8cbefd68830065217e2cb48922743bb12 ff556aa565a88dadad097d12f60e85780b872afce5fda943da2eca5236b68c5a 66837cb233b462c1286c112446e64c4e5108d605e976ff5e2b861f4f46f2c1ee 0e4b991e8bb2e7bbbb2f1dbe2783c857dc90da28d6cbd43bf39027ccafc93d0e 3e52576f858f03bfce01363a1791e22ba1e1576decf6bc10be5e42043f4728e3 2fd353ffcace535b5c0cdd3b70784bcbf1d4e35879a3109ed8825c2f970d22d3 53ffb4bbbb4828aa33dfa9adfd91c3e3717140ffe29ff0221e434f0db0f0232d d75fca41805fc5afc2376bdf462b5445e1c17fd88e4fef2de6a0b7627fa845db

Map

Whois Information

  • NetRange: 199.249.230.0 - 199.249.230.255
  • CIDR: 199.249.230.0/24
  • NetName: QUINTEX230
  • NetHandle: NET-199-249-230-0-1
  • Parent: NET199 (NET-199-0-0-0-0)
  • NetType: Direct Allocation
  • OriginAS: AS62744
  • Organization: Quintex Alliance Consulting (QAC-4-Z)
  • RegDate: 1994-06-07
  • Updated: 2021-12-14
  • Ref: https://rdap.arin.net/registry/ip/199.249.230.0
  • OrgName: Quintex Alliance Consulting
  • OrgId: QAC-4-Z
  • Address: 6730 Goodland Loop
  • City: San Angelo
  • StateProv: TX
  • PostalCode: 76901
  • Country: US
  • RegDate: 2017-03-22
  • Updated: 2022-01-04
  • Ref: https://rdap.arin.net/registry/entity/QAC-4-Z
  • OrgAbuseHandle: JR125-ARIN
  • OrgAbuseName: Ricketts, John L
  • OrgAbusePhone: +1-325-304-1600
  • OrgAbuseEmail: [email protected]
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/JR125-ARIN
  • OrgTechHandle: JR125-ARIN
  • OrgTechName: Ricketts, John L
  • OrgTechPhone: +1-325-304-1600
  • OrgTechEmail: [email protected]
  • OrgTechRef: https://rdap.arin.net/registry/entity/JR125-ARIN
  • RNOCHandle: JR125-ARIN
  • RNOCName: Ricketts, John L
  • RNOCPhone: +1-325-304-1600
  • RNOCEmail: [email protected]
  • RNOCRef: https://rdap.arin.net/registry/entity/JR125-ARIN
  • RAbuseHandle: JR125-ARIN
  • RAbuseName: Ricketts, John L
  • RAbusePhone: +1-325-304-1600
  • RAbuseEmail: [email protected]
  • RAbuseRef: https://rdap.arin.net/registry/entity/JR125-ARIN
  • RTechHandle: JR125-ARIN
  • RTechName: Ricketts, John L
  • RTechPhone: +1-325-304-1600
  • RTechEmail: [email protected]
  • RTechRef: https://rdap.arin.net/registry/entity/JR125-ARIN

Links to attack logs

forum-spam-ip-list-2023-03-20