201.162.150.218 Threat Intelligence and Host Information

Share on:
Apr 30, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Potentially Malicious Host 🟡 35/100

Host and Network Information

  • Tags: Nextray, awssafrica, bruteforce, cyber security, ioc, la, lafusioncenter, louisiana, malicious, phishing, telnet, vultr

  • View other sources: Spamhaus VirusTotal

  • Country: Mexico
  • Network: AS7438 pegaso pcs s.a. de c.v.
  • Noticed: 6 times
  • Protcols Attacked: telnet
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, South Africa, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: device-565dd07c-3850-49cd-9a5d-d3cf53781e22.remotewd.com

Open Ports Detected

1723 179

Map

Whois Information

  • inetnum: 201.162.128.0/17
  • status: allocated
  • aut-num: AS7438
  • owner: PEGASO PCS
  • ownerid: MX-PPSC6-LACNIC
  • responsible: Liliana Olvera Soto
  • address: Prol. Paseo de la Reforma, 1200, Piso 14 Col. Cruz Manca
  • address: 05349 - Cuajimalpa De Morelos - CX
  • country: MX
  • phone: +52 55 16165000
  • owner-c: TMM3
  • tech-c: TMM3
  • abuse-c: ABM53
  • inetrev: 201.162.128.0/18
  • nserver: TEMMDNS1.OPTELE.NET [lame - not published]
  • nsstat: 20230429 NOT SYNC ZONE
  • nslastaa: 20220122
  • nserver: TEMMDNS2.OPTELE.NET [lame - not published]
  • nsstat: 20230429 QREFUSED
  • nslastaa: 20220122
  • nserver: TEMMDNS3.OPTELE.NET
  • nsstat: 20230429 AA
  • nslastaa: 20230429
  • nserver: TEMMDNS4.OPTELE.NET
  • nsstat: 20230429 AA
  • nslastaa: 20230429
  • inetrev: 201.162.192.0/19
  • nserver: TEMMDNS1.OPTELE.NET [lame - not published]
  • nsstat: 20230430 NOT SYNC ZONE
  • nslastaa: 20220122
  • nserver: TEMMDNS2.OPTELE.NET [lame - not published]
  • nsstat: 20230430 QREFUSED
  • nslastaa: 20220122
  • nserver: TEMMDNS3.OPTELE.NET
  • nsstat: 20230430 AA
  • nslastaa: 20230430
  • nserver: TEMMDNS4.OPTELE.NET
  • nsstat: 20230430 AA
  • nslastaa: 20230430
  • inetrev: 201.162.240.0/20
  • nserver: TEMMDNS1.OPTELE.NET [lame - not published]
  • nsstat: 20230429 NOT SYNC ZONE
  • nslastaa: 20220122
  • nserver: TEMMDNS2.OPTELE.NET [lame - not published]
  • nsstat: 20230429 QREFUSED
  • nslastaa: 20220122
  • nserver: TEMMDNS3.OPTELE.NET
  • nsstat: 20230429 AA
  • nslastaa: 20230429
  • nserver: TEMMDNS4.OPTELE.NET
  • nsstat: 20230429 AA
  • nslastaa: 20230429
  • inetrev: 201.162.224.0/21
  • nserver: TEMMDNS1.OPTELE.NET [lame - not published]
  • nsstat: 20230430 NOT SYNC ZONE
  • nslastaa: 20220121
  • nserver: TEMMDNS2.OPTELE.NET [lame - not published]
  • nsstat: 20230430 QREFUSED
  • nslastaa: 20220121
  • nserver: TEMMDNS3.OPTELE.NET
  • nsstat: 20230430 AA
  • nslastaa: 20230430
  • nserver: TEMMDNS4.OPTELE.NET
  • nsstat: 20230430 AA
  • nslastaa: 20230430
  • inetrev: 201.162.232.0/22
  • nserver: TEMMDNS1.OPTELE.NET [lame - not published]
  • nsstat: 20230430 NOT SYNC ZONE
  • nslastaa: 20220121
  • nserver: TEMMDNS2.OPTELE.NET [lame - not published]
  • nsstat: 20230430 QREFUSED
  • nslastaa: 20220121
  • nserver: TEMMDNS3.OPTELE.NET
  • nsstat: 20230430 AA
  • nslastaa: 20230430
  • nserver: TEMMDNS4.OPTELE.NET
  • nsstat: 20230430 AA
  • nslastaa: 20230430
  • inetrev: 201.162.238.0/23
  • nserver: TEMMDNS1.OPTELE.NET [lame - not published]
  • nsstat: 20230430 NOT SYNC ZONE
  • nslastaa: 20220122
  • nserver: TEMMDNS2.OPTELE.NET [lame - not published]
  • nsstat: 20230430 QREFUSED
  • nslastaa: 20220122
  • nserver: TEMMDNS3.OPTELE.NET
  • nsstat: 20230430 AA
  • nslastaa: 20230430
  • nserver: TEMMDNS4.OPTELE.NET
  • nsstat: 20230430 AA
  • nslastaa: 20230430
  • inetrev: 201.162.237.0/24
  • nserver: TEMMDNS1.OPTELE.NET [lame - not published]
  • nsstat: 20230501 NOT SYNC ZONE
  • nslastaa: 20220121
  • nserver: TEMMDNS2.OPTELE.NET [lame - not published]
  • nsstat: 20230501 QREFUSED
  • nslastaa: 20220121
  • nserver: TEMMDNS3.OPTELE.NET
  • nsstat: 20230501 AA
  • nslastaa: 20230501
  • nserver: TEMMDNS4.OPTELE.NET
  • nsstat: 20230501 AA
  • nslastaa: 20230501
  • created: 20140612
  • changed: 20191203
  • nic-hdl: TMM3
  • person: IP Address Mexico
  • e-mail: [email protected]
  • address: Prolongación Paseo de la Reforma, 1200, Colonia Cruz Manca
  • address: 05349 - Cuajimalpa de Morelos - CX
  • country: MX
  • phone: +52 5516165000 [66126]
  • created: 20130221
  • changed: 20191203
  • nic-hdl: ABM53
  • person: Abuse Mexico
  • e-mail: [email protected]
  • address: Prol. Paseo de la Reforma, 1200, Cruz Manca
  • address: 05349 - Cuajimalpa de Morelos - CX
  • country: MX
  • phone: +52 5516165000
  • created: 20191203
  • changed: 20191203

Links to attack logs

vultrparis-telnet-bruteforce-ip-list-2022-09-17 awssafrica-telnet-bruteforce-ip-list-2022-04-04