204.42.253.130 Threat Intelligence and Host Information

Share on:

May 02, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Potentially Malicious Host 🟡 45/100

Host and Network Information

Mitre ATT&CK IDs: T1595 - Active Scanning
Tags: Nextray, Port scan, botnet, cyber security, digital ocean, ioc, malicious, mirai, phishing, scanners, scanning, snmp, vultr
View other sources: Spamhaus VirusTotal
Contained within other IP sets: ciarmy
Country: United States of America
Network: AS2914 ntt america inc.
Noticed: 50 times
Protcols Attacked: snmp
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Singapore, Spain, Turkey, Ukraine, United Kingdom, United Kingdom of Great Britain and Northern Ireland, United States of America

Open Ports Detected

22 443 80

CVEs Detected

CVE-2006-20001 CVE-2021-44224 CVE-2021-44790 CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23943 CVE-2022-26377 CVE-2022-28330 CVE-2022-28614 CVE-2022-28615 CVE-2022-29404 CVE-2022-30556 CVE-2022-31813 CVE-2022-36760 CVE-2022-37436 CVE-2023-25690 CVE-2023-27522

Map

Whois Information

NetRange: 204.42.0.0 - 204.42.255.255
CIDR: 204.42.0.0/16
NetName: NTTA-204-42
NetHandle: NET-204-42-0-0-1
Parent: NET204 (NET-204-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: NTT America, Inc. (NTTAM-1)
RegDate: 1994-05-14
Updated: 2012-03-02
Comment:
Comment: Reassignment information for this block is
Ref: https://rdap.arin.net/registry/ip/204.42.0.0
OrgName: NTT America, Inc.
OrgId: NTTAM-1
Address: 15809 Bear Creek Pkwy
Address: Suite 320
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 2005-12-08
Updated: 2023-02-06
Ref: https://rdap.arin.net/registry/entity/NTTAM-1
OrgTechHandle: CANDE70-ARIN
OrgTechName: Candela, Massimo
OrgTechPhone: +1-214-915-1366
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/CANDE70-ARIN
OrgTechHandle: VIPAR-ARIN
OrgTechName: VIPAR
OrgTechPhone: +1-877-688-6625
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/VIPAR-ARIN
OrgNOCHandle: NASC-ARIN
OrgNOCName: NTT America Support Contact
OrgNOCPhone: +1-877-688-6625
OrgNOCEmail: [email protected]
OrgNOCRef: https://rdap.arin.net/registry/entity/NASC-ARIN
OrgAbuseHandle: NAAC-ARIN
OrgAbuseName: NTT America Abuse Contact
OrgAbusePhone: +1-877-688-6625
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/NAAC-ARIN
RTechHandle: VIA4-ORG-ARIN
RTechName: VIPAR
RTechPhone: +1-877-688-6625
RTechEmail: [email protected]
RTechRef: https://rdap.arin.net/registry/entity/VIA4-ORG-ARIN
network:Class-Name:network
network:Auth-Area:204.42.252.0/22
network:ID:NETBLK-BLRS-204-42-252.127.0.0.1/32
network:Handle:NETBLK-BLRS-204-42-252
network:Network-Name:BLRS-204-42-252
network:IP-Network:204.42.252.0/23
network:In-Addr-Server;I:PUCK4-HST.127.0.0.1/32
network:In-Addr-Server;I:THORN-HST.127.0.0.1/32
network:In-Addr-Server;I:PCH-HST.127.0.0.1/32
network:IP-Network-Block:204.42.252.0 - 204.42.253.255
network:Org-Name:Nether Network
network:Street-Address:3469 Burbank
network:City:Ann Arbor
network:State:MI
network:Postal-Code:48105
network:Country-Code:US
network:Tech-Contact;I:JM568.127.0.0.1/32
network:Created:1999-08-21 05:00:00+00
network:Updated:2001-04-10 22:16:21+00
network:Class-Name:network
network:Auth-Area:204.42.252.0/22
network:ID:NETBLK-VRIO-204-042-252.127.0.0.1/32
network:Handle:NETBLK-VRIO-204-042-252
network:Network-Name:VRIO-204-042-252
network:IP-Network:204.42.252.0/22
network:In-Addr-Server;I:GIN1-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN2-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN3-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN4-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN5-HST.127.0.0.1/32
network:IP-Network-Block:204.42.252.0 - 204.42.255.255
network:Org-Name:NTT America - Ohio
network:Street-Address:1315 Euclid Avenue
network:City:Cleveland
network:State:OH
network:Postal-Code:44115
network:Country-Code:US
network:Tech-Contact;I:VO123-VRIO.127.0.0.1/32
network:Created:2000-09-06 23:30:36+00
network:Updated:2008-03-13 22:22:09+00

Links to attack logs