205.251.199.248 Threat Intelligence and Host Information

Apr 19, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 205.251.199.248 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 5/100

Host and Network Information

  • Country: United States
  • Network:
  • Noticed: 1 times
  • Protocols Attacked: SSH
  • Passive DNS Results: chef-jenkins.unitedlex.global telegraf.unitedlex.global grafana.unitedlex.global us1sitinf01v.unitedlex.global stats.unitedlex.global influx.unitedlex.global influxdb.unitedlex.global vditray.unitedlex.global ausscvlt1app002.unitedlex.global ausscvlt1app003.unitedlex.global ausscvlt1app005.unitedlex.global ausscvlt1app004.unitedlex.global vault.unitedlex.global vault-aussc.unitedlex.global ausscvlt1app001.unitedlex.global ausscjnk1svc001.unitedlex.global www.unitedlex.global aussczab1sql001.unitedlex.global ausscsit2msg002.unitedlex.global ausscsit2msg003.unitedlex.global ausscsit2msg001.unitedlex.global smtp.unitedlex.global ns3.silkstart.com ns3.esolix.net ns-2040.awsdns-63.co.uk

Malware Detected on Host

Count: 1 3ea07adaa981e290f7fa28311cf2698e67a94a3df4f1deb399ab03496add0d33

Map

Whois Information

  • NetRange: 205.251.192.0 - 205.251.255.255
  • CIDR: 205.251.192.0/18
  • NetName: AMAZON-05
  • NetHandle: NET-205-251-192-0-1
  • Parent: NET205 (NET-205-0-0-0-0)
  • NetType: Direct Allocation
  • OriginAS: AS16509, AS39111, AS7224, AS14618
  • Organization: Amazon.com, Inc. (AMAZON-4)
  • RegDate: 2010-08-27
  • Updated: 2021-07-01
  • Comment: —–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–
  • Ref: https://rdap.arin.net/registry/ip/205.251.192.0
  • OrgName: Amazon.com, Inc.
  • OrgId: AMAZON-4
  • Address: 1918 8th Ave
  • City: SEATTLE
  • StateProv: WA
  • PostalCode: 98101-1244
  • Country: US
  • RegDate: 1995-01-23
  • Updated: 2022-09-30
  • Ref: https://rdap.arin.net/registry/entity/AMAZON-4
  • OrgRoutingHandle: ARMP-ARIN
  • OrgRoutingName: AWS RPKI Management POC
  • OrgRoutingPhone: +1-206-555-0000
  • OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
  • OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
  • OrgRoutingHandle: IPROU3-ARIN
  • OrgRoutingName: IP Routing
  • OrgRoutingPhone: +1-206-555-0000
  • OrgRoutingEmail: aws-routing-poc@amazon.com
  • OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
  • OrgNOCHandle: AANO1-ARIN
  • OrgNOCName: Amazon AWS Network Operations
  • OrgNOCPhone: +1-206-555-0000
  • OrgNOCEmail: amzn-noc-contact@amazon.com
  • OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
  • OrgAbuseHandle: AEA8-ARIN
  • OrgAbuseName: Amazon EC2 Abuse
  • OrgAbusePhone: +1-206-555-0000
  • OrgAbuseEmail: trustandsafety@support.aws.com
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
  • OrgTechHandle: ANO24-ARIN
  • OrgTechName: Amazon EC2 Network Operations
  • OrgTechPhone: +1-206-555-0000
  • OrgTechEmail: amzn-noc-contact@amazon.com
  • OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
  • RAbuseHandle: ROLEA19-ARIN
  • RAbuseName: Role Account
  • RAbusePhone: +1-206-266-4064
  • RAbuseEmail: ipmanagement@amazon.com
  • RAbuseRef: https://rdap.arin.net/registry/entity/ROLEA19-ARIN
  • RTechHandle: ROLEA19-ARIN
  • RTechName: Role Account
  • RTechPhone: +1-206-266-4064
  • RTechEmail: ipmanagement@amazon.com
  • RTechRef: https://rdap.arin.net/registry/entity/ROLEA19-ARIN
  • RNOCHandle: ROLEA19-ARIN
  • RNOCName: Role Account
  • RNOCPhone: +1-206-266-4064
  • RNOCEmail: ipmanagement@amazon.com
  • RNOCRef: https://rdap.arin.net/registry/entity/ROLEA19-ARIN
  • NetRange: 205.251.192.0 - 205.251.199.255
  • CIDR: 205.251.192.0/21
  • NetName: AMAZON-BYOIP
  • NetHandle: NET-205-251-192-0-2
  • Parent: AMAZON-05 (NET-205-251-192-0-1)
  • NetType: Reallocated
  • OriginAS:
  • Organization: Amazon Data Services NoVa (ADSN-1)
  • RegDate: 2022-01-11
  • Updated: 2022-01-11
  • Comment: —–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–
  • Ref: https://rdap.arin.net/registry/ip/205.251.192.0
  • OrgName: Amazon Data Services NoVa
  • OrgId: ADSN-1
  • Address: 13200 Woodland Park Road
  • City: Herndon
  • StateProv: VA
  • PostalCode: 20171
  • Country: US
  • RegDate: 2018-04-25
  • Updated: 2019-08-02
  • Ref: https://rdap.arin.net/registry/entity/ADSN-1
  • OrgAbuseHandle: AEA8-ARIN
  • OrgAbuseName: Amazon EC2 Abuse
  • OrgAbusePhone: +1-206-555-0000
  • OrgAbuseEmail: trustandsafety@support.aws.com
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
  • OrgNOCHandle: AANO1-ARIN
  • OrgNOCName: Amazon AWS Network Operations
  • OrgNOCPhone: +1-206-555-0000
  • OrgNOCEmail: amzn-noc-contact@amazon.com
  • OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
  • OrgTechHandle: ANO24-ARIN
  • OrgTechName: Amazon EC2 Network Operations
  • OrgTechPhone: +1-206-555-0000
  • OrgTechEmail: amzn-noc-contact@amazon.com
  • OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN

Links to attack logs

****** ****** ******

Share on: