206.204.134.81 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 206.204.134.81 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 35/100

Host and Network Information

• Tags: botnet, port 23, tcp/23, telnet

• View other sources: Spamhaus VirusTotal

• Country: Spain
• Network: AS15704 xtra telecom s.a.
• Noticed: 12 times
• Protocols Attacked: telnet
• Countries Attacked: United States of America

Open Ports Detected

1000 10000 10001 1023 10250 1026 10909 10911 1099 110 11112 1200 12000 1234 1311 13579 1414 14147 14265 143 15 1599 16992 16993 17 17000 1723 1741 18081 18245 19000 19071 1911 1935 2000 2003 2008 20547 2083 21 2154 2181 2222 2223 2345 2376 2379 2455 2480 25001 2554 2556 2559 3000 30002 30003 3058 3100 3109 3117 3119 31337 3268 3306 3310 3541 3551 389 4022 4063 4282 4321 4369 44158 4433 44818 4506 4664 46777 49 49152 49153 4949 5000 50000 50050 50070 5009 5010 502 5025 5080 5201 5209 5269 541 548 5494 554 55442 5569 5598 5609 5800 5858 5938 5986 60010 6002 61613 6379 6601 6602 6697 675 7001 7170 7547 7548 7657 771 7979 8009 8010 8025 8046 8060 8069 8071 8080 8081 8083 8086 8089 8090 8098 8123 8139 8291 83 8333 84 8426 8427 8428 8445 8500 8545 8554 8649 8688 88 8810 8826 8880 8890 9001 9009 9022 9042 9090 9095 9103 9151 9160 9306 9876 9898 9943 9944 9998

Map

Whois Information

• NetRange: 206.204.128.0 - 206.204.159.255
• CIDR: 206.204.128.0/19
• NetName: RIPE
• NetHandle: NET-206-204-128-0-1
• Parent: NET206 (NET-206-0-0-0-0)
• NetType: Early Registrations, Transferred to RIPE NCC
• OriginAS:
• Organization: RIPE Network Coordination Centre (RIPE)
• RegDate: 2021-06-14
• Updated: 2021-06-14
• Ref: https://rdap.arin.net/registry/ip/206.204.128.0
• OrgName: RIPE Network Coordination Centre
• OrgId: RIPE
• Address: P.O. Box 10096
• City: Amsterdam
• StateProv:
• PostalCode: 1001EB
• Country: NL
• RegDate:
• Updated: 2013-07-29
• Ref: https://rdap.arin.net/registry/entity/RIPE
• OrgTechHandle: RNO29-ARIN
• OrgTechName: RIPE NCC Operations
• OrgTechPhone: +31 20 535 4444
• OrgTechEmail: hostmaster@ripe.net
• OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
• OrgAbuseHandle: ABUSE3850-ARIN
• OrgAbuseName: Abuse Contact
• OrgAbusePhone: +31205354444
• OrgAbuseEmail: abuse@ripe.net
• OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN

Links to attack logs

vultrwarsaw-telnet-bruteforce-ip-list-2024-07-11 vultrwarsaw-telnet-bruteforce-ip-list-2024-07-07 vultrwarsaw-telnet-bruteforce-ip-list-2024-07-17 vultrwarsaw-telnet-bruteforce-ip-list-2024-07-06