208.117.13.152 Threat Intelligence and Host Information
ipinfopage
General
This page contains threat intelligence information for the IPv4 address
208.117.13.152 and was generated either as a result of
observed malicious activity or as an information gathering exercise to assist with
enrichment of security events and context. All information is gathered passively
through aggregation of public sources, or observations through activity upon honeynets.
The host score is calculated through a series of statistically weighted values and
machine learning which takes into account metadata such as host information, frequency,
volume and global distribution of malicious activity, association with other known
malicious hosts or networks, proxying or anonymising behaviour such as with tor exit
nodes, residential proxies or VPN services, and many other attributes. These values are
historical and indicative only - and should not be taken to be an accurate representation
of the users, businesses or networks in which they reside.
🟠 Elevated —
65/100
Geographic Location
Host and Network Information
- Bruteforce
- Brute-Force
- cowrie
- malicious
- sftp
- ssh
- SSH
- tanner
MITRE ATT&CK TTPs
- T1078 - Valid Accounts
- T1083 - File and Directory Discovery
- T1098.004 - SSH Authorized Keys
- T1105 - Ingress Tool Transfer
- T1110.004 - Credential Stuffing
- T1110 - Brute Force
Associated CVEs
Attack Log References
Whois Information
NetRange: 208.117.0.0 - 208.117.47.255
CIDR: 208.117.32.0/20, 208.117.0.0/19
NetName: STEADFAST-5
NetHandle: NET-208-117-0-0-1
Parent: NET208 (NET-208-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS32748
Organization: Steadfast (SNL-74)
RegDate: 2010-08-19
Updated: 2022-04-13
Ref: https://rdap.arin.net/registry/ip/208.117.0.0
OrgName: Steadfast
OrgId: SNL-74
Address: 725 S Wells St
Address: 8th Floor
City: Chicago
StateProv: IL
PostalCode: 60607
Country: US
RegDate: 2016-02-04
Updated: 2024-11-25
Comment: Please submit all reports of abuse to
Comment: abuse@steadfast.net. Reports sent to
Comment: other addresses will not be processed.
Ref: https://rdap.arin.net/registry/entity/SNL-74
OrgAbuseHandle: COLOH-ARIN
OrgAbuseName: ColoHouse NetOps
OrgAbusePhone: +1-866-790-2656
OrgAbuseEmail: netops@colohouse.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/COLOH-ARIN
OrgTechHandle: NOG3-ARIN
OrgTechName: Steadfast Networks Network Operations Center
OrgTechPhone: +1-312-602-2689
OrgTechEmail: noc@steadfast.net
OrgTechRef: https://rdap.arin.net/registry/entity/NOG3-ARIN
OrgAbuseHandle: ABUSE959-ARIN
OrgAbuseName: Steadfast Networks Abuse Department
OrgAbusePhone: +1-312-602-2688
OrgAbuseEmail: abuse@steadfast.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE959-ARIN
OrgNOCHandle: COLOH-ARIN
OrgNOCName: ColoHouse NetOps
OrgNOCPhone: +1-866-790-2656
OrgNOCEmail: netops@colohouse.com
OrgNOCRef: https://rdap.arin.net/registry/entity/COLOH-ARIN
OrgNOCHandle: NOG3-ARIN
OrgNOCName: Steadfast Networks Network Operations Center
OrgNOCPhone: +1-312-602-2689
OrgNOCEmail: noc@steadfast.net
OrgNOCRef: https://rdap.arin.net/registry/entity/NOG3-ARIN
OrgTechHandle: COLOH-ARIN
OrgTechName: ColoHouse NetOps
OrgTechPhone: +1-866-790-2656
OrgTechEmail: netops@colohouse.com
OrgTechRef: https://rdap.arin.net/registry/entity/COLOH-ARIN
network:Class-Name:network
network:Auth-Area:208.117.0.0/18
network:ID:NET-48974.208.117.13.152
network:Network-Name:Public IP
network:IP-Network:208.117.13.152
network:IP-Network-Block:208.117.13.152
network:Org-Name:Steadfast
network:Street-Address:725 S Wells St., 8th Floor
network:City:Chicago
network:State:IL
network:Postal-Code:60607
network:Country-Code:US
network:Tech-Contact:MAINT-48974.208.117.13.152
network:Created:20210817162413000
network:Updated:20210923163513000
network:Updated-By:noc@steadfast.net
contact:POC-Name:Steadfast Networks Network Operations Center
contact:POC-Email:noc@steadfast.net
contact:POC-Phone:+1-312-602-2689
contact:Tech-Name:Steadfast Networks Network Operations Center
contact:Tech-Email:noc@steadfast.net
contact:Tech-Phone:+1-312-602-2689
contact:Abuse-Name:Steadfast Networks Abuse Department
contact:Abuse-Email:abuse@steadfast.net