208.98.146.211 Threat Intelligence and Host Information

ipinfopage

General

This page contains threat intelligence information for the IPv4 address 208.98.146.211 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

🟡 Low Risk — 40/100

Geographic Location

Host and Network Information

View other sources: Spamhaus VirusTotal Shodan AbuseIPDB
Country: United States
Noticed: 6 times
Protocols Attacked: SSH
Tor Node: No

MITRE ATT&CK TTPs

T1078 - Valid Accounts
T1083 - File and Directory Discovery
T1098.004 - SSH Authorized Keys
T1105 - Ingress Tool Transfer
T1110.004 - Credential Stuffing
T1110 - Brute Force

Attack Log References

bruteforce-ip-list-2023-06-30

Whois Information

NetRange: 208.98.128.0 - 208.98.191.255 CIDR: 208.98.128.0/18 NetName: SYRINGANETWORKS NetHandle: NET-208-98-128-0-1 Parent: NET208 (NET-208-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: Syringa Networks, LLC (SYRI) RegDate: 2006-02-07 Updated: 2012-03-02 Ref: https://rdap.arin.net/registry/ip/208.98.128.0 OrgName: Syringa Networks, LLC OrgId: SYRI Address: 3795 S. Development Ave. City: Boise StateProv: ID PostalCode: 83705 Country: US RegDate: 2002-08-20 Updated: 2022-11-29 Comment: www.syringanetworks.net Ref: https://rdap.arin.net/registry/entity/SYRI OrgNOCHandle: NOC11875-ARIN OrgNOCName: Network Operations Center OrgNOCPhone: +1-800-454-7214 OrgNOCEmail: noc@syringanetworks.net OrgNOCRef: https://rdap.arin.net/registry/entity/NOC11875-ARIN OrgTechHandle: HOSTM1669-ARIN OrgTechName: Hostmaster OrgTechPhone: +1-208-229-6100 OrgTechEmail: hostmaster@syringanetworks.net OrgTechRef: https://rdap.arin.net/registry/entity/HOSTM1669-ARIN OrgAbuseHandle: ABUSE1644-ARIN OrgAbuseName: Abuse OrgAbusePhone: +1-208-229-6100 OrgAbuseEmail: abuse@syringanetworks.net OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1644-ARIN RAbuseHandle: ABUSE1644-ARIN RAbuseName: Abuse RAbusePhone: +1-208-229-6100 RAbuseEmail: abuse@syringanetworks.net RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1644-ARIN RTechHandle: HOSTM1669-ARIN RTechName: Hostmaster RTechPhone: +1-208-229-6100 RTechEmail: hostmaster@syringanetworks.net RTechRef: https://rdap.arin.net/registry/entity/HOSTM1669-ARIN RNOCHandle: NOC11875-ARIN RNOCName: Network Operations Center RNOCPhone: +1-800-454-7214 RNOCEmail: noc@syringanetworks.net RNOCRef: https://rdap.arin.net/registry/entity/NOC11875-ARIN NetRange: 208.98.146.0 - 208.98.147.255 CIDR: 208.98.146.0/23 NetName: NETBLK-FILER-MUT-TEL-208-98-146-0-23 NetHandle: NET-208-98-146-0-1 Parent: SYRINGANETWORKS (NET-208-98-128-0-1) NetType: Reassigned OriginAS: Organization: Filer Mutual Telephone Company (FMT-15) RegDate: 2006-08-08 Updated: 2009-02-26 Ref: https://rdap.arin.net/registry/ip/208.98.146.0 OrgName: Filer Mutual Telephone Company OrgId: FMT-15 Address: 400 Main Street. City: Filer StateProv: ID PostalCode: 83328 Country: US RegDate: 2001-04-20 Updated: 2024-11-25 Ref: https://rdap.arin.net/registry/entity/FMT-15 OrgNOCHandle: NETWO8493-ARIN OrgNOCName: Network Administrators OrgNOCPhone: +1-208-326-4331 OrgNOCEmail: it@truleap.net OrgNOCRef: https://rdap.arin.net/registry/entity/NETWO8493-ARIN OrgTechHandle: NETWO8493-ARIN OrgTechName: Network Administrators OrgTechPhone: +1-208-326-4331 OrgTechEmail: it@truleap.net OrgTechRef: https://rdap.arin.net/registry/entity/NETWO8493-ARIN OrgTechHandle: NDW1-ARIN OrgTechName: Wilson, Nicholas Dean OrgTechPhone: +1-208-326-0112 OrgTechEmail: nwilson@truleap.net OrgTechRef: https://rdap.arin.net/registry/entity/NDW1-ARIN OrgNOCHandle: NDW1-ARIN OrgNOCName: Wilson, Nicholas Dean OrgNOCPhone: +1-208-326-0112 OrgNOCEmail: nwilson@truleap.net OrgNOCRef: https://rdap.arin.net/registry/entity/NDW1-ARIN OrgAbuseHandle: NDW1-ARIN OrgAbuseName: Wilson, Nicholas Dean OrgAbusePhone: +1-208-326-0112 OrgAbuseEmail: nwilson@truleap.net OrgAbuseRef: https://rdap.arin.net/registry/entity/NDW1-ARIN OrgAbuseHandle: NETWO8493-ARIN OrgAbuseName: Network Administrators OrgAbusePhone: +1-208-326-4331 OrgAbuseEmail: it@truleap.net OrgAbuseRef: https://rdap.arin.net/registry/entity/NETWO8493-ARIN RTechHandle: TRE81-ARIN RTechName: Reusser, Tony RTechPhone: +1-208-326-0112 RTechEmail: nwilson@filertel.net RTechRef: https://rdap.arin.net/registry/entity/TRE81-ARIN