216.107.129.116 Threat Intelligence and Host Information
General
This page contains threat intelligence information for the IPv4 address 216.107.129.116 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.
Potentially Malicious Host 🟡 37/100
Host and Network Information
-
Tags: cyber security, ioc, malicious, Nextray, phishing
-
View other sources: Spamhaus VirusTotal
- Country: United States
- Network:
- Noticed: 29 times
- Protocols Attacked: mssql
- Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Open Ports Detected
1153 1188 1190 1200 20182 22103 25084 7001 7025 7071 7078 7085 7272 7283 7302 7348 7403 7415 7434 7443 7474 7547 7548 7657 7676 7687 7777 7778 7779 7790 7799 7801 7979 8000 8001 8008 8009 8013 8014 8025 8030 8032 8042 8044 8052 8057 8060 8078 8080 8085 8089 8090 8098 8099 8109 8119 8123 8126 8127 8139 8140 8153 8169 8173 8177 8180 8181 8185 8186 8187 8188 8189 8197 8200 8291 8318 8333 8381 8403 8420 8426 8429 8430 8433 8434 8435 8440 8443 8444 8445 8446 8454 8457 8466 8500 8504 8505 8510 8513 8520 8532 8545 8553 8554 8561 8592 8595 8602 8649 8688 8700 8701 8703 8704 8707 8728 8764 8788 8789 8800 8801 8806 8813 8815 8822 8824 8826 8828 8829 8834 8836 8840 8843 8844 8847 8871 8879 8880 8888 8889 8899 8902 8980 8990 9000 9002 9009 9021 9029 9031 9043 9045 9046 9049 9050 9051 9055 9057 9067 9068 9075 9079 9082 9085 9087 9090 9092 9095 9096 9100 9102 9106 9112 9114 9120 9128 9132 9135 9144 9146 9151 9154 9158 9160 9182 9191 9199 9200 9205 9206 9223 9226 9283 9291 9299 9300 9306 9308 9310 9313 9418 9443 9530 9550 9595 9600 9633 9658 9674 9761 9773 9802 9898 9929 9930 9943 9944 9955 9966 9977 9981 9998
Map
Whois Information
- NetRange: 216.107.128.0 - 216.107.143.255
- CIDR: 216.107.128.0/20
- NetName: CAC-BLOCK44
- NetHandle: NET-216-107-128-0-1
- Parent: NET216 (NET-216-0-0-0-0)
- NetType: Direct Allocation
- OriginAS:
- Organization: Colocation America Corporation (CAC-89)
- RegDate: 2022-07-01
- Updated: 2024-08-26
- Ref: https://rdap.arin.net/registry/ip/216.107.128.0
- OrgName: Colocation America Corporation
- OrgId: CAC-89
- Address: 9360 W Flamingo Rd Suite 178
- City: Las Vegas
- StateProv: NV
- PostalCode: 89147
- Country: US
- RegDate: 2005-04-06
- Updated: 2024-08-26
- Comment: Colocation America takes a zero tolerance approach to the sending of Unsolicited Commercial Email or SPAM over its network.
- Comment:
- Comment: For all inquiries relating to network abuse, network security, DMCA, trademark, legal compliance, and law enforcement requests, contact Abuse@ColocationAmerica.com via e-mail or via postal mail as follow:
- Comment:
- Comment: Colocation America Corp.
- Comment: 9360 W. Flamingo Rd.
- Comment: Suite 178
- Comment: Las Vegas, NV 89147
- Ref: https://rdap.arin.net/registry/entity/CAC-89
- OrgNOCHandle: NOC1792-ARIN
- OrgNOCName: Network Operations Center
- OrgNOCPhone: +1-800-296-8915
- OrgNOCEmail: noc@colocationamerica.com
- OrgNOCRef: https://rdap.arin.net/registry/entity/NOC1792-ARIN
- OrgTechHandle: NOC1792-ARIN
- OrgTechName: Network Operations Center
- OrgTechPhone: +1-800-296-8915
- OrgTechEmail: noc@colocationamerica.com
- OrgTechRef: https://rdap.arin.net/registry/entity/NOC1792-ARIN
- OrgAbuseHandle: ABUSE7705-ARIN
- OrgAbuseName: Abuse
- OrgAbusePhone: +1-800-296-8915
- OrgAbuseEmail: Abuse@colocationamerica.com
- OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE7705-ARIN
- NetRange: 216.107.128.0 - 216.107.131.255
- CIDR: 216.107.128.0/22
- NetName: IPXO
- NetHandle: NET-216-107-128-0-2
- Parent: CAC-BLOCK44 (NET-216-107-128-0-1)
- NetType: Reallocated
- OriginAS: AS834
- Organization: IPXO LLC (IL-845)
- RegDate: 2022-07-13
- Updated: 2022-07-13
- Ref: https://rdap.arin.net/registry/ip/216.107.128.0
- OrgName: IPXO LLC
- OrgId: IL-845
- Address: 3132 State Street
- City: Dallas
- StateProv: TX
- PostalCode: 75204-3500
- Country: US
- RegDate: 2021-03-25
- Updated: 2023-10-10
- Comment: Geofeed https://geofeed.ipxo.com/geofeed.txt
- Ref: https://rdap.arin.net/registry/entity/IL-845
- OrgTechHandle: IST36-ARIN
- OrgTechName: IPXO Support Team
- OrgTechPhone: +1 (650) 564-3425
- OrgTechEmail: support@ipxo.com
- OrgTechRef: https://rdap.arin.net/registry/entity/IST36-ARIN
- OrgDNSHandle: IST36-ARIN
- OrgDNSName: IPXO Support Team
- OrgDNSPhone: +1 (650) 564-3425
- OrgDNSEmail: support@ipxo.com
- OrgDNSRef: https://rdap.arin.net/registry/entity/IST36-ARIN
- OrgAbuseHandle: IAMT1-ARIN
- OrgAbuseName: IPXO Abuse Management Team
- OrgAbusePhone: +1 (650) 934-1667
- OrgAbuseEmail: abuse@ipxo.com
- OrgAbuseRef: https://rdap.arin.net/registry/entity/IAMT1-ARIN
- NetRange: 216.107.128.0 - 216.107.131.255
- CIDR: 216.107.128.0/22
- NetName: NETUTILS
- NetHandle: NET-216-107-128-0-3
- Parent: IPXO (NET-216-107-128-0-2)
- NetType: Reallocated
- OriginAS:
- Organization: Internet Utilities NA LLC (DCL-577)
- RegDate: 2025-01-07
- Updated: 2025-01-07
- Ref: https://rdap.arin.net/registry/ip/216.107.128.0
- OrgName: Internet Utilities NA LLC
- OrgId: DCL-577
- Address: 2711 Centerville Road
- City: Wilmington
- StateProv: DE
- PostalCode: 19808
- Country: US
- RegDate: 2015-11-18
- Updated: 2024-08-23
- Ref: https://rdap.arin.net/registry/entity/DCL-577
- OrgAbuseHandle: IUA-ARIN
- OrgAbuseName: Internet Utilities Abuse
- OrgAbusePhone: +1-650-934-1667
- OrgAbuseEmail: report@abuseradar.com
- OrgAbuseRef: https://rdap.arin.net/registry/entity/IUA-ARIN
- OrgTechHandle: IUS-ARIN
- OrgTechName: Internet Utilities Support
- OrgTechPhone: +1-650-564-3425
- OrgTechEmail: support@netutils.io
- OrgTechRef: https://rdap.arin.net/registry/entity/IUS-ARIN
Links to attack logs
****** vultrparis-mssql-bruteforce-ip-list-2021-10-31 ****** ******
Share on: