23.239.22.248 Threat Intelligence and Host Information

Share on:
Jul 27, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 23.239.22.248 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 50/100

Host and Network Information

  • Tags: Nextray, TOR, VPN, cyber security, ioc, malicious, phishing, probing, scanning, webscan, webscanner bruteforce web app attack

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: dm_tor, et_tor, haley_ssh, sblam, tor_exits, tor_exits_1d, tor_exits_30d, tor_exits_7d

  • Country: United States
  • Network: AS63949 linode llc
  • Noticed: 1 times
  • Protcols Attacked: ssh
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: islandjournal.com workingwaterfrontarchives.org islandinstitute.org

Malware Detected on Host

Count: 10 b11e614cdd02aecb8d6ae65bf67bfac8cbefd68830065217e2cb48922743bb12 7282e2fdb25b07554b082f5cf1697315ed5ce3005f985cbe96a34da965869db5 7cf34eadb163afa46e8936bc8a37c38d51a646079d39897397ab6bd3fd527f9a eb5d9b1d6c60b8aec27b43fb1878d607242c2798fadb2c114bd343bc626b2cca 4b9c21d9da89c399832f18b4c9a2b4a32788937070b5494404a6e5b3d601a74b 4322f5477f23e04b4474091e6406c0aac5627e26d05fb5448e3fc5c28ff6dc14 2e66d07f6dc0aaaa247802ba12be12fc5904b0a23d6118c76718c3f84125b871 3052c3e6aa0aa895755e905acaacab8f72dfa55752f8bd2fd736e8fbd4c6298d 7be3b15f184c96d981d37bac297e38f30ff59dc0bfda81910aa9ad434fc1e6be 8ca0392a421283b00404a015034e1618ed8ac18b0b48bd8a2614966546338411

Open Ports Detected

22

Map

Whois Information

  • NetRange: 23.239.0.0 - 23.239.31.255
  • CIDR: 23.239.0.0/19
  • NetName: LINODE-US
  • NetHandle: NET-23-239-0-0-1
  • Parent: NET23 (NET-23-0-0-0-0)
  • NetType: Direct Allocation
  • OriginAS:
  • Organization: Akamai Technologies, Inc. (AKAMAI)
  • RegDate: 2013-10-23
  • Updated: 2022-12-14
  • Ref: https://rdap.arin.net/registry/ip/23.239.0.0
  • OrgName: Akamai Technologies, Inc.
  • OrgId: AKAMAI
  • Address: 145 Broadway
  • City: Cambridge
  • StateProv: MA
  • PostalCode: 02142
  • Country: US
  • RegDate: 1999-01-21
  • Updated: 2022-04-08
  • Ref: https://rdap.arin.net/registry/entity/AKAMAI
  • OrgTechHandle: IPADM11-ARIN
  • OrgTechName: ipadmin
  • OrgTechPhone: +1-617-444-0017
  • OrgTechEmail: [email protected]
  • OrgTechRef: https://rdap.arin.net/registry/entity/IPADM11-ARIN
  • OrgAbuseHandle: NUS-ARIN
  • OrgAbuseName: NOC United States
  • OrgAbusePhone: +1-617-444-2535
  • OrgAbuseEmail: [email protected]
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/NUS-ARIN
  • OrgTechHandle: SJS98-ARIN
  • OrgTechName: Schecter, Steven Jay
  • OrgTechPhone: +1-617-274-7134
  • OrgTechEmail: [email protected]
  • OrgTechRef: https://rdap.arin.net/registry/entity/SJS98-ARIN
  • RNOCHandle: LNO21-ARIN
  • RNOCName: Linode Network Operations
  • RNOCPhone: +1-609-380-7304
  • RNOCEmail: [email protected]
  • RNOCRef: https://rdap.arin.net/registry/entity/LNO21-ARIN
  • RTechHandle: LNO21-ARIN
  • RTechName: Linode Network Operations
  • RTechPhone: +1-609-380-7304
  • RTechEmail: [email protected]
  • RTechRef: https://rdap.arin.net/registry/entity/LNO21-ARIN
  • RAbuseHandle: LAS12-ARIN
  • RAbuseName: Linode Abuse Support
  • RAbusePhone: +1-609-380-7100
  • RAbuseEmail: [email protected]
  • RAbuseRef: https://rdap.arin.net/registry/entity/LAS12-ARIN
  • NetRange: 23.239.0.0 - 23.239.31.255
  • CIDR: 23.239.0.0/19
  • NetName: LINODE
  • NetHandle: NET-23-239-0-0-2
  • Parent: LINODE-US (NET-23-239-0-0-1)
  • NetType: Reassigned
  • OriginAS: AS63949
  • Organization: Linode (LINOD)
  • RegDate: 2022-12-21
  • Updated: 2022-12-21
  • Ref: https://rdap.arin.net/registry/ip/23.239.0.0
  • OrgName: Linode
  • OrgId: LINOD
  • Address: 249 Arch St
  • City: Philadelphia
  • StateProv: PA
  • PostalCode: 19106
  • Country: US
  • RegDate: 2008-04-24
  • Updated: 2022-12-15
  • Comment: http://www.linode.com
  • Ref: https://rdap.arin.net/registry/entity/LINOD
  • OrgNOCHandle: LNO21-ARIN
  • OrgNOCName: Linode Network Operations
  • OrgNOCPhone: +1-609-380-7304
  • OrgNOCEmail: [email protected]
  • OrgNOCRef: https://rdap.arin.net/registry/entity/LNO21-ARIN
  • OrgTechHandle: LNO21-ARIN
  • OrgTechName: Linode Network Operations
  • OrgTechPhone: +1-609-380-7304
  • OrgTechEmail: [email protected]
  • OrgTechRef: https://rdap.arin.net/registry/entity/LNO21-ARIN
  • OrgTechHandle: IPADM11-ARIN
  • OrgTechName: ipadmin
  • OrgTechPhone: +1-617-444-0017
  • OrgTechEmail: [email protected]
  • OrgTechRef: https://rdap.arin.net/registry/entity/IPADM11-ARIN
  • OrgAbuseHandle: LAS12-ARIN
  • OrgAbuseName: Linode Abuse Support
  • OrgAbusePhone: +1-609-380-7100
  • OrgAbuseEmail: [email protected]
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/LAS12-ARIN

Links to attack logs

aws-ssh-bruteforce-ip-list-2021-06-17