23.30.243.21 Threat Intelligence and Host Information

Share on:

May 18, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 23.30.243.21 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 57/100

Host and Network Information

Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110 - Brute Force, T1110.004 - Credential Stuffing
Tags: Bruteforce, Malicious IP, Nextray, Port scan, UK, aws, blacklist, botnet, bruteforce, cowrie, cyber security, digital ocean, initiator ip, ioc, malicious, mirai, phishing, scan, scanners, ssh, tcp, telnet, vultr
View other sources: Spamhaus VirusTotal
Country: United States
Network: AS7922 comcast
Noticed: 28 times
Protcols Attacked: ssh telnet
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Singapore, Spain, Turkey, Ukraine, United Kingdom, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 2 584aaf9d2fc272a82bbe67f72ae3cd0e12eb2619f4699269076bfdc2820a8f4c fb19937f856ef8112e79548fd890f61f52bce8b0aff12a782843a6b0be68d025

Open Ports Detected

23 3000 3001 554

Map

Whois Information

NetRange: 23.30.0.0 - 23.31.255.255
CIDR: 23.30.0.0/15
NetName: CBC-CM-4
NetHandle: NET-23-30-0-0-1
Parent: NET23 (NET-23-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS7922
Organization: Comcast Cable Communications, LLC (CCCS)
RegDate: 2012-04-30
Updated: 2021-01-25
Ref: https://rdap.arin.net/registry/ip/23.30.0.0
OrgName: Comcast Cable Communications, LLC
OrgId: CCCS
Address: 1800 Bishops Gate Blvd
City: Mt Laurel
StateProv: NJ
PostalCode: 08054
Country: US
RegDate: 2001-09-18
Updated: 2020-11-18
Ref: https://rdap.arin.net/registry/entity/CCCS
OrgTechHandle: IC161-ARIN
OrgTechName: Comcast Cable Communications Inc
OrgTechPhone: +1-856-792-2300
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/IC161-ARIN
OrgAbuseHandle: NAPO-ARIN
OrgAbuseName: Network Abuse and Policy Observance
OrgAbusePhone: +1-888-565-4329
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/NAPO-ARIN
OrgRoutingHandle: ROUTI25-ARIN
OrgRoutingName: Routing
OrgRoutingPhone: +1-856-792-2300
OrgRoutingEmail: [email protected]
OrgRoutingRef: https://rdap.arin.net/registry/entity/ROUTI25-ARIN
NetRange: 23.30.224.0 - 23.30.255.255
CIDR: 23.30.224.0/19
NetName: CBC-MINNESOTA-20
NetHandle: NET-23-30-224-0-1
Parent: CBC-CM-4 (NET-23-30-0-0-1)
NetType: Reallocated
OriginAS:
Organization: Comcast Cable Communications, LLC (CCCS)
RegDate: 2012-10-02
Updated: 2017-11-01
Ref: https://rdap.arin.net/registry/ip/23.30.224.0
OrgName: Comcast Cable Communications, LLC
OrgId: CCCS
Address: 1800 Bishops Gate Blvd
City: Mt Laurel
StateProv: NJ
PostalCode: 08054
Country: US
RegDate: 2001-09-18
Updated: 2020-11-18
Ref: https://rdap.arin.net/registry/entity/CCCS
OrgTechHandle: IC161-ARIN
OrgTechName: Comcast Cable Communications Inc
OrgTechPhone: +1-856-792-2300
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/IC161-ARIN
OrgAbuseHandle: NAPO-ARIN
OrgAbuseName: Network Abuse and Policy Observance
OrgAbusePhone: +1-888-565-4329
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/NAPO-ARIN
OrgRoutingHandle: ROUTI25-ARIN
OrgRoutingName: Routing
OrgRoutingPhone: +1-856-792-2300
OrgRoutingEmail: [email protected]
OrgRoutingRef: https://rdap.arin.net/registry/entity/ROUTI25-ARIN
NetRange: 23.30.243.16 - 23.30.243.31
CIDR: 23.30.243.16/28
NetName: HARVESTPREPARATORY
NetHandle: NET-23-30-243-16-1
Parent: CBC-MINNESOTA-20 (NET-23-30-224-0-1)
NetType: Reassigned
OriginAS:
Customer: HARVEST PREPARATORY (C03302258)
RegDate: 2013-02-03
Updated: 2013-12-07
Ref: https://rdap.arin.net/registry/ip/23.30.243.16
CustName: HARVEST PREPARATORY
Address: 1 Unavailable Street
City: MINNEAPOLIS
StateProv: MN
PostalCode: 55411
Country: US
RegDate: 2013-02-03
Updated: 2017-11-01
Ref: https://rdap.arin.net/registry/entity/C03302258
OrgTechHandle: IC161-ARIN
OrgTechName: Comcast Cable Communications Inc
OrgTechPhone: +1-856-792-2300
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/IC161-ARIN
OrgAbuseHandle: NAPO-ARIN
OrgAbuseName: Network Abuse and Policy Observance
OrgAbusePhone: +1-888-565-4329
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/NAPO-ARIN
OrgRoutingHandle: ROUTI25-ARIN
OrgRoutingName: Routing
OrgRoutingPhone: +1-856-792-2300
OrgRoutingEmail: [email protected]
OrgRoutingRef: https://rdap.arin.net/registry/entity/ROUTI25-ARIN

Links to attack logs