43.228.157.28 Threat Intelligence - Pakistan | IP Address Lookup
ipinfopage
Share on:
General
IP Address
43.228.157.28
Location
🇵🇰 Pakistan
Network
AS205759
Threat Score
29/100
Attack Intelligence
MITRE ATT&CK Techniques
T1140 - Deobfuscate/Decode Files or Information
Noticed
2 times
Protocols Attacked
webshell
Passive DNS
www.mediaremoval.shop
Geographic Location
Country
Pakistan
City
Unknown
Region
Unknown
Coordinates
30.0000, 70.0000
Network Information
ASN
AS205759
Organization
Ghosty Networks LLC
Network
AS205759 Ghosty Networks LLC
WHOIS Information
inetnum
43.228.157.0 - 43.228.157.255
netname
Cyber-Security-SG
descr
Cyber-Security-SG
country
SG
admin-c
MK1176-AP
tech-c
MK1176-AP
abuse-c
AG1070-AP
status
ASSIGNED NON-PORTABLE
mnt-by
MAINT-GZSYSTEMS-HK
mnt-irt
IRT-GZSYSTEMS-HK
last-modified
2021-02-16T13:09:51Z
irt
IRT-GZSYSTEMS-HK
address
36/F, Tower Two, Times Square, 1 Matheson Street, Causeway Bay, Hong Kong
e-mail
abuse@solidserver.io
abuse-mailbox
abuse@solidserver.io
role
ABUSE GZSYSTEMSHK
phone
+000000000
nic-hdl
AG1070-AP
person
Masha Kashi
route
43.228.157.0/24
origin
AS403005
Attack Logs
| Date | Target Location | Protocol | Link |
|---|---|---|---|
| 2026-10-24 | Webexploit Webshell Filename Probe Ip List 2026 10 24 | Multiple | View Log |
| 2026-09-08 | Webexploit Webshell Filename Probe Ip List 2026 09 08 | Multiple | View Log |
Disclaimer
This page contains threat intelligence information for the IPv4 address 43.228.157.28 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only, and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.