61.19.125.2 Threat Intelligence and Host Information

Share on:

Dec 21, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 61.19.125.2 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 55/100

Host and Network Information

Mitre ATT&CK IDs: T1046 - Network Service Scanning, T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110.004 - Credential Stuffing, T1110 - Brute Force
Tags: attack, brute force, Bruteforce, Brute-Force, cowrie, cyber security, ioc, login, malicious, Nextray, phishing, rdp, scanner, snort, ssh, SSH, Telnet
View other sources: Spamhaus VirusTotal
Contained within other IP sets: haley_ssh
Country: Thailand
Network: AS9931 the communication authority of thailand
Noticed: 1 times
Protcols Attacked: ssh
Countries Attacked: Australia, Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: it.rtu.ac.th

Open Ports Detected

123 161 22 23

CVEs Detected

CVE-2019-12660 CVE-2019-1649 CVE-2019-1950 CVE-2020-3225 CVE-2020-3229 CVE-2020-3417 CVE-2020-3425 CVE-2020-3444 CVE-2020-3516 CVE-2021-1223 CVE-2021-1224 CVE-2021-1236 CVE-2021-1352 CVE-2021-1374 CVE-2021-1376 CVE-2021-1377 CVE-2021-1382 CVE-2021-1384 CVE-2021-1390 CVE-2021-1391 CVE-2021-1398 CVE-2021-1403 CVE-2021-1435 CVE-2021-1442 CVE-2021-1443 CVE-2021-1446 CVE-2021-1453 CVE-2021-1611 CVE-2021-1616 CVE-2021-1619 CVE-2021-1620 CVE-2021-1621 CVE-2021-1622 CVE-2021-1623 CVE-2021-1624 CVE-2021-1625 CVE-2021-34696 CVE-2021-34699 CVE-2021-34703 CVE-2021-34705 CVE-2021-34729 CVE-2021-34767 CVE-2022-20679 CVE-2022-20683 CVE-2022-20684 CVE-2022-20692 CVE-2022-20694 CVE-2022-20718 CVE-2022-20719 CVE-2022-20720 CVE-2022-20721 CVE-2022-20722 CVE-2022-20723 CVE-2022-20724 CVE-2022-20725 CVE-2022-20727 CVE-2023-20027 CVE-2023-20033 CVE-2023-20056 CVE-2023-20076 CVE-2023-20080 CVE-2023-20082 CVE-2023-20097 CVE-2023-20109 CVE-2023-20186 CVE-2023-20187 CVE-2023-20227

Map

Whois Information

inetnum: 61.19.64.0 - 61.19.127.255
netname: CAT-ISP-NET
descr: 72 Charoenkrung Road Bangrak Bangkok THAILAND 10501
country: TH
admin-c: TC476-AP
tech-c: IC174-AP
abuse-c: AC1657-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-TH-THIX-CAT
mnt-irt: IRT-CAT-TH
last-modified: 2021-01-27T22:15:27Z
irt: IRT-CAT-TH
address: National Telecom Public Company Limited (CAT)
address: NT Tower Bangkok Bangkok 10500
address: Thailand
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: TC476-AP
tech-c: IC174-AP
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2023-12-06T04:03:03Z
role: ABUSE CATTH
address: National Telecom Public Company Limited (CAT)
address: NT Tower Bangkok Bangkok 10500
address: Thailand
country: ZZ
phone: +000000000
e-mail: [email protected]
admin-c: TC476-AP
tech-c: IC174-AP
nic-hdl: AC1657-AP
abuse-mailbox: [email protected]
mnt-by: APNIC-ABUSE
last-modified: 2023-12-06T04:10:30Z
person: IP-network CAT Telecom
nic-hdl: IC174-AP
e-mail: [email protected]
address: Data Comm. Dept. National Telecom Public Company Limited
address: NT Tower
address: 72 Charoenkrung Road Bangrak Bangkok THAILAND 10501
phone: +66-2-6142374
fax-no: +66-2-6142270
country: TH
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2022-09-05T09:44:01Z
person: THIX network staff CAT Telecom
nic-hdl: TC476-AP
e-mail: [email protected]
address: Data Comm. Dept. National Telecom Public Company Limited
address: NT Tower
address: 72 Charoenkrung Road Bangrak Bangkok THAILAND 10501
phone: +66-2-6142374
fax-no: +66-2-6142270
country: TH
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2022-09-05T09:49:38Z
route: 61.19.125.0/24
origin: AS9931
descr: CAT Telecom Public Company Limited
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2023-10-02T03:26:08Z

Links to attack logs