89.163.148.96 Threat Intelligence and Host Information

Share on:

Jun 15, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 89.163.148.96 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 35/100

Host and Network Information

Mitre ATT&CK IDs: T1595 - Active Scanning
Tags: Malicious IP, Nextray, SIP, blacklist, botnet, bruteforce, cyber security, digital ocean, ioc, malicious, mirai, phishing, scan, scanning, sip, tcp, udp, vultr
View other sources: Spamhaus VirusTotal
Country: Germany
Network: AS24961 myloc managed it ag
Noticed: 1 times
Protcols Attacked: sip
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Singapore, Spain, Turkey, Ukraine, United Kingdom, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: www.mcmadv.net distromania.it ilcritico.it idcork.it birillone.it canidirazza.it ampelos.it guida-annunci.it voipmetric.it jmail.it cofapi.it cateringa.net domsi.eu immobiliareospedaletto.it frico.it pragmid.it illogical.it motorteam.it imdemdgroup.com articoliweb.tk www.bilingualstoryworld.com www.scuolaclick.it www.casavacanzeaglio.it gigaetna.it www.16pagine.it 16pagine.it www.insidevcode.eu randaprod.com www.randaprod.com tuttomotosrl.it www.tuttomotosrl.it gruppobellacapri.it www.gruppobellacapri.it www.alessandroscalas.it alessandroscalas.it www.zagami-immobiliare.it www.venerestore.it venerestore.it articolipermarmisti.com protezionecivilecittadigubbio.com dimensione-impianti.it www.studiomastropietro.it studiomastropietro.it www.sociologicamente.it consulenzaenergia.org olife.it www.benessereregenesis.com benessereregenesis.com aziendaagricolasgro.it www.bungy.it bungy.it www.pragmid.com www.molitaly.it molitaly.it smtransport.it forniturecappelli.com www.forniturecappelli.com jadcomputers.com g90.it tipicitaliani.it www.tipicitaliani.it bizziccari.it www.bizziccari.it 3dmodelling.it www.3dmodelling.it www.stefanoalberto.it stefanoalberto.it www.associazioneachilleardigo.it www.bologninicosta.com bologninicosta.com www.giusepperanieri.it giusepperanieri.it www.serenitaebenessere.com serenitaebenessere.com tuttohacking.it www.tuttohacking.it www.vivailamadonnina.it vivailamadonnina.it www.paolobtat2.com paolobtat2.com www.biergarten.it biergarten.it associazioneincontricantu.it www.vitolentini.com vitolentini.com www.lightprice.it lightprice.it www.molajoni.it molajoni.it fabioalbanese.it www.fabioalbanese.it www.giuseppepea.it giuseppepea.it autostradaperilcielo.com www.autostradaperilcielo.com www.francescomolmenti.com francescomolmenti.com www.chattersoft.it chattersoft.it barcelona.dalmorosfreshpastatogo.com www.dalmorosfreshpastatogo.com toronto.dalmorosfreshpastatogo.com www.protezionecivilecittadigubbio.com sociologicamente.it www.studioconserva.com studioconserva.com www.giuliafavaretto.it giuliafavaretto.it www.jadcomputers.com pragmid.com www.alessandrosester.it alessandrosester.it www.bioconsult.it bioconsult.it jotech.it www.pfxsolution.it pfxsolution.it ligecointernational.com www.progettoeambiente.it progettoeambiente.it www.ipilastri.it ipilastri.it www.guglielmoburletti.it guglielmoburletti.it www.bloggandosicilia.it mareeluna.it masseriamosti.net leggeredizioni.it www.telaggiustoexpress.it telaggiustoexpress.it www.mioambiente.it mioambiente.it www.villameraville.com zucshop.com wo0ds.com DAVIDECARRUS.COM girimarket.it insidevcode.eu gustavosabato.it hobbygame.org mcmadv.net villameraville.com associazioneachilleardigo.it tonidemuro.com www.kalamata.it bloggandosicilia.it vicisol.it kalamata.it utsanga.it dalmorosfreshpastatogo.com www.mininews.it www.pianodizonarmg2.it www.hobbygame.org www.gopgle.it www.danzesportsardegna.info danzesportsardegna.info TELAGGIUSTOEXPRESS.NET VERDUZZO.INFO TRADEMARKSOFFICE.INFO RICERCABREVETTI.COM SUPERSVAPOWEB.NET

Malware Detected on Host

Count: 1 390405b92fc7a8de13b82bf8ce7797a0038c58a242081a1705988c0ff41e0f4c

Open Ports Detected

22 80

CVEs Detected

CVE-2018-16843 CVE-2018-16844 CVE-2018-16845 CVE-2019-20372 CVE-2019-9511 CVE-2019-9513 CVE-2019-9516 CVE-2021-23017 CVE-2021-3618

Map

Whois Information

inetnum: 89.163.128.0 - 89.163.255.255
netname: DE-MYLOC-DUS-20060217
country: DE
org: ORG-MMIA3-RIPE
admin-c: MOPS-RIPE
tech-c: MOPS-RIPE
status: ALLOCATED PA
mnt-by: MYLOC-MNT
mnt-by: RIPE-NCC-HM-MNT
created: 2020-11-04T10:31:12Z
last-modified: 2020-11-04T10:31:12Z
organisation: ORG-MMIA3-RIPE
org-name: myLoc managed IT AG
country: DE
org-type: LIR
address: Am Gatherhof 44
address: 40472
address: Düsseldorf
address: GERMANY
phone: +4921161708110
fax-no: +4921161708111
admin-c: MOPS-RIPE
tech-c: MOPS-RIPE
abuse-c: MOPS-RIPE
mnt-ref: MYLOC-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: MYLOC-MNT
created: 2019-10-28T10:48:29Z
last-modified: 2021-02-09T10:11:49Z
role: myLoc NOC
address: myLoc managed IT AG
address: Network Operations & Services
address: Am Gatherhof 44
address: 40472 Duesseldorf DE
admin-c: PHAN
tech-c: PHAN
tech-c: DDO
tech-c: JOH
tech-c: NIL
tech-c: STH
tech-c: KT3550-RIPE
nic-hdl: MOPS-RIPE
abuse-mailbox: [email protected]
mnt-by: MYLOC-MNT
created: 2013-02-11T16:38:10Z
last-modified: 2022-07-08T14:48:44Z
route: 89.163.128.0/17
descr: myLoc managed IT AG
origin: AS24961
mnt-by: MYLOC-MNT
created: 2017-02-02T17:04:51Z
last-modified: 2017-02-02T17:06:25Z

Links to attack logs