94.102.49.190 Threat Intelligence and Host Information

Share on:

May 12, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 94.102.49.190 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 30/100

Host and Network Information

View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_net_ua, ciarmy, greensnow, packetmail
Country: Netherlands
Network:
Noticed: 50 times
Protcols Attacked: git rdp redis sip snmp
Passive DNS Results: shodan.blocked.exasol.com flower.census.shodan.io surabayaglowingfestival.com tvfunda.com www.hdstreams.tv mail.igoal.tv igoal.tv www.tvfunda.com www.igoal.tv soundt.mp3pk.com hdstreams.tv soundt.mp3slash.net dl.songspk.gift ns1.livedesi.tv ns2.livedesi.tv cast247.tv www.cast247.tv

Open Ports Detected

111 22 9002

Map

Whois Information

NetRange: 108.186.0.0 - 108.186.255.255
CIDR: 108.186.0.0/16
NetName: PT-82-9
NetHandle: NET-108-186-0-0-1
Parent: NET108 (NET-108-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: PEG TECH INC (PT-82)
RegDate: 2013-08-02
Updated: 2013-08-14
Ref: https://rdap.arin.net/registry/ip/108.186.0.0
OrgName: PEG TECH INC
OrgId: PT-82
Address: 55 South Market Street, Suite 320
City: San Jose
StateProv: CA
PostalCode: 95113
Country: US
RegDate: 2012-03-27
Updated: 2017-01-28
Ref: https://rdap.arin.net/registry/entity/PT-82
OrgNOCHandle: NOC12550-ARIN
OrgNOCName: NOC
OrgNOCPhone: +1-657-206-5036
OrgNOCEmail: [email protected]
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC12550-ARIN
OrgAbuseHandle: ABUSE3497-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-657-206-5036
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3497-ARIN
OrgTechHandle: NOC12550-ARIN
OrgTechName: NOC
OrgTechPhone: +1-657-206-5036
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/NOC12550-ARIN
NetRange: 108.186.172.0 - 108.186.172.63
CIDR: 108.186.172.0/26
NetName: 199-180-100-0-1
NetHandle: NET-108-186-172-0-1
Parent: PT-82-9 (NET-108-186-0-0-1)
NetType: Reassigned
OriginAS: AS54600
Customer: Qiu Wenwen (C05349326)
RegDate: 2014-09-29
Updated: 2014-09-29
Ref: https://rdap.arin.net/registry/ip/108.186.172.0
CustName: Qiu Wenwen
Address: Room 57 Guangxi Road Kunming City Yunnan Province
City: Kunming
StateProv: YUNNAN
PostalCode: 650000
Country: CN
RegDate: 2014-09-29
Updated: 2014-09-29
Ref: https://rdap.arin.net/registry/entity/C05349326
OrgNOCHandle: NOC12550-ARIN
OrgNOCName: NOC
OrgNOCPhone: +1-657-206-5036
OrgNOCEmail: [email protected]
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC12550-ARIN
OrgAbuseHandle: ABUSE3497-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-657-206-5036
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3497-ARIN
OrgTechHandle: NOC12550-ARIN
OrgTechName: NOC
OrgTechPhone: +1-657-206-5036
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/NOC12550-ARIN

Links to attack logs