198.144.191.144 - NovaSense Threat Feeds

Matched! This IP address is being blocked by NovaSense!

Botnet
Known botnet and C&C servers, these have responded with a valid botnet C2 response.

Threat
Threats are hosts that have attempted to exploit, brute force, or execute a denial of service attack. These are often compromised hosts.

Field	Value
SenseScore	66
IP Address	198.144.191.144
Hostname	N/A
Country	United States
ISP	ColoCrossing
Organization	ColoCrossing
Hosted By	ColoCrossing
Threat Type	botnets threats
Blocked Since	2021-01-05 23:25:25
Last Threat	2021-01-22 07:25:25

Field	Value
Intel: HTTP Server	None
Intel: Powered By	None
Intel: SSH Server	None

Field	Value
SENSE list (high risk)	Yes
SENSE list	Yes
RBL	Yes
One day public list	Yes
Seven day public list	Yes

Data	Category	Action
2021-01-18 00:10:02	Internal	Threat score opinion changed from 45 to 66.
2021-01-17 00:09:01	Internal	Threat score opinion changed from 66 to 45.
2021-01-16 00:10:12	Internal	Threat score opinion changed from 45 to 66.
2021-01-15 00:09:40	Internal	Threat score opinion changed from 66 to 45.
2021-01-12 00:13:48	Internal	Threat score opinion changed from 45 to 66.
2021-01-12 00:10:14	Internal	Threat score opinion changed from 96 to 100.
2021-01-10 00:12:17	Internal	Threat score opinion changed from 62 to 45.
2021-01-09 00:09:15	Internal	Threat score opinion changed from 45 to 62.
2021-01-09 00:04:35	Internal	Threat score opinion changed from 92 to 96.
2021-01-08 00:07:19	Internal	Threat score opinion changed from 53 to 45.
2021-01-07 00:06:54	Internal	Threat score opinion changed from 49 to 53.
2021-01-07 00:01:30	Internal	Threat score opinion changed from 83 to 92.
2021-01-06 00:11:26	Internal	Threat score opinion changed from 0 to 49.
2021-01-06 00:00:42	Internal	Threat score opinion changed from 70 to 83.
2021-01-05 23:25:25	Threats	Threat confirmation received.
2021-01-05 02:15:24	Probe	Discovered listed HTTP server: Cowboy
2021-01-05 02:15:24	Internal	Threat score opinion changed from 0 to 70.
2021-01-05 02:15:24	Probe	Discovered listed SSH daemon: SSH-2.0-OpenSSH_7.9p1 Debian-10+deb10u1
2021-01-05 02:15:19	Botnets	Botnet confirmation received.

You may enter an IP address to check if it is blocked on NovaSense. If you have an IP address which is incorrectly blocked you may then request an exception.

Snapt users: you may whitelist IP addresses on your ADC to immediately ignore matches in NovaSense.

UNSAFE 198.144.191.144

Threat Information

Threat Intelligence

Blocked In

Threat History

IP Lookup