143.198.112.191

Classification: Malicious

143.198.112.191 is a malicious IP address in North Bergen, US. Linked to Responder malware. 60 sightings from 4 threat sources, last seen 2026-10-18.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

MITRE ATT&CK associations

Malware families: RESPONDER (S0174)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
ET CINS Active Threat Intelligence Poor Reputation IP UDP Emerging Threats 2026-10-17 11:13:11 2026-10-18 11:13:40 malicious-activity
ET CINS Active Threat Intelligence Poor Reputation IP TCP Emerging Threats 2026-10-18 11:13:38 2026-10-18 11:13:38 malicious-activity
Malicious Host CIArmy 2026-10-16 20:03:25 2026-10-16 20:03:25 attacker malicious-activity
Responder ThreatFox Abuse.ch 2024-02-24 07:17:03 2024-02-26 06:17:31 malicious-activity S0174 Responder
Unknown malware ThreatFox Abuse.ch 2023-10-25 20:18:02 2023-10-27 19:25:59 malicious-activity
Mail Spammer Abuseat.org 2023-10-25 20:18:03 2023-10-25 20:18:03

Tags

c2 censys digitalocean-asn interactsh interactsh-http port:443 port:80 interactsh-smtp port:10001 port:10004 responder port:445 spiderlabs responder

Whois information

AS name
AS14061 Digitalocean, LLC
AS registry
arin
AS date
2020-01-24 00:00:00
AS CIDR
143.198.112.0/20
CIDR
143.198.0.0/16
Registrant
Digitalocean, LLC
Address
101 Ave of the Americas FL2
City
North Bergen
State
NJ
Postal code
07047
Country
US — United States 🇺🇸
Contact email
[email protected], [email protected]
First indexed
2023-10-25 20:18:02
Last updated
2026-10-18 11:13:59

Malicious IPs in the same CIDR

143.198.123.71 143.198.116.137 143.198.119.177 143.198.112.191 143.198.121.112 143.198.125.213 143.198.113.176 143.198.119.126 143.198.125.170 143.198.115.192 143.198.119.39 143.198.122.32 143.198.122.35 143.198.120.56 143.198.123.229 143.198.118.191 143.198.114.230 143.198.120.133