1.6.3.1 Threat Intelligence and Host Information

Apr 07, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 1.6.3.1 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 37/100

Host and Network Information

Known tor exit node
View other sources: Spamhaus VirusTotal
Contained within other IP sets: b3b0, bitcoin_nodes_30d, blocklist_de, blocklist_de_ssh, blocklist_net_ua, botscout_1d, botscout_30d, botscout_7d, bruteforceblocker, ciarmy, cleantalk_30d, cleantalk_new_30d, cleantalk_updated_30d, cobaltstrike, coinbl_hosts, dm_tor, et_tor, greensnow, haley_ssh, hphosts_psh, lashback_ubl, maxmind_proxy_fraud, nixspam, normshield_all_wannacry, normshield_high_wannacry, nullsecure, packetmail, proxylists_1d, proxylists_30d, proxylists_7d, proxylists, proxyspy_30d, proxyspy_7d, sblam, socks_proxy_1d, socks_proxy_30d, socks_proxy_7d, socks_proxy, stopforumspam_180d, stopforumspam_1d, stopforumspam_30d, stopforumspam_365d, stopforumspam_7d, stopforumspam_90d, stopforumspam, tor_exits_1d, tor_exits_30d, tor_exits_7d, tor_exits, turris_greylist

Known TOR node
Country: India
Network: AS9583 sify limited
Noticed: 1 times
Protocols Attacked: Anonymous Proxy

Malware Detected on Host

Count: 2 1a5c12ad81440e25dca1eee86fd2f012dd18e2667d21ca64ae7134304e7022f0 db56725cb089a024fe3b3f0d288298c1427793a84a0d0bb2896de3491ef2058b

Map

Whois Information

inetnum: 1.6.0.0 - 1.7.255.255
netname: SIFYNET-IN
descr: Sify Limited
country: IN
admin-c: HS51-AP
tech-c: HS51-AP
mnt-by: MAINT-IN-IRINN
mnt-routes: MAINT-IN-SIFY
mnt-lower: MAINT-IN-SIFY
mnt-irt: IRT-SIFYNET-IN
status: ALLOCATED PORTABLE
last-modified: 2013-04-07T23:49:28Z
irt: IRT-SIFYNET-IN
address: Sify Limited,
address: Second Floor, Tidel Park,
address: No.4,Canal Bank Road,
address: Taramani, Chennai - 600113
e-mail: ipadmin@sifycorp.com
abuse-mailbox: abuse@sifycorp.com
admin-c: HS51-AP
tech-c: HS51-AP
mnt-by: MAINT-IN-SIFY
last-modified: 2016-05-03T02:36:44Z
person: Hostmaster Satyam Infoway
nic-hdl: HS51-AP
e-mail: ipadmin@sifycorp.com
address: Sify Limited,
address: Second Floor, Tidel Park,
address: No.4,Canal Bank Road,
address: Taramani, Chennai - 600113
phone: +91-44-22540770
fax-no: +91-44-22540771
country: IN
mnt-by: MAINT-IN-SIFY
last-modified: 2008-09-04T07:29:11Z
route: 1.6.3.0/24
descr: Sify IP address space
origin: AS9583
notify: rajesh.siddam@sifycorp.com
mnt-by: MAINT-IN-SIFY
mnt-routes: MAINT-IN-SIFY
last-modified: 2017-08-22T10:02:44Z

Links to attack logs

Share on: