104.129.29.6 Threat Intelligence and Host Information

Sep 26, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 104.129.29.6 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 30/100

Host and Network Information

Tags: bruteforce, cyber security, digital ocean, ioc, malicious, Nextray, phishing, sip, vultr
View other sources: Spamhaus VirusTotal

Country: United States
Network: AS8100 quadranet enterprises llc
Noticed: 1 times
Protcols Attacked: sip
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Singapore, Spain, Turkey, Ukraine, United Kingdom, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: namoni.dynamic-dns.net qasa.dynamic-dns.net indi.dynamic-dns.net

Malware Detected on Host

Count: 9 6a2b5e2ea4bf523aa5ecf957459ddcdb9721859b8ba51f4e8c3b3036da1f9f89 c73ec254fe8d89bf8e1b48865e3770529296d3467068ba67fc2b58e13b1a4d07 e802e641db01862813ba545cac2b537a274cbfae6b24e862556067ab3d2793e8 5959977132a905e02e4df7960aef213dc4e43720fd51fc6811c3670f0e1d8de7 969b7acd1c0f73221630e7722dee27df381cefeb3ee1bd686236e4de33352969 32055c4749c8b9e77f8d6c24d814fbae5b70cc85c06e6777ba111251ef952932 5eec9b86b647f3aebd1444d8a5e84badd467ad20c708fc6f277e10ddd44a0844 4a6770e2e4edf4c539033c92a48183d6f94039193015216a6e184080ff09ead8 02038078e7b1bfc4c9ed60705fbebfe3b20287fa7bc453e375f952a33bd4ffc2

Map

Whois Information

NetRange: 104.129.0.0 - 104.129.63.255
CIDR: 104.129.0.0/18
NetName: QUADRANET
NetHandle: NET-104-129-0-0-1
Parent: NET104 (NET-104-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS8100
Organization: QuadraNet Enterprises LLC (QEL-5)
RegDate: 2014-06-02
Updated: 2015-10-15
Ref: https://rdap.arin.net/registry/ip/104.129.0.0
OrgName: QuadraNet Enterprises LLC
OrgId: QEL-5
Address: 530 W. 6th ST
City: Los Angeles
StateProv: CA
PostalCode: 90014
Country: US
RegDate: 2018-06-07
Updated: 2023-02-14
Ref: https://rdap.arin.net/registry/entity/QEL-5
OrgAbuseHandle: QUADR4-ARIN
OrgAbuseName: QuadraNet Abuse
OrgAbusePhone: +1-213-614-8371
OrgAbuseEmail: abuse@quadranet.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/QUADR4-ARIN
OrgTechHandle: QNO6-ARIN
OrgTechName: QuadraNet Network Operations
OrgTechPhone: +1-213-614-9371
OrgTechEmail: support@quadranet.com
OrgTechRef: https://rdap.arin.net/registry/entity/QNO6-ARIN

Links to attack logs

Share on: