107.178.129.242 Threat Intelligence and Host Information

Feb 07, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 107.178.129.242 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 20/100

Host and Network Information

  • Country: United States
  • Network: AS26658 ht
  • Noticed: 1 times
  • Protocols Attacked: SSH
  • Passive DNS Results: groolia.com www.jobsburbank.com jobsburbank.com dyjrwhq.com

Open Ports Detected

10134 10554 111 1311 135 14265 1433 14344 1515 1521 1741 175 1911 1935 2000 2082 21 2375 2404 2480 2761 2762 3000 3001 3260 3306 3388 37215 3749 37777 4000 4157 427 43 5222 52869 5357 5555 5601 5800 5985 60001 6664 6668 7415 7474 7547 7779 7989 80 8010 8086 8087 8090 8123 8291 8334 8554 88 9009 9042 9080 9418 9595 9633 9800 9869 9876 9944 9981 9999

CVEs Detected

CVE-2015-9253 CVE-2017-7272 CVE-2017-7963 CVE-2017-9120 CVE-2018-19395 CVE-2018-19396 CVE-2019-9020 CVE-2019-9021 CVE-2019-9022 CVE-2019-9023 CVE-2019-9024 CVE-2019-9637 CVE-2019-9638 CVE-2019-9639 CVE-2019-9641 CVE-2019-9675 CVE-2022-31628 CVE-2022-31629

Map

Whois Information

Links to attack logs

****** ****** ******

Share on: