112.78.179.42 Threat Intelligence and Host Information

Share on:

General

This page contains threat intelligence information for the IPv4 address 112.78.179.42 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 27/100

Host and Network Information

  • Tags: Nextray, cyber security, ioc, malicious, phishing
  • View other sources: Spamhaus VirusTotal

  • Country: Indonesia
  • Network: AS17451 biznet networks
  • Noticed: 1 times
  • Protcols Attacked: SSH
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: www.liberty-drive.com liberty-drive.com www.exoticsbudshop.com www.plutogamer.xyz plutogamer.xyz forum-libero.it-tractorum.com www.forum-libero.it-tractorum.com exoticsbudshop.com www.exoticsbudshop.pupsgreathome.com exoticsbudshop.pupsgreathome.com pearlgamer.com gameriron.com oriongamer.com buxcircle.com www.pupsgreathome.com gamerdart.com oriongamer.xyz gamervillas.xyz gamerultra.xyz gameriron.xyz buxstuff.co pupsgreathome.com online-security-commbank.com www.aib-servicesecurity.com axa.onlineblokkade.icu www.axa.onlineblokkade.icu kbcc.onlineblokkade.icu www.kbcc.onlineblokkade.icu bnp.onlineblokkade.icu www.bnp.onlineblokkade.icu argnta.onlineblokkade.icu www.argnta.onlineblokkade.icu www.belflus.onlineblokkade.icu belflus.onlineblokkade.icu bhr.onlineblokkade.icu www.bhr.onlineblokkade.icu lng.onlineblokkade.icu www.lng.onlineblokkade.icu alliedbanksireland.com aib-servicesecurity.com afs-pro.co www.afs-pro.co www.royalbet.gg royalbet.gg wallet-chain-link.com hsbcholdingsplc.com japan-system.net farmaceutisk.com www.farmaceutisk.com www.fastcounterdoc.com fastcounterdoc.com www.worldwidelaboratory.com carvana-logistik.com generalbkonline.com worldwidelaboratory.com maanssen.com.au www.nastatradingsgmbh.com nastatradingsgmbh.com arrmark.com www.eqx.nimbleinvests.com eqx.nimbleinvests.com www.sojpb.com htyrdetry5t6uyiuhy.com sojpb.com secretinvestingnews.com paypai.updated-now.com metamask-recover.com truthaboutcommunity.com secureuw.nimbleinvests.com www.secureuw.nimbleinvests.com walletconnects.ga www.walletconnects.ga www.updated-now.com updated-now.com www.nimbleinvests.com nimbleinvests.com

Map

Whois Information

  • inetnum: 112.78.128.0 - 112.78.191.255
  • netname: BIZNET-ID
  • descr: Biznet Networks
  • descr: Internet Service Provider
  • descr: Jakarta, Indonesia
  • country: ID
  • admin-c: AA590-AP
  • tech-c: AA590-AP
  • mnt-by: MNT-APJII-ID
  • mnt-lower: MAINT-ID-BIZNET
  • status: ALLOCATED PORTABLE
  • mnt-irt: IRT-BIZNET-ID
  • last-modified: 2021-07-09T08:50:36Z
  • irt: IRT-BIZNET-ID
  • address: Biznet Networks
  • address: Midplaza 2, 8th Floor
  • address: Jl. Jend Sudirman Kav 10-11
  • address: Jakarta 10220
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: AA590-AP
  • tech-c: AA590-AP
  • mnt-by: MAINT-ID-BIZNET
  • last-modified: 2023-03-09T03:52:58Z
  • person: Agus Ariyanto
  • nic-hdl: AA590-AP
  • e-mail: [email protected]
  • address: Midplaza 2, 8th Floor
  • address: Jl. Jend Sudirman Kav 10-11
  • address: Jakarta, Indonesia
  • phone: +62-21-57998888
  • fax-no: +62-21-5700580
  • country: ID
  • mnt-by: MAINT-ID-BIZNET
  • last-modified: 2008-09-04T07:54:14Z
  • inetnum: 112.78.179.32 - 112.78.179.63
  • netname: Biznet_Metronet
  • descr: Biznet Metronet
  • descr: Palembang
  • country: ID
  • admin-c: AA590-AP
  • tech-c: AA590-AP
  • status: ASSIGNED NON-PORTABLE
  • mnt-by: MAINT-ID-BIZNET
  • mnt-irt: IRT-BIZNET-ID
  • last-modified: 2023-04-21T07:08:01Z
  • irt: IRT-BIZNET-ID
  • address: Biznet Networks
  • address: Midplaza 2, 8th Floor
  • address: Jl. Jend Sudirman Kav 10-11
  • address: Jakarta 10220
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: AA590-AP
  • tech-c: AA590-AP
  • mnt-by: MAINT-ID-BIZNET
  • last-modified: 2017-10-24T02:31:22Z
  • person: Agus Ariyanto
  • nic-hdl: AA590-AP
  • e-mail: [email protected]
  • address: Midplaza 2, 8th Floor
  • address: Jl. Jend Sudirman Kav 10-11
  • address: Jakarta, Indonesia
  • phone: +62-21-57998888
  • fax-no: +62-21-5700580
  • country: ID
  • mnt-by: MAINT-ID-BIZNET
  • last-modified: 2008-09-04T07:54:14Z

Links to attack logs

bruteforce-ip-list-2021-07-06