125.99.46.47 Threat Intelligence and Host Information

Apr 24, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 125.99.46.47 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 70/100

Host and Network Information

Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110.004 - Credential Stuffing, T1110 - Brute Force
Tags: Bruteforce, Brute-Force, cowrie, cyber security, ioc, malicious, Nextray, phishing, ssh, SSH
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_net_ua, haley_ssh

Country: India
Network:
Noticed: 50 times
Protocols Attacked: ssh
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: junit1.clouzerindia.com

Malware Detected on Host

Count: 1 4b84e75d5a11eb3c600798b73d46ee616af9ae4566e812c4440a600ef3fde3e0

Open Ports Detected

10020 10030 111 123 16000 2049 2181 22 2379 5000 60010 80 8019 8020 8090 8443 8445 8480 8485 85 8888 9000 9001 9002 9200 9300

CVEs Detected

CVE-2016-10735 CVE-2018-14040 CVE-2018-14042 CVE-2018-20676 CVE-2018-20677 CVE-2019-11358 CVE-2019-8331 CVE-2020-11022 CVE-2020-11023 CVE-2021-23017 CVE-2021-3618 CVE-2023-26048 CVE-2023-26049 CVE-2023-31417 CVE-2023-31418 CVE-2023-31419 CVE-2023-36478 CVE-2023-36479 CVE-2023-40167 CVE-2023-41900 CVE-2023-44487 CVE-2023-46673 CVE-2023-46674 CVE-2023-49921 CVE-2024-22201 CVE-2024-23444 CVE-2024-23450 CVE-2024-23897 CVE-2024-43709 CVE-2024-6484 CVE-2024-6762 CVE-2024-6763 CVE-2024-8184

Map

Whois Information

inetnum: 125.99.0.0 - 125.99.255.255
netname: HATHWAY-NET
descr: HATHWAY CABLE AND DATACOM LIMITED
country: IN
org: ORG-HCAD1-AP
admin-c: VM14-AP
tech-c: VM14-AP
abuse-c: AH1250-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-IN-HATHWAY
mnt-routes: MAINT-IN-HATHWAY
mnt-irt: IRT-HATHWAY-IN
last-modified: 2021-01-18T03:52:09Z
irt: IRT-HATHWAY-IN
address: Trade World, B Wing, 10th Floor, Kamla Mills Compound,
address: Lower Parel,
address: Mumbai 400013
e-mail: nocadmin@hathway.net
abuse-mailbox: abuse@hathway.net
admin-c: VM14-AP
tech-c: VM14-AP
mnt-by: MAINT-IN-HATHWAY
last-modified: 2024-12-26T11:23:35Z
organisation: ORG-HCAD1-AP
org-name: HATHWAY CABLE AND DATACOM LIMITED
org-type: LIR
country: IN
address: HATHWAY CABLE AND DATACOM LIMITED
address: “Rahejas”, 4th Floor
address: Cnr Main Avenue & VP Road
phone: +91-22-26001306
fax-no: +91-22-26001307
e-mail: vijaym@hathway.net
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2023-09-05T02:14:47Z
role: ABUSE HATHWAYIN
country: ZZ
address: Trade World, B Wing, 10th Floor, Kamla Mills Compound,
address: Lower Parel,
address: Mumbai 400013
phone: +000000000
e-mail: nocadmin@hathway.net
admin-c: VM14-AP
tech-c: VM14-AP
nic-hdl: AH1250-AP
abuse-mailbox: abuse@hathway.net
mnt-by: APNIC-ABUSE
last-modified: 2024-12-26T11:24:04Z
person: Vijay Menezes
nic-hdl: VM14-AP
e-mail: vijaym@hathway.net
address: Trade World, B Wing, 10th Floor, Kamla Mills Compound,
address: Lower Parel,
address: Mumbai 400013
phone: +91 022 56623333
fax-no: +91 022 24933355
country: IN
mnt-by: MAINT-IN-HATHWAY
last-modified: 2008-09-04T07:29:19Z
route: 125.99.46.0/24
descr: Hathway IP over Cable Internet Access
origin: AS17488
notify: vijaym@hathway.net
mnt-by: MAINT-IN-HATHWAY
last-modified: 2008-09-04T07:54:42Z
country: IN

Links to attack logs

Share on: