130.185.75.41 Threat Intelligence and Host Information

Mar 17, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 130.185.75.41 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 10/100

Host and Network Information

  • Country: Iran
  • Network: AS60631 pars parva system co. ltd.
  • Noticed: 1 times
  • Protocols Attacked: SSH

Malware Detected on Host

Count: 3 5acb578a098beb2cf86b98bf1aa6ab83255354f4ba6ca8381543d96d7ec4c9b9 0f033d4f2ef9f7bca0a56938e449279820fd7c51a3d839bfe11ca13a680d0b60 52c9aaa3961640f18beaf8d38ddc7e15a3bdd41cc5803d7d949978ed66440f50

Open Ports Detected

443 80

Map

Whois Information

  • NetRange: 130.185.0.0 - 130.185.255.255
  • CIDR: 130.185.0.0/16
  • NetName: RIPE-ERX-130-185-0-0
  • NetHandle: NET-130-185-0-0-1
  • Parent: NET130 (NET-130-0-0-0-0)
  • NetType: Early Registrations, Transferred to RIPE NCC
  • OriginAS:
  • Organization: RIPE Network Coordination Centre (RIPE)
  • RegDate: 2010-11-03
  • Updated: 2010-11-17
  • Comment: These addresses have been further assigned to users in
  • Comment: the RIPE NCC region. Contact information can be found in
  • Ref: https://rdap.arin.net/registry/ip/130.185.0.0
  • OrgName: RIPE Network Coordination Centre
  • OrgId: RIPE
  • Address: P.O. Box 10096
  • City: Amsterdam
  • StateProv:
  • PostalCode: 1001EB
  • Country: NL
  • RegDate:
  • Updated: 2013-07-29
  • Ref: https://rdap.arin.net/registry/entity/RIPE
  • OrgAbuseHandle: ABUSE3850-ARIN
  • OrgAbuseName: Abuse Contact
  • OrgAbusePhone: +31205354444
  • OrgAbuseEmail: abuse@ripe.net
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
  • OrgTechHandle: RNO29-ARIN
  • OrgTechName: RIPE NCC Operations
  • OrgTechPhone: +31 20 535 4444
  • OrgTechEmail: hostmaster@ripe.net
  • OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
  • inetnum: 130.185.75.0 - 130.185.75.255
  • netname: ParsPack
  • country: IR
  • admin-c: PS12254-RIPE
  • descr: ParsPack Cloud
  • tech-c: PS12254-RIPE
  • status: ASSIGNED PA
  • mnt-by: PS60518-MNT
  • created: 2019-04-28T11:21:13Z
  • last-modified: 2020-08-20T04:04:14Z
  • person: Pars Parva System LTD
  • address: Saadat Abad, 35th West Street, Number 2
  • phone: +982141807
  • nic-hdl: PS12254-RIPE
  • mnt-by: PS60518-MNT
  • created: 2011-10-06T13:11:14Z
  • last-modified: 2018-09-13T08:16:47Z
  • route: 130.185.75.0/24
  • origin: AS60631
  • mnt-by: PS60518-MNT
  • created: 2020-09-20T12:19:50Z
  • last-modified: 2020-09-20T12:19:50Z

Links to attack logs

****** ****** ******

Share on: