138.68.69.37 Threat Intelligence and Host Information
Share on:General
This page contains threat intelligence information for the IPv4 address 138.68.69.37 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.
Potentially Malicious Host 🟡 50/100
Host and Network Information
-
Tags: Nextray, TOR, VPN, ccru asnas9123, cve202229266, cyber security, description, description ip, filehashmd5, filehashsha1, filehashsha256, global layer, indicator, indicator type, ioc, ipv4, malicious, phishing, service, sha1, sha256, v4admin, v4user
- View other sources: Spamhaus VirusTotal
-
Contained within other IP sets: blocklist_net_ua, haley_ssh, sblam, stopforumspam_365d, tor_exits, tor_exits_1d, tor_exits_30d, tor_exits_7d
- Country: Germany
- Network: AS14061 digitalocean llc
- Noticed: 1 times
- Protcols Attacked: ssh
- Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
- Passive DNS Results: network-solutions.rs dl.thoptvdownload.net dl.downloaddrivers.org dl.windowsdrivers.org dl.android-apks.com verussensus.com
Malware Detected on Host
Count: 40 623a20ac078d099adcdbfdfdf2e4ec625b5c2426ffe5152c54429ee158ba958a faed994d47347c763aec257d2b5db41954c041eb63a8e1e9922409d3f0087b1e b11e614cdd02aecb8d6ae65bf67bfac8cbefd68830065217e2cb48922743bb12 c851e3145dcf942d75fe7d104d5e3c46f5d49c165ec72f78a4c149d49707192a 2dbce0664f23a278915616b058ddce620b6a0a208a038ea509051e4d41b00c07 026bb028af2dc7ab0d5f4aa758651bcf0cdc8ecd591596f6b189ccf93292d37f bb56fa713dbc566f60c368e512106932d5b533e9b97e1c1d65cd096213b23a7c 2fd353ffcace535b5c0cdd3b70784bcbf1d4e35879a3109ed8825c2f970d22d3 7282e2fdb25b07554b082f5cf1697315ed5ce3005f985cbe96a34da965869db5 113cdbdf15eccb8f01042d1fe37d128e679a959dbf9a7878ed8c3568988b2a2c
Map
Whois Information
- NetRange: 138.68.0.0 - 138.68.255.255
- CIDR: 138.68.0.0/16
- NetName: DIGITALOCEAN-138-68-0-0
- NetHandle: NET-138-68-0-0-1
- Parent: NET138 (NET-138-0-0-0-0)
- NetType: Direct Allocation
- OriginAS: AS14061
- Organization: DigitalOcean, LLC (DO-13)
- RegDate: 2016-01-26
- Updated: 2020-04-03
- Comment: Routing and Peering Policy can be found at https://www.as14061.net
- Comment:
- Ref: https://rdap.arin.net/registry/ip/138.68.0.0
- OrgName: DigitalOcean, LLC
- OrgId: DO-13
- Address: 101 Ave of the Americas
- Address: FL2
- City: New York
- StateProv: NY
- PostalCode: 10013
- Country: US
- RegDate: 2012-05-14
- Updated: 2023-07-07
- Ref: https://rdap.arin.net/registry/entity/DO-13
- OrgNOCHandle: NOC32014-ARIN
- OrgNOCName: Network Operations Center
- OrgNOCPhone: +1-347-875-6044
- OrgNOCEmail: [email protected]
- OrgNOCRef: https://rdap.arin.net/registry/entity/NOC32014-ARIN
- OrgAbuseHandle: ABUSE5232-ARIN
- OrgAbuseName: Abuse, DigitalOcean
- OrgAbusePhone: +1-347-875-6044
- OrgAbuseEmail: [email protected]
- OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE5232-ARIN
- OrgTechHandle: NOC32014-ARIN
- OrgTechName: Network Operations Center
- OrgTechPhone: +1-347-875-6044
- OrgTechEmail: [email protected]
- OrgTechRef: https://rdap.arin.net/registry/entity/NOC32014-ARIN