146.0.75.242 Threat Intelligence and Host Information

Mar 17, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 146.0.75.242 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 42/100

Host and Network Information

  • Tags: cyber security, ioc, malicious, Nextray, phishing

  • JARM: 2ad2ad16d00000008c000000000000a8c820d3c34e26add345de07974cf54b

  • View other sources: Spamhaus VirusTotal

Malware Detected on Host

Count: 13 fcd7f769686b18f86dbae44a303fbfab679bb8ac1dbc67eee26f63f35bdc9e17 a2133f2735a03b7b25b148b9b661093116710775f4c8f6641b0c77e695d3bfb2 844f9363aea6f5959fc9e86f55119cbcfe16afbd8b93b09c994c7302c93f8d2b 2e2b0494bf18e21d812fc6050ce712786a237748888e57934acf19f380d9a628 3babacdac417f39cbcceb2b89553f7989861c4c81220d4b6542607d876a9b1ea 39f687d358ba889bfcc999b75a5a7d9011459904672d62c3c7a07d5717d22722 289222afcd4f5176f6887bc945e4d10b98ba24500b8d430487ac2ace41a61fc1 09787acc7d9c9f418b60ac19ba82f33a86ab8746b0a96a63c746b202e7446945 65aab7f40f8f86c621407c7d9d70801a5b4c5354a21c2de604970a6069d8414b 81e0ba30c95ae62331480c109e63df45a534fae0a44acce273a9cbe1073fdd28

Open Ports Detected

110 123 143 1434 25 3268 3389 3411 389 443 445 53 593 80 88

CVEs Detected

CVE-2020-0796

Map

Whois Information

  • NetRange: 146.0.0.0 - 146.0.255.255
  • CIDR: 146.0.0.0/16
  • NetName: RIPE-ERX-146-0-0-0
  • NetHandle: NET-146-0-0-0-1
  • Parent: NET146 (NET-146-0-0-0-0)
  • NetType: Early Registrations, Transferred to RIPE NCC
  • OriginAS:
  • Organization: RIPE Network Coordination Centre (RIPE)
  • RegDate: 2010-11-03
  • Updated: 2010-11-03
  • Comment: These addresses have been further assigned to users in
  • Comment: the RIPE NCC region. Contact information can be found in
  • Ref: https://rdap.arin.net/registry/ip/146.0.0.0
  • OrgName: RIPE Network Coordination Centre
  • OrgId: RIPE
  • Address: P.O. Box 10096
  • City: Amsterdam
  • StateProv:
  • PostalCode: 1001EB
  • Country: NL
  • RegDate:
  • Updated: 2013-07-29
  • Ref: https://rdap.arin.net/registry/entity/RIPE
  • OrgAbuseHandle: ABUSE3850-ARIN
  • OrgAbuseName: Abuse Contact
  • OrgAbusePhone: +31205354444
  • OrgAbuseEmail: abuse@ripe.net
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
  • OrgTechHandle: RNO29-ARIN
  • OrgTechName: RIPE NCC Operations
  • OrgTechPhone: +31 20 535 4444
  • OrgTechEmail: hostmaster@ripe.net
  • OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
  • inetnum: 146.0.75.235 - 146.0.75.245
  • netname: HOSTKEY-NET
  • country: NL
  • admin-c: ANSH31-RIPE
  • tech-c: ANSH31-RIPE
  • status: ASSIGNED PA
  • mnt-by: HOSTKEY-MNT
  • created: 2018-11-20T09:09:05Z
  • last-modified: 2019-07-02T07:49:38Z
  • person: RIPE Team
  • address: W Frederik Hermansstr 91
  • address: 1011DG
  • address: Amsterdam
  • address: NETHERLANDS
  • phone: +31208203777
  • org: ORG-HB14-RIPE
  • nic-hdl: ANSH31-RIPE
  • mnt-by: HOSTKEY-MNT
  • created: 2015-07-22T09:22:31Z
  • last-modified: 2022-06-30T14:38:28Z
  • route: 146.0.75.0/24
  • origin: AS57043
  • mnt-by: HOSTKEY-MNT
  • created: 2015-10-22T14:10:43Z
  • last-modified: 2019-07-02T07:48:00Z

Links to attack logs

telnet-bruteforce-ip-list-2021-06-15 ****** ****** ******

Share on: