162.0.217.18 Threat Intelligence and Host Information

Dec 16, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 162.0.217.18 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 10/100

Host and Network Information

Malware Detected on Host

Count: 11 5b220fe0544b10078dc902bdec35f73387c826e4c70d24e1967e334e5454fd7d 311ae063c2817dc97e5793d8b5ad02e6a3e98d7677422340bd46e387e131e522 b3c0dae4b6425df5bed8fc8248f33a30cc95dd314e4611558899b224c3a0b3c9 cdcdb9b3547d3a82f21acde3c71a6f17a635a13c17658930c9c4e3af13a85976 d2c4b1836c7e071506d1a6e2f13fad8c4ed41c32cdf65736f559695f03e55ed3 8b510c3e199f7809ef3a57405ca7ed00da2e432af3a3a4cd75f6af9672247cf9 ab91334bffcd5df86ba03dbb70c10a5f02c4eca98c987156845b822b7524974f 41f51ae24125595d29ce6a53b2a93b279ed3505870e2e35277adf28597accf02 573ca2ec78fafcaa80d7562293ddc1be2d4882de580e8fbf8c786c54137ee2dd be9dcdf8ea48cec2fa307321bf7873b4ee3b92cbd28e8915f4d90b0312537921

Open Ports Detected

143 2082 2083 2095 2096 21 443 465 53 80 993 995

Map

Whois Information

  • NetRange: 162.0.208.0 - 162.0.223.255
  • CIDR: 162.0.208.0/20
  • NetName: NAMEC-4
  • NetHandle: NET-162-0-208-0-1
  • Parent: NET162 (NET-162-0-0-0-0)
  • NetType: Direct Allocation
  • OriginAS:
  • Organization: Namecheap, Inc. (NAMEC-4)
  • RegDate: 2020-09-03
  • Updated: 2024-08-14
  • Comment: Geofeed https://geofeed.web-hosting.com/geofeed.csv
  • Ref: https://rdap.arin.net/registry/ip/162.0.208.0
  • OrgName: Namecheap, Inc.
  • OrgId: NAMEC-4
  • Address: 11400 W. Olympic Blvd. Suite 200
  • City: Los Angeles
  • StateProv: CA
  • PostalCode: 90064
  • Country: US
  • RegDate: 2011-01-28
  • Updated: 2024-11-25
  • Ref: https://rdap.arin.net/registry/entity/NAMEC-4
  • OrgTechHandle: EFIME-ARIN
  • OrgTechName: Efimenko, Igor
  • OrgTechPhone: +1-323-375-2822
  • OrgTechEmail: igor.e@namecheap.com
  • OrgTechRef: https://rdap.arin.net/registry/entity/EFIME-ARIN
  • OrgTechHandle: TECHT4-ARIN
  • OrgTechName: Tech team
  • OrgTechPhone: +1-661-310-2107
  • OrgTechEmail: tech@namecheaphosting.com
  • OrgTechRef: https://rdap.arin.net/registry/entity/TECHT4-ARIN
  • OrgAbuseHandle: ABUSE2885-ARIN
  • OrgAbuseName: Abuse team
  • OrgAbusePhone: +1-323-375-2822
  • OrgAbuseEmail: abuse@namecheaphosting.com
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2885-ARIN
  • network:Class-Name:network
  • network:Auth-Area:162.0.217.0/24
  • network:ID:NET-157033.162.0.217.18
  • network:IP-Network:162.0.217.18
  • network:IP-Network-Block:162.0.217.18
  • network:Org-Name:Web-hosting.com
  • network:Street-Address:J.W. Lucasweg 35,
  • network:City:Haarlem
  • network:State:AL
  • network:Postal-Code:
  • network:Country-Code:NL
  • network:Tech-Contact:MAINT-157033.162.0.217.18
  • network:Created:20210106182453000
  • network:Updated:20210106182604000
  • network:Updated-By:net-admin@namecheap.com
  • contact:POC-Name:Network team
  • contact:POC-Email:net-admin@namecheap.com
  • contact:POC-Phone:
  • contact:Tech-Name:Network team
  • contact:Tech-Email:net-admin@namecheap.com
  • contact:Tech-Phone:
  • contact:Abuse-Name:Abuse team
  • contact:Abuse-Email:abuse@namecheaphosting.com

Links to attack logs

****** ****** ******

Share on: