162.159.137.54 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 162.159.137.54 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 40/100

Host and Network Information

  • Tags: akamaias, akamaiasn1, amazon02, as15169, as16509, as20940, as3359, as8075, as852, auto-generated security, BEC, cuba, facebook, geoip, ghost, google, indonesia, level3, media, mexico, mini, proton, public url, seznam, telecom, twitter, ukraine, win32, win64

  • JARM: 27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6

  • View other sources: Spamhaus VirusTotal

Malware Detected on Host

Count: 72 f23b6b20e147e6a7629f6aaee34ba4c00da54e8c731b0554e81c68afe95b8edb a62f927e03f4d9934c4007edba1f77cd5a8bfeff1f924096d5654f25f4a3d961 8da7d4ad858324f8bab5cb6f2485f1d1e2e12b7d54a0e089282262b07399842e 8e5905861111a3bfc574c1ce3d1fd18ab8723398f7c1fa5dce16ab86e72d1e40 2928a8ccf533fba5cdbdf6c8cbe47dead0e76e544f6148d0ae9964191cbfcb2e 1d0d037d8b2a626636bcf8e1f5666665177b9f1c480c742fbdd6aabdd189544d 6f74f0a2e73557297cff4340e9e35ab995f681e2a99bdc256f8363e1d6d04639 fba8cda9ca4b99460135651097d9807ae9b9899d705141fcf120cf2b9faf996d ee59b9ebbfc030946de2b54d03b3f4c54c062d639edad75f1e585f46b0f841f4 b4ab53f185f0f25e012c2fab7214e0aa670a213860f51713572d97e1b6a419b7

Open Ports Detected

2082 2083 2086 2087 443 80 8080 8443 8880

Whois Information

Links to attack logs

****** ****** ******

Share on: