162.247.74.204 Threat Intelligence and Host Information

Apr 07, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 162.247.74.204 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Known Malicious Host 🔴 90/100

Host and Network Information

Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110.004 - Credential Stuffing, T1110 - Brute Force
Tags: bot, Bruteforce, Brute-Force, cowrie, cve202229266, cyber security, ddos, description, description ip, indicator, indicator type, ioc, kfsensor, malicious, Nextray, phishing, rdp, scanners, ssh, SSH, tor, vultr
Known tor exit node
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_net_ua, botscout_1d, botscout_30d, botscout_7d, dm_tor, et_tor, greensnow, haley_ssh, maxmind_proxy_fraud, sblam, stopforumspam_180d, stopforumspam_1d, stopforumspam_30d, stopforumspam_365d, stopforumspam_7d, stopforumspam_90d, stopforumspam, tor_exits_1d, tor_exits_30d, tor_exits_7d, tor_exits

Known TOR node
Country: United States
Network: AS4224 the calyx institute
Noticed: 50 times
Protocols Attacked: ssh
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 55 388dc195d1a9a291194aa2e798636527093a1e58e5fa85f4c2d15f820b078b66 54c9cc6bebfdcee0724df994b4cda2bc3d0f27dd1072ef2a45f61b440ef84f87 a7aa8c8caf70b7e0a2a98cf18de6b8ecc75f3f00d8a763f3920d5c6e93cf2304 ad2db37ee2fb44258b775da60fb59c4f960271952f83c453ecdbd0822af97e61 c44008b9889805eb4ac7b3534ee0b22eb3485062811185951717798b437eafb0 b11e614cdd02aecb8d6ae65bf67bfac8cbefd68830065217e2cb48922743bb12 5cb8d0cbc2b756832061d20e72ac4612f18205aaeb620248024f0631d7551238 0e4b991e8bb2e7bbbb2f1dbe2783c857dc90da28d6cbd43bf39027ccafc93d0e 9fa849daeb517ae32becad02cc569a5cd5c96ff18f5e4b4266460ec4bd0d5fe6 2fd353ffcace535b5c0cdd3b70784bcbf1d4e35879a3109ed8825c2f970d22d3

Open Ports Detected

443 80

Map

Whois Information

NetRange: 162.247.72.0 - 162.247.75.255
CIDR: 162.247.72.0/22
NetName: CALYX-INSTITUTE-V4-1
NetHandle: NET-162-247-72-0-1
Parent: NET162 (NET-162-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS4224
Organization: The Calyx Institute (THECA-92)
RegDate: 2014-04-18
Updated: 2017-01-10
Comment: https://www.calyxinstitute.org
Comment: ** All Abuse email: abuse@calyxinstitute.org
Ref: https://rdap.arin.net/registry/ip/162.247.72.0
OrgName: The Calyx Institute
OrgId: THECA-92
Address: 254 36th Street
Address: Suite C660 / Unit 48
City: Brooklyn
StateProv: NY
PostalCode: 11232
Country: US
RegDate: 2010-09-10
Updated: 2019-01-26
Ref: https://rdap.arin.net/registry/entity/THECA-92
OrgTechHandle: NM60-ARIN
OrgTechName: Merrill, Nicholas
OrgTechPhone: +1-212-966-1900
OrgTechEmail: nick@calyx.com
OrgTechRef: https://rdap.arin.net/registry/entity/NM60-ARIN
OrgAbuseHandle: ARD6-ARIN
OrgAbuseName: Abuse Remediation Department
OrgAbusePhone: +1-212-966-1900
OrgAbuseEmail: abuse@calyxinstitute.org
OrgAbuseRef: https://rdap.arin.net/registry/entity/ARD6-ARIN
RAbuseHandle: ARD6-ARIN
RAbuseName: Abuse Remediation Department
RAbusePhone: +1-212-966-1900
RAbuseEmail: abuse@calyxinstitute.org
RAbuseRef: https://rdap.arin.net/registry/entity/ARD6-ARIN

Links to attack logs

Share on: