162.255.118.66 Threat Intelligence and Host Information

Apr 07, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 162.255.118.66 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 37/100

Host and Network Information

  • Tags: agenttesla, agentteslaexe, arkeistealer, azorult, azorultexe, danabot, darkrat, dridex, dridexopendir, emotetheodo, formbook, gandcrab, gozi, hancitor, hawkeye, heodo, icedid, kpot, kpotstealer, loader, loki, luminositylink, nanocore, nemty, netwire, phorpiex, pony, qakbot, qealler, quasarrat, raccoonstealer, remcos, remcosrat, servhelper, stealer, systembc, trickbot, troldesh, zloader

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: hphosts_emd, hphosts_psh

  • Country: United States
  • Network: AS22612 namecheap inc.
  • Noticed: 1 times
  • Protocols Attacked: SSH

Malware Detected on Host

Count: 9 5acffa1012854d03e5f9f1b3f970cb8b7192b46f49fbee9670ac7247838869c1 e7c27968dbdb4e26b57ece3896dd0ccc58a7da77a90571371420aae376982452 6e22660930bf01ec7b9be6c79621c648d178e0041a4d9078cdd43d41b07d09a8 6d073df12f04f5233706c515b6c82e5daa2ef7092f54ad607c22dfcabeacafdf 81af3e551aef5b8b066274d99445d11b70f323ebcc633149a90354317163d65e 24adecf7ab59fa476d62ba40143b6153aab87b04d5d41f80627550c14f4d2c1d b7a33a202a4eb9008f24a06b1da89103cc4e8e67b7c6b376fd9821d3d1895f0a ee5b4834bfdb856c66104f1440ba559cc7684acdfc70142242a7a57db5aad85d a3debbd10e55348934034a31024e70c67876a943fe1ea36a9db293fdfa9ec85b

Open Ports Detected

22 443 80

Map

Whois Information

Links to attack logs

****** ****** ******

Share on: