166.62.107.20 Threat Intelligence and Host Information

Apr 07, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 166.62.107.20 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 70/100

Host and Network Information

  • Mitre ATT&CK IDs: T1027 - Obfuscated Files or Information, T1036 - Masquerading, T1041 - Exfiltration Over C2 Channel, T1056.001 - Keylogging, T1057 - Process Discovery, T1059 - Command and Scripting Interpreter, T1068 - Exploitation for Privilege Escalation, T1071 - Application Layer Protocol, T1082 - System Information Discovery, T1105 - Ingress Tool Transfer, T1106 - Native API, T1122 - Component Object Model Hijacking, T1129 - Shared Modules, T1140 - Deobfuscate/Decode Files or Information, T1449 - Exploit SS7 to Redirect Phone Calls/SMS, T1546 - Event Triggered Execution, T1583.005 - Botnet

  • Tags: abuse contact, all search, amazon02, amazonaes, apeaksoft ios, apple ios, apple phone, apple private, april, ascii text, asn owner, attack, august, author avatar, awful, banker, benjamin, cisco umbrella, ck id, cloudflarenet, cloud host, cobalt strike, code, comments, company limited, computer, concerning link, contacted, cookie, copy, country, creation date, critical, critical risk, cyber criminal, cyberstalking, data collection, date, detections file, detections type, dga domain, djcodychase.com, dnssec, domain name, domains, drive, dynadot llc, elf collection, email, emotet, execution, external, factory, falcon sandbox, file, file size, firewall sync, first, formbook, gandi sas, getprocaddress, google, graph community, hackers, hacktool, high level, hijacker, historical otx, historical ssl, hybrid, hybridanalysis, iframe, indicator, info api, installer, internapblk4, ip detections, it’s back, json data, kb file, keylogger, limited, localappdata, malicious, malware, matches rule, metro, million alexa, mitre att, monitoring, mon mar, mumblehard, name, name verdict, neworder.doc, online sun, open, otx octoseek, path, pte ltd, record type, red team, registrar, relacionada, related, report spam, resolutions, resolved ips, scan endpoints, script, search, server, shell code, siem, singlehopllc, site, skynet, soar, squarespace, ssl certificate, status, subdomains, submitters, summary iocs, team internet, temp, threat roundup, tsara brashears, ttl value, tue mar, united, unknown, unlocker, url http, url https, urls, urlvoid, utc submissions, virus network, vt graph, webico company, whois, whois lookup, whois record, whois show, whois whois, win32 exe, win64, windir

  • View other sources: Spamhaus VirusTotal

Malware Detected on Host

Count: 10 94186b32e5ac12aea5d1b9e7dae0ac9b3c7253eb30e9d2c8ff99f15fbeebcca0 dfa73b81370dd5c5ed1eb358d6b3efc7b6aed19e80f02555028bfdf196d776e3 d123eae0d047292787c98bfd05c58da586923a664c09d8165763ed8ce44c7f92 c426875bba98f145d263afe47a34a58aeeb5be42c204a5d0ea25ed654e59b7b4 522eac2353580ba8257613ef7223de9d25692584124ca16daa76109f8176b34a 02c14e0d63ebeef4ce1b39985fce9dff8f0e8c33d09ed9f7d0ea2f446861c123 7a9938273e502427d127d1aced6f9fe7fd25c7fdffe5319788f1e0588280734b 95febad12000e0777970d544616c0b4163424a28ed513e84cdbf1ded6bb1d1f4 3c1b27952318f5a6102d52a5d81fbde4fa5f89c517381d127488edef79075997 abea5bc3b86a03d15857e0e65fea696f9c08b18a5bfc4547ba876568f8532dfd

Open Ports Detected

22 443 80

CVEs Detected

CVE-2007-2768 CVE-2008-3844 CVE-2015-9251 CVE-2016-20012 CVE-2017-15906 CVE-2018-15473 CVE-2018-15919 CVE-2018-20685 CVE-2019-11358 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2020-11022 CVE-2020-11023 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408 CVE-2023-48795 CVE-2023-51384 CVE-2023-51385 CVE-2023-51767

Map

Whois Information

Links to attack logs

****** ****** ******

Share on: