173.249.20.84 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 173.249.20.84 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 15/100

Host and Network Information

• JARM: 25d3fd00025d25d00042d43d0000000a5f02847ec7d262f8dcbfaa6508ecf9

• View other sources: Spamhaus VirusTotal

• Country: Germany
• Network: AS51167 contabo gmbh
• Noticed: 1 times
• Protcols Attacked: Anonymous Proxy
• Passive DNS Results: whm.redflymarketing.ie www.abodepm.ie abodepm.ie www.test.broadbandtips.ie test.broadbandtips.ie limescaleprevention.ie www.limescaleprevention.ie firepits.vimar.dev www.firepits.vimar.dev www.merrionvaults.vimar.dev merrionvaults.vimar.dev castelview-open-farm.vimar.dev www.castelview-open-farm.vimar.dev raheen.vimar.dev www.raheen.vimar.dev www.anneslanedental.vimar.dev anneslanedental.vimar.dev www.weatemps.vimar.dev weatemps.vimar.dev de.vimar.dev www.de.vimar.dev www.shine.vimar.dev shine.vimar.dev www.timber.vimar.dev timber.vimar.dev www.project.vimar.dev project.vimar.dev www.looby.vimar.dev looby.vimar.dev travello.us www.colepd.vimar.dev colepd.vimar.dev www.1tosend.com snb.vimar.dev www.snb.vimar.dev www.physio.vimar.dev physio.vimar.dev miscellanycakes.vimar.dev www.miscellanycakes.vimar.dev www.regionalbroadband.vimar.dev regionalbroadband.vimar.dev temps.vimar.dev www.temps.vimar.dev kengraham.vimar.dev oxley.vimar.dev www.kengraham.vimar.dev www.oxley.vimar.dev www.jsd.vimar.dev jsd.vimar.dev www.merrion.vimar.dev merrion.vimar.dev www.turbolastmile.vimar.dev turbolastmile.vimar.dev www.srpassiveretrofit.vimar.dev srpassiveretrofit.vimar.dev fleetconnect.ie.satellitewifi.co.uk www.lets-connect.ie.satellitewifi.co.uk ruralwifi.ie.satellitewifi.co.uk www.ruralwifi.ie satellitewifi.co.uk www.ruralwifi.ie.satellitewifi.co.uk lets-connect.ie.satellitewifi.co.uk www.fleetconnect.ie.satellitewifi.co.uk www.satellitewifi.co.uk www.zendfast.com www.ultrapluscleaningservice.ie ultrapluscleaningservice.ie schoolofperformingarts.ie www.schoolofperformingarts.ie dngkelly.ie www.dngkelly.ie lynella.vimar.dev www.lynella.vimar.dev www.cosyhome.vimar.dev cosyhome.vimar.dev www.emexrdunnesinger.vimar.dev www.emerdunnesinger.vimar.dev emexrdunnesinger.vimar.dev emerdunnesinger.vimar.dev justbuylocal.ie www.justbuylocal.ie www.preview.vimar.dev preview.vimar.dev www.portal.schoolofperformingarts.ie portal.schoolofperformingarts.ie www.zendfast.vimar.dev zendfast.vimar.dev www.vermac.vimar.dev vermac.vimar.dev shortt.vimar.dev www.shortt.vimar.dev www.justbuylocal.vimar.dev justbuylocal.vimar.dev www.aquatic.vimar.dev aquatic.vimar.dev www.emerdunne.vimar.dev emerdunne.vimar.dev whm.shopnearbuy.ie shopnearbuy.ie www.shopnearbuy.ie shopnearbuy.ie.vimar.dev www.shopnearbuy.ie.vimar.dev viafood.vimar.dev www.viafood.vimar.dev mochuaprint.vimar.dev www.mochuaprint.vimar.dev ibn.vimar.dev www.ibn.vimar.dev www.shopnearbuy.vimar.dev shopnearbuy.vimar.dev byro.ie www.byro.ie doylesshoes.vimar.dev www.doylesshoes.vimar.dev www.teepeetots.vimar.dev teepeetots.vimar.dev www.jessop.vimar.dev jessop.vimar.dev vermacgas.com www.vermacgas.com cpcalendars.vermacgas.com cpcontacts.vermacgas.com www.singapore.zendfast.net singapore.zendfast.net bespokebeauty.vimar.dev www.bespokebeauty.vimar.dev lets-connect.ie www.lets-connect.ie cpcalendars.srpassiveretrofit.ie cpcontacts.srpassiveretrofit.ie srpassiveretrofit.ie www.srpassiveretrofit.ie justbuylocal.laoispeople.ie www.justbuylocal.laoispeople.ie speed.ruralwifi.ie www.getitacrosspr.ie getitacrosspr.ie mochuaprint.ie cpcontacts.turbolastmile.com turbolastmile.com turbolastmile.zendfast.net www.turbolastmile.com cpcalendars.turbolastmile.com www.turbolastmile.zendfast.net www.voltairediamonds.vimar.dev voltairediamonds.vimar.dev evaminge.vimar.dev www.evaminge.vimar.dev ev-charger.vimar.dev www.ev-charger.vimar.dev www.tntcom.vimar.dev tntcom.vimar.dev www.tnt.vimar.dev tnt.vimar.dev homewatersolutions.ie www.homewatersolutions.ie www.medicode8.vimar.dev medicode8.vimar.dev ruralwifiie.vimar.dev www.ruralwifiie.vimar.dev ruralwifi.ie cosyhome.ie cpcontacts.cosyhome.ie cpcalendars.cosyhome.ie www.proxy.vimar.dev proxy.vimar.dev www.rolleston.vimar.dev rolleston.vimar.dev millers.vimar.dev www.millers.vimar.dev mochua.vimar.dev www.mochua.vimar.dev cpcalendars.mochuaprint.ie www.mochuaprint.ie cpcontacts.mochuaprint.ie www.taxkey.vimar.dev taxkey.vimar.dev laoispeople.vimar.dev www.laoispeople.vimar.dev www.laoisafrica.com cpcontacts.laoisafrica.com cpcalendars.laoisafrica.com laoisafrica.com www.byro.vimar.dev byro.vimar.dev cpcontacts.unifi.lets-connect.ie unifi.lets-connect.ie www.unifi.lets-connect.ie cpcalendars.unifi.lets-connect.ie www.unifi.lets-connect.ie.lets-connect.ie unifi.lets-connect.ie.lets-connect.ie www.ultraplus.vimar.dev ultraplus.vimar.dev growyourgarden.vimar.dev www.growyourgarden.vimar.dev box.shavoltd.com dng.vimar.dev www.dng.vimar.dev www.laois-africa.vimar.dev laois-africa.vimar.dev www.get-it-across.vimar.dev get-it-across.vimar.dev www.paintballpark.ie cpcalendars.paintballpark.ie cpcontacts.paintballpark.ie paintballpark.ie cpcontacts.brighterbroome.org cpcalendars.brighterbroome.org www.mailer.vimar.dev mailer.vimar.dev gtl.vimar.dev www.gtl.vimar.dev cpcalendars.growyourgarden.ie www.growyourgarden.ie cpcontacts.growyourgarden.ie growyourgarden.ie www.powertoyou.ie cpcontacts.powertoyou.ie cpcalendars.powertoyou.ie powertoyou.ie captini.ie designemporium.ie www.designemporium.ie cpcontacts.mydreamwedding.ie www.mydreamwedding.ie cpcalendars.mydreamwedding.ie mydreamwedding.ie www.millers.ie millers.ie cpcalendars.millers.ie cpcontacts.millers.ie cpcalendars.laoispeople.ie cpcontacts.laoispeople.ie laoispeople.ie www.laoispeople.ie pmask2020.com cpcontacts.pmask2020.com cpcalendars.pmask2020.com www.pmask2020.com www.1tosend.zendfast.net 1tosend.zendfast.net www.zendfast.redflymarketing.ie www.zendfast.com.redflymarketing.ie zendfast.com.redflymarketing.ie zendfast.redflymarketing.ie 1tosend.com whm.vimar.dev designemporium.vimar.dev www.designemporium.vimar.dev www.nigeria.zendfast.net nigeria.zendfast.net zendfast.net cpcalendars.zendfast.net www.zendfast.net cpcontacts.zendfast.net cpcontacts.ekotargmikolow.pl ekotargmikolow.pl www.ekotargmikolow.pl cpcalendars.ekotargmikolow.pl www.broadbandtips.ie broadbandtips.ie whm.broadbandtips.ie cpcalendars.broadbandtips.ie cpcontacts.broadbandtips.ie fleetconnect.ie cpcontacts.fleetconnect.ie cpcalendars.fleetconnect.ie whm.fleetconnect.ie www.fleetconnect.ie fleetconnect.ie.vimar.dev www.fleetconnect.ie.vimar.dev porterdecorators.ie cpcalendars.redflymarketing.ie cpcontacts.redflymarketing.ie www.youremail.redflymarketing.ie www.porterdecorators.ie www.redflymarketing.ie youremail.redflymarketing.ie www.greenirelandtours.ie cpcontacts.greenirelandtours.ie greenirelandtours.ie cpcalendars.greenirelandtours.ie www.datacentersafety.vimar.dev datacentersafety.vimar.dev cpcalendars.youremail.best cpcontacts.youremail.best cpcalendars.vimar.dev cpcontacts.vimar.dev fleetconnect.vimar.dev www.fleetconnect.vimar.dev www.ruralwifi.vimar.dev ruralwifi.vimar.dev www.ext.zendfast.com zendfast.com www.vimar.dev vimar.dev www.youremail.best youremail.best test.redflymarketing.ie www.test.redflymarketing.ie www.quebecvaults.shavoltd.com www.quebecvaults.com www.fresnovaults.com fresnovaults.shavoltd.com www.oklahomavaults.shavoltd.com www.oklahomavaults.com whm.indianapolisvaults.com indianapolisvaults.shavoltd.com whm.louisvillevaults.com louisvillevaults.shavoltd.com whm.houstonvaults.com www.phoenixvaults.com www.isleofmanvaults.com www.theprivatevaults.com www.iomvaults.co.uk isleofmanvaults.com tallinnavaartvaralaegas.ee www.tallinnavaartvaralaegas.ee www.canandavaults.com www.canandavaults.shavoltd.com prestonvaults.shavoltd.com whm.canandavaults.com whm.prestonvaults.co.uk www.prestonvaults.co.uk whm.genovacassettedisicurezza.it www.genovacassettedisicurezza.shavoltd.com genovacassettedisicurezza.shavoltd.com dreambandmusic.com www.dreambandmusic.com tdb.redflymarketing.ie www.tdb.redflymarketing.ie stage.lustrebyleva.com www.stage.lustrebyleva.com lustrebyleva.com leavesfestival.ie whm.phoenixvaults.com louisvillevaults.com www.louisvillevaults.com phoenixvaults.shavoltd.com www.phoenixvaults.shavoltd.com houstonvaults.com whm.oklahomavaults.com www.fresnovaults.shavoltd.com www.louisvillevaults.shavoltd.com phoenixvaults.com indianapolisvaults.com www.portlandvaults.shavoltd.com oklahomavaults.shavoltd.com fresnovaults.com houstonvaults.shavoltd.com portlandvaults.com albuquerquevaults.shavoltd.com whm.portlandvaults.com www.albuquerquevaults.shavoltd.com memphisvaults.shavoltd.com www.winnipegvaults.shavoltd.com winnipegvaults.shavoltd.com whm.winnipegvaults.com denvervaults.com iomvaults.co.uk www.kansasvaults.shavoltd.com whm.denvervaults.com whm.quebecvaults.com www.denvervaults.com www.denvervaults.shavoltd.com denvervaults.shavoltd.com quebecvaults.com quebecvaults.shavoltd.com www.nashvillevaults.com whm.fresnovaults.com nashvillevaults.com whm.nashvillevaults.com nashvillevaults.shavoltd.com www.nashvillevaults.shavoltd.com www.indianapolisvaults.shavoltd.com kansasvaults.com www.indianapolisvaults.com kansasvaults.shavoltd.com www.kansasvaults.com www.thevaultsgroup.com whm.thevaultsgroup.com doncastervaults.co.uk rotherhamvaults.co.uk www.doncastervaults.shavoltd.com whm.doncastervaults.co.uk doncastervaults.shavoltd.com www.rotherhamvaults.co.uk barnsleyvaults.shavoltd.com whm.rotherhamvaults.co.uk www.doncastervaults.co.uk rotherhamvaults.shavoltd.com www.barnsleyvaults.co.uk whm.barnsleyvaults.co.uk www.rotherhamvaults.shavoltd.com whm.tallinnavaartvaralaegas.ee www.tallinnavaartvaralaegas.shavoltd.com tallinnavaartvaralaegas.shavoltd.com theprivatevaults.com theprivatevaultsgroup.shavoltd.com www.theprivatevaultsgroup.shavoltd.com www.prestonvaults.shavoltd.com canandavaults.com canandavaults.shavoltd.com www.cosyhome.ie bolognacasettadisicurezza.shavoltd.com oxfordvaults.co.uk www.oxfordvaults.shavoltd.com www.derbyvaults.co.uk www.leicestervaults.co.uk derbyvaults.shavoltd.com www.derbyvaults.shavoltd.com whm.derbyvaults.co.uk www.leavesfestival.ie whm.middlesbroughvaults.co.uk www.middlesbroughvaults.shavoltd.com kartypracyucznia.pl www.kartypracyucznia.pl redflymarketing.ie edinburghsafedeposit.co.uk www.edinburghsafedeposit.co.uk oklahomavaults.com memphisvaults.com portlandvaults.shavoltd.com www.memphisvaults.com www.memphisvaults.shavoltd.com www.houstonvaults.com www.houstonvaults.shavoltd.com www.detroitvaults.com whm.detroitvaults.com detroitvaults.shavoltd.com www.mesavaults.shavoltd.com mesavaults.com mesavaults.shavoltd.com www.mesavaults.com whm.mesavaults.com iomvaults.im www.iomvaults.im www.southlondonvaults.co.uk southlondonvaults.co.uk whm.southlondonvaults.co.uk southlondonvaults.shavoltd.com www.southlondonvaults.shavoltd.com whm.manchestervaults.co.uk manchestervaults.shavoltd.com www.manchestervaults.co.uk birminghamvaults.co.uk www.birminghamvaults.co.uk manchestervaults.co.uk birminghamvaults.shavoltd.com whm.birminghamvaults.co.uk www.birminghamvaults.shavoltd.com www.manchestervaults.shavoltd.com mansfieldvaults.shavoltd.com mansfieldvaults.co.uk www.mansfieldvaults.shavoltd.com www.mansfieldvaults.co.uk stokevaults.co.uk www.stokevaults.co.uk stokevaults.shavoltd.com derbyvaults.co.uk prestonvaults.co.uk www.seattlesafetydeposit.com washingtonsafetydeposit.shavoltd.com www.seattlesafetydeposit.shavoltd.com seattlesafetydeposit.com whm.washingtonsafetydeposit.com seattlesafetydeposit.shavoltd.com www.washingtonsafetydeposit.shavoltd.com whm.seattlesafetydeposit.com www.washingtonsafetydeposit.com washingtonsafetydeposit.com www.blackburnvaults.shavoltd.com blackburnvaults.shavoltd.com blackburnvaults.co.uk sheffieldvaults.shavoltd.com www.sheffieldvaults.shavoltd.com whm.blackburnvaults.co.uk www.sheffieldvaults.co.uk sheffieldvaults.co.uk whm.sheffieldvaults.co.uk www.blackburnvaults.co.uk whm.bristolvaults.co.uk whm.brightonvaults.co.uk brightonvaults.shavoltd.com www.bristolvaults.shavoltd.com www.bristolvaults.co.uk www.brightonvaults.co.uk bristolvaults.shavoltd.com brightonvaults.co.uk www.brightonvaults.shavoltd.com bristolvaults.co.uk bradfordvaults.co.uk www.bradfordvaults.shavoltd.com portsmouthvaults.shavoltd.com whm.bradfordvaults.co.uk bradfordvaults.shavoltd.com www.portsmouthvaults.shavoltd.com portsmouthvaults.co.uk whm.portsmouthvaults.co.uk www.portsmouthvaults.co.uk

Open Ports Detected

110 111 143 2082 2083 2086 2087 2096 21 22 443 465 53 80 993 995

CVEs Detected

CVE-2016-20012 CVE-2017-15906 CVE-2018-15473 CVE-2018-15919 CVE-2018-20685 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408

Map

Whois Information

• NetRange: 173.249.0.0 - 173.249.63.255
• CIDR: 173.249.0.0/18
• NetName: RIPE
• NetHandle: NET-173-249-0-0-1
• Parent: NET173 (NET-173-0-0-0-0)
• NetType: Early Registrations, Transferred to RIPE NCC
• OriginAS:
• Organization: RIPE Network Coordination Centre (RIPE)
• RegDate: 2017-09-14
• Updated: 2017-09-14
• Ref: https://rdap.arin.net/registry/ip/173.249.0.0
• OrgName: RIPE Network Coordination Centre
• OrgId: RIPE
• Address: P.O. Box 10096
• City: Amsterdam
• StateProv:
• PostalCode: 1001EB
• Country: NL
• RegDate:
• Updated: 2013-07-29
• Ref: https://rdap.arin.net/registry/entity/RIPE
• OrgAbuseHandle: ABUSE3850-ARIN
• OrgAbuseName: Abuse Contact
• OrgAbusePhone: +31205354444
• OrgAbuseEmail: [email protected]
• OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
• OrgTechHandle: RNO29-ARIN
• OrgTechName: RIPE NCC Operations
• OrgTechPhone: +31 20 535 4444
• OrgTechEmail: [email protected]
• OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
• inetnum: 173.249.0.0 - 173.249.31.255
• netname: CONTABO
• descr: Contabo GmbH
• country: DE
• org: ORG-GG22-RIPE
• admin-c: MH7476-RIPE
• tech-c: MH7476-RIPE
• status: ASSIGNED PA
• mnt-by: MNT-CONTABO
• created: 2018-08-22T07:27:49Z
• last-modified: 2018-08-22T07:27:49Z
• organisation: ORG-GG22-RIPE
• org-name: Contabo GmbH
• country: DE
• org-type: LIR
• address: Aschauer Strasse 32a
• address: 81549
• address: Munchen
• address: GERMANY
• phone: +498921268372
• fax-no: +498921665862
• abuse-c: MH12453-RIPE
• mnt-ref: RIPE-NCC-HM-MNT
• mnt-ref: MNT-CONTABO
• mnt-ref: MNT-OCIRIS
• mnt-by: RIPE-NCC-HM-MNT
• mnt-by: MNT-CONTABO
• created: 2009-12-09T13:41:08Z
• last-modified: 2021-09-14T10:49:04Z
• person: Wilhelm Zwalina
• address: Contabo GmbH
• address: Aschauer Str. 32a
• address: 81549 Muenchen
• phone: +49 89 21268372
• fax-no: +49 89 21665862
• nic-hdl: MH7476-RIPE
• mnt-by: MNT-CONTABO
• mnt-by: MNT-GIGA-HOSTING
• created: 2010-01-04T10:41:37Z
• last-modified: 2020-04-24T16:09:30Z
• route: 173.249.20.0/23
• descr: CONTABO
• origin: AS51167
• mnt-by: MNT-CONTABO
• created: 2018-02-01T09:49:35Z
• last-modified: 2018-02-01T09:49:35Z

Links to attack logs

anonymous-proxy-ip-list-2023-12-30