176.119.200.129 Threat Intelligence and Host Information

Apr 25, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 176.119.200.129 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 14/100

Host and Network Information

  • Country: Switzerland
  • Network: AS62371 proton technologies ag
  • Noticed: 2 times
  • Protocols Attacked: SSH
  • Passive DNS Results: skyepageservices.top tucsoncounseling.org mailsec.protonmail.ch

Malware Detected on Host

Count: 36 a552b58bfd26ce40e97acc7eefe9e1332cfc30b9b37ed339e2b15f9d2f286d43 7c375a9e78b258e6ed4f3281287176c3e052da782116b8c113ba52a5634cf7b6 467147662590e0ccd7a60f95a907006c6575263cc133ec2c070264c5a7c8a9f5 859b968e396bb38d2ba766c504379068f23b15164d408674de214d50ca917372 8d034bbb5e10eba1e6f202adeb94092f940a1dcb9977845d126e15bcf1e83fd3 037b9184196fa3e501fb42b661a8d5d29246c238df1e3cf3dd0d3d4a8120fb38 f5ca356cab5ecc41e57bd28555ce8f07a5163952fbd38a530966e4ed9169deab 9b4fd31a881e297a8e42d88ddcdf67d51c9483f330c8df532feed3c5d34bf9bc 10e1d8588d1150a726edc657d780cb981e2250fb68d0e25c381f95bf93ec83a2 a9a18638ccb4afd362ddc5f55457eb512d1d16306d80e762f79635f50a9108fb

Open Ports Detected

25

Map

Whois Information

  • inetnum: 176.119.200.0 - 176.119.200.255
  • netname: CH-PROTONDRIVE-20200106
  • country: DE
  • org: ORG-PTA32-RIPE
  • admin-c: SC22600-RIPE
  • tech-c: SC22600-RIPE
  • status: ALLOCATED PA
  • mnt-by: RIPE-NCC-HM-MNT
  • mnt-by: protonmail-mnt
  • created: 2020-01-06T12:38:11Z
  • last-modified: 2021-11-08T16:10:31Z
  • organisation: ORG-PTA32-RIPE
  • org-name: Proton AG
  • country: CH
  • org-type: LIR
  • address: Route de la Galaise 32
  • address: 1228
  • address: Plan-les-Ouates
  • address: SWITZERLAND
  • phone: +41 22 884 11 00
  • admin-c: SC22600-RIPE
  • tech-c: SC22600-RIPE
  • abuse-c: AR57305-RIPE
  • mnt-by: RIPE-NCC-HM-MNT
  • mnt-by: protonmail-mnt
  • created: 2019-12-30T09:09:22Z
  • last-modified: 2022-11-22T11:24:22Z
  • mnt-ref: protonmail-mnt
  • role: Sebastien Ceuterickx
  • address: Chemin du Pré-Fleuri, 3
  • address: 1228
  • address: Plan-les-Ouates
  • address: SWITZERLAND
  • phone: +41 22 548 35 51
  • nic-hdl: SC22600-RIPE
  • mnt-by: mnt-ch-protondrive-1
  • created: 2019-12-30T09:09:21Z
  • last-modified: 2019-12-30T09:09:22Z
  • route: 176.119.200.0/24
  • origin: AS62371
  • mnt-by: protonmail-mnt
  • created: 2020-01-31T14:00:59Z
  • last-modified: 2021-12-03T12:01:03Z

Links to attack logs

****** ****** ******

Share on: