178.128.45.52 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 178.128.45.52 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 35/100

Host and Network Information

• Tags: cyber security, ioc, malicious, Nextray, phishing

• View other sources: Spamhaus VirusTotal

• Country: United Kingdom
• Network:
• Noticed: 29 times
• Protocols Attacked: SSH
• Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
• Passive DNS Results: e2e-dbaas-mongodb-ntpc8-7fdd1b2e.mongo.ondigitalocean.com e2e-dbaas-mongodb-zammv-r-be87dbbf.mongo.ondigitalocean.com vodacare.afyacall.co.tz sidfood.com service.abcfireandsecurity.com

Open Ports Detected

1000 102 1023 1024 1028 104 106 110 1103 113 119 1207 121 122 1234 1311 1337 1343 135 1400 1414 143 1433 1443 1515 1521 1723 1800 1801 1820 1911 1925 1926 1935 2000 2002 2003 2008 2016 2018 2030 2109 2111 2121 2134 22 2200 221 222 2222 2233 23 2323 2332 2344 2345 2404 2423 2435 25 2506 26 2628 3001 3004 3005 3007 3017 3042 311 3110 3112 3124 3128 3134 3135 314 3140 3141 3142 3221 3301 3310 3311 3333 340 3406 3408 3503 3530 3622 3841 4000 4002 4021 4022 4118 4242 4243 427 4321 443 4430 4432 4433 4434 4439 444 4444 4445 445 4506 4520 4524 4528 4530 4700 4734 4840 4911 5000 5001 5004 5005 5006 5007 5009 5010 502 5025 503 5122 513 5140 515 5201 522 5222 5223 5224 5226 5232 5233 5236 5241 5242 5245 5432 5435 5443 5444 5503 5601 5602 5603 5604 5606 5613 5630 5640 5800 5801 5804 5900 5901 5905 5907 5908 5914 6000 6001 6002 6005 6021 6100 631 632 6331 6443 6500 6505 6511 6514 6600 6602 6622 7001 7002 7004 7007 7012 7015 7100 7102 7218 7415 743 7433 7434 7443 7444 7510 7537 7634 80 8000 8001 8002 8008 8009 801 8013 8019 8021 8024 8033 8038 806 8080 8101 8108 811 8110 8112 8115 8123 8127 8134 8136 8137 8139 8142 8200 8238 8239 8241 831 8317 8333 8343 8403 8404 8409 8411 8413 8415 8420 8423 8425 8430 8431 8435 8436 8440 8442 8444 8445 8503 8506 8510 8513 8514 8515 8520 8521 8523 8536 8545 8621 8630 8641 8643 8701 8702 8706 8724 8731 8732 8733 88 8800 8802 8804 8806 8808 8810 8815 8826 8827 8829 8831 8834 8902 9000 9002 9003 9008 9016 9017 902 9021 9026 9031 9033 9042 9044 9100 9106 9108 9113 9115 9118 9122 9125 9129 9130 9131 9132 9135 9141 9143 9144 9145 9200 9201 9209 9214 9222 9236 9242 9300 9301 9308 9333 9345 9400 9410 9418 943 9443 9500 9501 9530 9532 9633 9700 9711 9743 9800 9803 9902 9909 9916 9919 9922 9923 9928 9930 9943 9944

Map

Links to attack logs

bruteforce-ip-list-2020-11-19 ****** ****** ******