178.239.21.147 Threat Intelligence and Host Information

Jun 02, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 178.239.21.147 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 40/100

Host and Network Information

Tags: awsau, awsbah, awsjap, bruteforce, cyber security, digital ocean, ioc, malicious, Nextray, phishing, sip, vultr
View other sources: Spamhaus VirusTotal

Country: China
Network: ASNone
Noticed: 50 times
Protocols Attacked: sip
Countries Attacked: Australia, Bahrain, Canada, Czechia, Denmark, Estonia, France, Germany, Japan, Latvia, Lithuania, Norway, Poland, Romania, Singapore, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: remitancegp.duckdns.org 67tytgh.duckdns.org

Malware Detected on Host

Count: 5 6b0c4ce8ac6c4b48125461d38af12a501219a049cc88f2cceb39deb092653365 d55b493b2bda91b882664fb806429c009ba4f5518e9c6bc79412f08f27c57a9b a5f6a25d36a3832718c839c57005a9d60bcacf808766e94bf8858ae346c803f6 297124b007f04c4ef0f690e0d7f214062456f2e20558c6087027765e69206918 bd7934fcd84bd8b2b6b1b1d14dd321a4aa3dbef469921829abf823ac3bb695ae

Map

Whois Information

inetnum: 178.239.20.0 - 178.239.21.255
netname: IT-ELOGICSRL-20190109
country: IT
org: ORG-ES303-RIPE
admin-c: NOC196-RIPE
tech-c: NOC196-RIPE
status: ALLOCATED PA
mnt-by: ELOGIC-MNT
mnt-by: RIPE-NCC-HM-MNT
created: 2023-04-26T14:48:34Z
last-modified: 2023-04-26T14:48:34Z
organisation: ORG-ES303-RIPE
org-name: Dinova Srl
country: IT
org-type: LIR
address: Via dei Lapidari, 12
address: 40129
address: Bologna
address: ITALY
phone: +390513145611
fax-no: +390513145699
admin-c: FR9-RIPE
admin-c: MM41378-RIPE
admin-c: ADM1028-RIPE
tech-c: NOC196-RIPE
abuse-c: NOC196-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: ELOGIC-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: ELOGIC-MNT
created: 2015-04-16T15:48:04Z
last-modified: 2024-06-12T15:00:47Z
role: Elogic Network Operation Team
abuse-mailbox: it@elogic.it
tech-c: FR9-RIPE
tech-c: MM41378-RIPE
tech-c: FS12600-RIPE
tech-c: AB32260-RIPE
phone: +39 051 3145611
org: ORG-ES303-RIPE
address: Via Paolo Nanni Costa, 30
address: 40133 BOLOGNA
address: ITALY
nic-hdl: NOC196-RIPE
mnt-by: ELOGIC-MNT
created: 2015-04-16T20:06:32Z
last-modified: 2024-06-10T22:31:41Z
route: 178.239.20.0/23
origin: AS200760
org: ORG-ES303-RIPE
mnt-by: ELOGIC-MNT
created: 2023-04-28T13:22:14Z
last-modified: 2023-04-28T13:22:14Z
organisation: ORG-ES303-RIPE
org-name: Dinova Srl
country: IT
org-type: LIR
address: Via dei Lapidari, 12
address: 40129
address: Bologna
address: ITALY
phone: +390513145611
fax-no: +390513145699
admin-c: FR9-RIPE
admin-c: MM41378-RIPE
admin-c: ADM1028-RIPE
tech-c: NOC196-RIPE
abuse-c: NOC196-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: ELOGIC-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: ELOGIC-MNT
created: 2015-04-16T15:48:04Z
last-modified: 2024-06-12T15:00:47Z

Links to attack logs

Share on: