185.142.239.49 Threat Intelligence and Host Information

Oct 24, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 185.142.239.49 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 70/100

Host and Network Information

  • Mitre ATT&CK IDs: T1046 - Network Service Scanning

  • Tags: abuseipdb, auto-generated security, bot, botnet, cve202229266, cyber security, ddos, description, description ip, indicator, indicator type, ioc, malicious, Nextray, phishing, port 23, tcp/23, telnet, tor, TOR, tor exit node

  • Known tor exit node

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: blocklist_net_ua, botscout_30d, botscout_7d, dm_tor, et_tor, sblam, stopforumspam_180d, stopforumspam_1d, stopforumspam_30d, stopforumspam_365d, stopforumspam_7d, stopforumspam_90d, stopforumspam, tor_exits_1d, tor_exits_30d, tor_exits_7d, tor_exits

  • Known TOR node
  • Country: Netherlands
  • Network:
  • Noticed: 50 times
  • Protocols Attacked: SSH
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: tor-exit.0xdeadbeef.network

Malware Detected on Host

Count: 19 0e96ff6d44957427e4adba68315fd9ccf954097a6959627db3b236c25d1ff6dc b11e614cdd02aecb8d6ae65bf67bfac8cbefd68830065217e2cb48922743bb12 1a382a44d59ef1f7848fe567e1edf8ea556395087dcc77fca09f195c29697650 ec43e150012d049bbdf9a552c9a466482c628db8b981064584998a97d2662914 05d8b50fd24d8d3a7704f8b4343ecc830bbd70e753ebde060b457a34941c31e8 2e1cb6a2cb1b284dbdd0b8d47d53f946ca0b27a196c45600cc656889c2e57623 caa1241730c0dd6844a54bd4ef74d7238c83180e01266ba4f65e5d2cc2855f2f e7711425a3037a9b4a805b185c9096b2db65a523f07c8f908ab89d1da37370b7 25837be752586ccedb7da8ab32d563a7baa799d91ca69067f0b8acc14dfc0923 7ddef1c1c6c94febf3565291d7f4604f550144fd90a33b8c7445626ac29256d3

Map

Whois Information

  • inetnum: 185.142.239.0 - 185.142.239.255
  • netname: BlackHOST-CLOUD
  • descr: Black.HOST CLOUD Network
  • descr: Specially crafted and optimized for bandwidth hungry applications
  • descr:
  • descr: Direct all copyright, legal, spam and abuse complaints to:
  • descr: https://black.host/legal/abuse
  • descr:
  • country: NL
  • org: ORG-BLCK1-RIPE
  • admin-c: ABUS-BH
  • tech-c: SPRT-BH
  • status: ASSIGNED PA
  • mnt-by: BlackHOST-LTD
  • created: 2017-04-12T13:18:50Z
  • last-modified: 2017-12-16T17:44:00Z
  • mnt-routes: COGENT-ROUTE-MNT
  • organisation: ORG-BLCK1-RIPE
  • org-name: Black HOST Ltd.
  • descr:
  • descr: Take advantage of the best deal of bandwidth on the planet.
  • descr: UNMETERED Dedicated & VPS Servers, Premium web & email hosting
  • descr: Check out our offer on: https://black.host
  • descr:
  • language: EN
  • org-type: OTHER
  • address: Rue de Jargonnant 2, 1207 Geneva, Switzerland
  • admin-c: CREW-BH
  • abuse-c: ABUS-BH
  • tech-c: SPRT-BH
  • mnt-ref: BlackHOST-LTD
  • mnt-by: BlackHOST-LTD
  • created: 2016-03-08T13:27:08Z
  • last-modified: 2021-02-19T09:18:08Z
  • role: BlackHOST Abuse Team
  • address: Switzerland
  • abuse-mailbox: abuse@black.host
  • nic-hdl: ABUS-BH
  • mnt-by: BlackHOST-LTD
  • created: 2016-03-07T16:25:43Z
  • last-modified: 2017-12-19T21:48:20Z
  • role: BlackHOST Support Team
  • address: Switzerland
  • nic-hdl: SPRT-BH
  • mnt-by: BlackHOST-LTD
  • created: 2016-03-08T21:06:19Z
  • last-modified: 2016-03-12T13:38:04Z

Links to attack logs

****** ****** ******

Share on: