185.220.100.241 Threat Intelligence and Host Information
General
This page contains threat intelligence information for the IPv4 address 185.220.100.241 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.
Potentially Malicious Host 🟡 40/100
Host and Network Information
-
Known tor exit node
-
View other sources: Spamhaus VirusTotal
-
Contained within other IP sets: blocklist_net_ua, cruzit_web_attacks, dm_tor, et_tor, sblam, stopforumspam_180d, stopforumspam_1d, stopforumspam_30d, stopforumspam_365d, stopforumspam_7d, stopforumspam_90d, stopforumspam, tor_exits
- Known TOR node
- Country: Germany
- Network:
- Noticed: times
- Protocols Attacked: redis
- Passive DNS Results: tor-exit-14.zbau.f3netze.de b23967.direct.quickconnect.to shadowlegion.ddns.net
Malware Detected on Host
Count: 18 d3bea0e50e223746aa21c799a7434be4538d066e34d048fa5d5182bb68df52a1 b5bb4de39af3743acfe8c5ba9feacc1a87ccb9cb902cb69347261c26d2598a66 00c7d00aad28f7ccf06651fa6bdad39f627798531bde47b84f4fafa4133d115f 292cc0f4fb558ad55517bdec32de901b7e578c60614450d32dd4ad470793253f 7548589cca05a011b563d58e795233faf2310975659bbc8b4d1db7ae6d805280 d643588fd00e7cbb933a634a3a1636e4b789dd7bc22ecf4a83c80f133ab1a849 ce11997dc64e5db0dc62219e25dc06c4209ba388589112d24973e5fc22ae48ee 25837be752586ccedb7da8ab32d563a7baa799d91ca69067f0b8acc14dfc0923 b73eaa192ab95cab8e279d904a301d61ec84be69781b369bd73e538437680bc3 f2d2ac74db5bbbb4afb1818bf345019c15a5688b574e53c5f93aa41b1df353c4
Open Ports Detected
Map
Links to attack logs
vultrparis-redis-bruteforce-ip-list-2022-01-29 bruteforce-ip-list-2020-05-15 ****** awssafrica-redis-bruteforce-ip-list-2022-05-10 awsbah-redis-bruteforce-ip-list-2022-05-11 nmap-scanning-list-2022-06-19 awssafrica-redis-bruteforce-ip-list-2022-05-19 cve-2018-13379-attacker-ip-list-2022-08-29 ****** ******
Share on: