185.220.101.142 Threat Intelligence and Host Information

Sep 27, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 185.220.101.142 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 40/100

Host and Network Information

Known tor exit node
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_net_ua, dm_tor, et_tor, sblam, stopforumspam_180d, stopforumspam_1d, stopforumspam_30d, stopforumspam_365d, stopforumspam_7d, stopforumspam_90d, stopforumspam

Known TOR node
Country: Germany
Network:
Noticed: times
Protocols Attacked: spam ssh
Passive DNS Results: db8f.duckdns.org

Malware Detected on Host

Count: 8 e430099aa88c66bc6851f01e8e875d497e049ccb5291eb2b97589d5cabdd5d8a a8b4179f30d6c9edf5f66443d80ec027099335c771f3b10f18bfe51e844aed58 7282e2fdb25b07554b082f5cf1697315ed5ce3005f985cbe96a34da965869db5 175947117e7dfbe4d0b437034d850cb8bb063038d1b1ab0219c56ddc6464b395 a7e484d7cdbcb39538cd203c269d39b15d59f1703cf73429ca67128bb66c0a00 5dca574173ec29eab508ab797c6af88456d9960cc56f42d7b86a06eae0cee317 fe111b6fff9830a29ba03ae1000b15ba4541127d708a8ad33c7e798029453322 2e66d07f6dc0aaaa247802ba12be12fc5904b0a23d6118c76718c3f84125b871

Open Ports Detected

10134

Map

Links to attack logs

Share on: