185.220.102.241 Threat Intelligence and Host Information

Share on:

Apr 20, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Likely Malicious Host 🟠 70/100

Host and Network Information

Mitre ATT&CK IDs: T1110 - Brute Force
Tags: Brute-Force, Bruteforce, Nextray, SSH, Telnet, attack, cyber security, digital ocean, ioc, kfsensor, login, malicious, phishing, probing, rdp, scanner, scanners, scanning, ssh, vultr, webscan, webscanner bruteforce web app attack
Known tor exit node
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_net_ua, dm_tor, et_tor, haley_ssh, sblam, stopforumspam, stopforumspam_180d, stopforumspam_30d, stopforumspam_365d, stopforumspam_7d, stopforumspam_90d, tor_exits
Known TOR node
Country: Germany
Network: AS60729 zwiebelfreunde e.v.
Noticed: 50 times
Protcols Attacked: ssh
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Spain, Turkey, Ukraine, United Kingdom, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: serveur-nas1.synology.me edcrowds.myds.me

Malware Detected on Host

Count: 30 a896be5e1f5b7d498d6556c9d64fe6407b70360e36dd3f47ee46da9367748ff6 2e1cb6a2cb1b284dbdd0b8d47d53f946ca0b27a196c45600cc656889c2e57623 7548589cca05a011b563d58e795233faf2310975659bbc8b4d1db7ae6d805280 a4a63515b6bd2562e94430e10629c0c9e69309b2281dc857628cd537909c0352 aab175e6159c10600c57a552d118e2c3f921374438881f45c57f3c4174feaaab e7711425a3037a9b4a805b185c9096b2db65a523f07c8f908ab89d1da37370b7 ce11997dc64e5db0dc62219e25dc06c4209ba388589112d24973e5fc22ae48ee 949c6737d24f301ca7ea79dfd0936614bb3158ca66be70a842e7e0a7510d8616 7cf34eadb163afa46e8936bc8a37c38d51a646079d39897397ab6bd3fd527f9a 25837be752586ccedb7da8ab32d563a7baa799d91ca69067f0b8acc14dfc0923

Open Ports Detected

123 443 80 8080

Map

Whois Information

inetnum: 185.220.102.240 - 185.220.102.255
netname: DIGITALCOURAGE-EXITS
country: DE
admin-c: KM6429-RIPE
tech-c: KM6429-RIPE
org: ORG-DE86-RIPE
status: SUB-ALLOCATED PA
mnt-by: de-zwf-1-mnt
mnt-by: ZWIEBELFREUNDE
created: 2020-08-16T15:25:46Z
last-modified: 2020-08-16T15:26:13Z
organisation: ORG-DE86-RIPE
org-name: Digitalcourage e.V.
org-type: OTHER
address: Marktstrasse 18
abuse-c: ACRO33566-RIPE
mnt-ref: ZWIEBELFREUNDE
mnt-by: de-zwf-1-mnt
mnt-by: ZWIEBELFREUNDE
created: 2020-06-15T07:35:08Z
last-modified: 2020-06-15T07:38:47Z
person: Karl Mueller
address: Marktstr. 18, D-33602 Bielefeld, Germany
phone: +49-521-1639 1639
nic-hdl: KM6429-RIPE
mnt-by: Digitalcourage
created: 2016-04-06T18:18:29Z
last-modified: 2017-10-30T23:11:41Z
route: 185.220.102.0/24
origin: AS60729
mnt-by: de-zwf-1-mnt
created: 2017-09-17T04:04:03Z
last-modified: 2018-05-15T08:28:07Z

Links to attack logs