185.239.242.18 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 185.239.242.18 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 40/100

Host and Network Information

• Tags: cyber security, ioc, malicious, Nextray, phishing, SSH

• View other sources: Spamhaus VirusTotal

• Contained within other IP sets: haley_ssh

• Country: Netherlands
• Network:
• Noticed: 30 times
• Protocols Attacked: SSH
• Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
• Passive DNS Results: sempersim.su prisians.com strlingfd.com serbertying.com olmainyos.com octaneform.com webnearly.net

Malware Detected on Host

Count: 4 92d313adba54865940c275dc40b1dfcb8a4f94996be1a2f14d1136cd202809b2 5a88fed5b76500ac12ff5de7009ab0e382d30b7c027083416a725cd030d92e5e 779dfded324927a249f16f7e55a47d603ac2406497881673673132d36f6e8ca6 de002aa2a5c002409dbf30e575f033708d3ae588a5b4bfe2f27dada074f5cadb

Map

Links to attack logs

****** telnet-bruteforce-ip-list-2020-12-06 ****** ******