185.68.16.141 Threat Intelligence and Host Information

Sep 17, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 185.68.16.141 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 34/100

Host and Network Information

  • Tags: agent tesla, auto-generated security, brazil, dbatloader, formbook, france, germany, india, mexico, mozi, panama, remcos, russia, singapore, spain, ukraine, warzonerat, week

  • View other sources: Spamhaus VirusTotal

Malware Detected on Host

Count: 17 f388d7267ec8473377e7b4daa319789b5681212d49e13a47b493bf6925fe4656 5e45221b06383014e586bbd4088d5a357724fa25e4ff2ba04728e189e88ac78a 898688721fbdc4dd250a2bb271c7a77fc01f865c75660904b8590abbb05cd2f2 2864b7c4c5621aee18ff542a1173ef7e085b7446230a88eb845c48ffe52b1e79 2ccebc3b433f201a2c6994805c47a2341724b96e29480633ccc20f7b7499023d 701452174c84f1005e3bfe40037e9814993a1f78e398a3778c484a07b3ea93c3 aaa08d1e5c0608a1956245f47433a64b679c196fdc02c769f3dc9d124f4e2d05 92d3b3bca7c31eb93c5c9d72ef0775f3704aeac92cf3de024ac6fa02d657e07d ca376737fcc0ef917f9b07004d1611bc8a30e367ab36dea441f2fd070e571eef f3c83d776d332ea0c0bd6c70e91a32a13ccd911b5e66873f7236ef5af1600406

Open Ports Detected

443 80

Map

Whois Information

  • inetnum: 185.68.16.0 - 185.68.16.255
  • netname: HUPROXY
  • descr: Hosting Ukraine Proxies
  • country: UA
  • admin-c: HU2012-RIPE
  • tech-c: HU2012-RIPE
  • status: ASSIGNED PA
  • mnt-by: HOSTINGUKRAINE-MNT
  • mnt-lower: HOSTINGUKRAINE-MNT
  • mnt-routes: HOSTINGUKRAINE-MNT
  • created: 2015-10-29T18:10:49Z
  • last-modified: 2015-10-29T18:10:49Z
  • role: Hosting Ukraine Ltd. Netmaster
  • org: ORG-HUL6-RIPE
  • address: Hosting Ukraine LTD
  • address: PO Box 65
  • phone: +380443927433
  • address: 04112, Kiev, Ukraine
  • admin-c: IR1628-RIPE
  • abuse-mailbox: network@abuse.team
  • nic-hdl: HU2012-RIPE
  • mnt-by: HOSTINGUKRAINE-MNT
  • created: 2013-04-18T07:53:53Z
  • last-modified: 2018-08-13T08:44:09Z
  • route: 185.68.16.0/22
  • descr: DX-DC network
  • origin: AS200000
  • mnt-by: HOSTINGUKRAINE-MNT
  • created: 2014-09-08T18:25:48Z
  • last-modified: 2014-09-08T18:25:48Z

Links to attack logs

****** ****** ******

Share on: