185.68.16.21 Threat Intelligence and Host Information

Sep 11, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 185.68.16.21 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 37/100

Host and Network Information

  • Mitre ATT&CK IDs: T1049 - System Network Connections Discovery

  • Tags: alienvault, cyber threat intelligence, domain & ip intelligence data feeds, download, iocs, ip addresses, isps, malicious, revil, state, whois, whois api, whois domain name, whois email address, whois ip address, whois record

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: cleanmx_viruses, hphosts_psh

Malware Detected on Host

Count: 7 86deff4baef04d95479ef9356d21452ae8c942d47b17b38896498787d994d1ee 726fa213c388a6794e8484e7c7fdc0e694656f11bed2ffd7e138531ecd08b625 d63d1c46b1e83d54ad1d37bd0c8b62447060af35f53296c3059d75dc4d3fa15c 241c852c185d13643fd9a4974f62d30aa5f412688afcb76760665c2505a25f55 2a60391efbc677216f5d355fdba7a7574e1aac023e4d3514cfbb2e959a78651a 05f4a996d95cdbc333dd58700169df1e61c3563b5966ff9e1f1fb9342efa6bfc 7d0a7b508d1ccc7ce49b234a25bff26c487a85ec7e81ddf6325e8e301516ceae

Open Ports Detected

443 80

Map

Whois Information

  • inetnum: 185.68.16.0 - 185.68.16.255
  • netname: HUPROXY
  • descr: Hosting Ukraine Proxies
  • country: UA
  • admin-c: HU2012-RIPE
  • tech-c: HU2012-RIPE
  • status: ASSIGNED PA
  • mnt-by: HOSTINGUKRAINE-MNT
  • mnt-lower: HOSTINGUKRAINE-MNT
  • mnt-routes: HOSTINGUKRAINE-MNT
  • created: 2015-10-29T18:10:49Z
  • last-modified: 2015-10-29T18:10:49Z
  • role: Hosting Ukraine Ltd. Netmaster
  • org: ORG-HUL6-RIPE
  • address: Hosting Ukraine LTD
  • address: PO Box 65
  • phone: +380443927433
  • address: 04112, Kiev, Ukraine
  • admin-c: IR1628-RIPE
  • abuse-mailbox: network@abuse.team
  • nic-hdl: HU2012-RIPE
  • mnt-by: HOSTINGUKRAINE-MNT
  • created: 2013-04-18T07:53:53Z
  • last-modified: 2018-08-13T08:44:09Z
  • route: 185.68.16.0/22
  • descr: DX-DC network
  • origin: AS200000
  • mnt-by: HOSTINGUKRAINE-MNT
  • created: 2014-09-08T18:25:48Z
  • last-modified: 2014-09-08T18:25:48Z

Links to attack logs

****** ****** ******

Share on: