188.166.54.199 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 188.166.54.199 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 35/100

Host and Network Information

• Tags: cyber security, ioc, malicious, Nextray, phishing

• JARM: 27d27d27d00027d00042d43d00041df04c41293ba84f6efe3a613b22f983e6

• View other sources: Spamhaus VirusTotal

• Country: Netherlands
• Network:
• Noticed: 29 times
• Protocols Attacked: SSH
• Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
• Passive DNS Results: mabupix.de mabuspix.com volkoengineering.com

Open Ports Detected

100 10000 10001 10002 10004 10005 10010 10011 10012 10020 10023 10026 10029 10030 10032 10037 10038 10041 10045 10046 10047 1012 10134 102 10210 1022 1023 1024 10240 10243 1025 1027 104 10443 10810 10909 10911 10933 110 11000 11001 11027 1103 111 11111 11112 11210 11211 113 11300 11434 11920 1200 122 1234 131 1311 1344 135 1400 1414 143 1433 1443 1446 1500 1515 1521 1604 1723 1741 1800 1801 1820 1911 1925 1926 1935 2000 2002 2003 2008 2016 2022 21 2100 2109 2111 2121 2122 22 2200 221 2211 2222 23 2323 2327 2332 234 2344 2345 2404 2444 25 2525 26 2601 2602 2628 3001 3002 3003 3007 3008 3015 3017 3022 3101 3105 3107 3108 311 3112 3113 3119 3120 3123 3125 3127 3128 3129 3132 3135 3137 3140 3141 3145 3147 3200 3221 3301 3307 3310 3311 3333 3342 3345 3407 3410 343 3443 3503 3541 3542 3841 3842 4000 4010 4022 4117 4120 4200 4242 4244 427 4300 4321 4430 4433 4435 4437 4438 444 4443 4444 445 45006 4505 4506 4510 4520 4530 4543 4545 4602 4620 4840 4911 5000 5001 5004 5005 5007 5009 5010 5011 502 5022 5025 503 5105 5119 513 5135 515 5201 5222 5223 5226 5232 5237 5238 5239 5400 541 5432 5435 5439 5440 5444 5503 5542 5601 5604 5607 5614 5630 5800 5804 5822 5900 5901 5902 5904 5905 5910 5911 5913 5938 6000 6001 6002 6007 6008 602 6022 6036 6102 631 6331 636 6433 6443 646 6500 6601 6603 6700 7001 7005 7010 7012 7022 7025 7218 7401 7415 7433 7434 7443 7444 7510 7601 7603 7634 7801 7822 79 80 8000 8001 8002 8003 8004 8007 8008 801 8010 8012 8020 8021 8026 8029 8033 8038 8039 8041 8047 808 8080 8100 8108 811 8111 8112 8113 8126 8131 8132 8133 8136 8137 8139 8140 8141 8144 8200 8203 8222 8236 8237 8239 8300 8322 8333 8334 8343 8402 8404 8405 8409 8413 8414 8418 8423 8427 8429 8430 8434 8435 8440 8442 8504 8505 8515 8520 8524 8526 8529 8530 8532 8544 8545 8600 8602 8606 8623 8637 8701 8703 8704 8708 8732 8733 8745 88 8800 8810 8811 8812 8813 8820 8821 8825 8828 8833 8834 8844 8847 8910 8915 9000 9002 9003 9004 9009 9012 902 9022 9025 9028 9030 9032 9033 9036 9037 9038 9040 9042 9100 9101 9107 9114 9116 9117 9118 9119 9129 9130 9131 9147 9200 9209 9210 9216 9220 9222 9226 9230 9243 9244 9247 9306 9333 9400 9418 9443 947 9500 9501 9507 9529 9530 9532 9600 9611 9633 9700 9711 9743 9800 9803 9811 9900 9901 9909 9916 9919 9922 9928 9929 9930 9943 9944 9999

Map

Links to attack logs

****** bruteforce-ip-list-2020-02-04 bruteforce-ip-list-2020-09-28 bruteforce-ip-list-2020-03-24 ****** bruteforce-ip-list-2019-11-22 ****** bruteforce-ip-list-2019-12-31