192.3.80.137 Threat Intelligence and Host Information

Oct 08, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 192.3.80.137 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 40/100

Host and Network Information

  • Tags: cyber security, ioc, malicious, Nextray, phishing

  • JARM: 3fd3fd0003fd3fd21c42d42d000000307ee0eb468e9fdb5cfcd698a80a67ef

  • View other sources: Spamhaus VirusTotal

  • Country: United States
  • Network: AS36352 colocrossing
  • Noticed: 30 times
  • Protocols Attacked: telnet
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: 456.yanglia123.top us1.thefrostmu.xyz chingchong.xyz costco-redeem-annual-membership-reward.ca wocggu.xyz

Malware Detected on Host

Count: 11 a109dbb6f8a3aab39f57b63b736d9ec73577017ffffe1fae684846965db3f814 f357595ccdcd182f96f1b83c5d498fcd1e7fad3efe434528da38a7107fc8edc3 7d8edbe5bcb4386a3884d177ffb84b2ba93b7488a75a22f54494ee676d22b9c2 a30497860048822a87d2d7bb2fa4898a41b052d5484f65025e5ef7d91210486f b76ea533fe5dc244555ff5304d5ee0e88e8724b36acd17f178ca323eeedf4244 fc2157346682a050b26c1db9bd48ec3de76ca956452663d0c1300cb86abd2f66 940693a9f1a5cf08320b2e14421b985e749f9baedb47d1b8b6e9c1d017f2cfc2 acae94e95db9b8735d265257614dc64e5865a86676afda1055611461017265be 2322ea3c3da9fab338f8b2bd84f72a899a8e59990a51224b59f5ba32866da17a e7691ba122cfa29e37bad92ed12600f9022ac7ea698f0771fd2e71923a8ee882

Open Ports Detected

443 80 8888

Map

Whois Information

Links to attack logs

****** dotoronto-telnet-bruteforce-ip-list-2021-11-22 ****** ******

Share on: