192.42.116.14 Threat Intelligence and Host Information

May 26, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 192.42.116.14 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Known Malicious Host 🔴 90/100

Host and Network Information

  • Mitre ATT&CK IDs: T1046 - Network Service Scanning, T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110.004 - Credential Stuffing, T1110 - Brute Force

  • Tags: abuseipdb, auto-generated security, brute force, Bruteforce, Brute-Force, cowrie, cve202229266, cyber security, description, description ip, indicator, indicator type, ioc, malicious, Nextray, phishing, scanners, sftp, ssh, SSH, tor, tor exit node, vultr

  • Known tor exit node

  • JARM: 2ad2ad16d2ad2ad00042d42d000000332dc9cd7d90589195193c8bb05d84fa

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: blocklist_net_ua, botscout_1d, botscout_30d, botscout_7d, cruzit_web_attacks, dm_tor, et_tor, haley_ssh, maxmind_proxy_fraud, sblam, snort_ipfilter, stopforumspam_180d, stopforumspam_1d, stopforumspam_30d, stopforumspam_365d, stopforumspam_7d, stopforumspam_90d, stopforumspam, talosintel_ipfilter, tor_exits_1d, tor_exits_30d, tor_exits_7d, tor_exits

  • Known TOR node
  • Country: Netherlands
  • Network:
  • Noticed: 50 times
  • Protocols Attacked: ssh
  • Countries Attacked: Australia, Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: block2.mmms.eu this-is-a-tor-exit-node-hviv114.hviv.nl

Malware Detected on Host

Count: 20 dfc41ce030340214dfb943f97574b23d44728460586c139e7873732fcd44c1af b11e614cdd02aecb8d6ae65bf67bfac8cbefd68830065217e2cb48922743bb12 2f08e286158ac76e677f30ceaae69cc2e828f68d03708de6a51e8e3f49890161 2fd353ffcace535b5c0cdd3b70784bcbf1d4e35879a3109ed8825c2f970d22d3 a896be5e1f5b7d498d6556c9d64fe6407b70360e36dd3f47ee46da9367748ff6 e746ba510b706bc06b084ce84d6cd7e417137efde85bf12e421fdf21fd677943 d204a862d554cc6d827ca9e4bfc3d721beaf4469a764a84a851d71c484890c47 b73eaa192ab95cab8e279d904a301d61ec84be69781b369bd73e538437680bc3 f2e5bd14494b6b3aef5924a75b992fa3cc4fba75426996b58b87b80c9c6b6630 cabf0db3d73622405c6ad92e55a24d186ba72e5f9155ca0e26a3bfff3f234656

Open Ports Detected

80

Map

Whois Information

Links to attack logs

vultrwarsaw-ssh-bruteforce-ip-list-2023-03-30 bruteforce-ip-list-2020-11-18 ****** digitaloceansingapore-ssh-bruteforce-ip-list-2024-02-05 digitaloceansingapore-ssh-bruteforce-ip-list-2024-01-14 digitaloceanfrankfurt-ssh-bruteforce-ip-list-2024-02-03 vultrparis-ssh-bruteforce-ip-list-2024-02-21 ****** digitaloceantoronto-ssh-bruteforce-ip-list-2024-02-27 ****** bruteforce-ip-list-2020-08-28

Share on: