192.42.116.14 Threat Intelligence and Host Information

Share on:
May 13, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 192.42.116.14 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 70/100

Host and Network Information

  • Tags: Brute-Force, Bruteforce, Nextray, SSH, TOR, Telnet, attack, badrequest, bruteforce, cyber security, ioc, login, malicious, phishing, probing, scanner, scanners, scanning, ssh, vultr, webscan, webscanner, webscanner bruteforce web app attack
  • Known tor exit node
  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: botscout_30d, botscout_7d, cruzit_web_attacks, dm_tor, et_tor, haley_ssh, maxmind_proxy_fraud, sblam, snort_ipfilter, stopforumspam, stopforumspam_180d, stopforumspam_1d, stopforumspam_30d, stopforumspam_365d, stopforumspam_7d, stopforumspam_90d, talosintel_ipfilter, tor_exits, tor_exits_1d, tor_exits_30d, tor_exits_7d

  • Known TOR node
  • Country: Netherlands
  • Network: AS1101 surfnet bv
  • Noticed: 50 times
  • Protcols Attacked: SSH
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 21 dfc41ce030340214dfb943f97574b23d44728460586c139e7873732fcd44c1af b11e614cdd02aecb8d6ae65bf67bfac8cbefd68830065217e2cb48922743bb12 2f08e286158ac76e677f30ceaae69cc2e828f68d03708de6a51e8e3f49890161 2fd353ffcace535b5c0cdd3b70784bcbf1d4e35879a3109ed8825c2f970d22d3 a896be5e1f5b7d498d6556c9d64fe6407b70360e36dd3f47ee46da9367748ff6 e746ba510b706bc06b084ce84d6cd7e417137efde85bf12e421fdf21fd677943 d204a862d554cc6d827ca9e4bfc3d721beaf4469a764a84a851d71c484890c47 b73eaa192ab95cab8e279d904a301d61ec84be69781b369bd73e538437680bc3 f2e5bd14494b6b3aef5924a75b992fa3cc4fba75426996b58b87b80c9c6b6630 cabf0db3d73622405c6ad92e55a24d186ba72e5f9155ca0e26a3bfff3f234656 dfc41ce030340214dfb943f97574b23d44728460586c139e7873732fcd44c1af b11e614cdd02aecb8d6ae65bf67bfac8cbefd68830065217e2cb48922743bb12 2f08e286158ac76e677f30ceaae69cc2e828f68d03708de6a51e8e3f49890161 2fd353ffcace535b5c0cdd3b70784bcbf1d4e35879a3109ed8825c2f970d22d3 a896be5e1f5b7d498d6556c9d64fe6407b70360e36dd3f47ee46da9367748ff6 e746ba510b706bc06b084ce84d6cd7e417137efde85bf12e421fdf21fd677943 d204a862d554cc6d827ca9e4bfc3d721beaf4469a764a84a851d71c484890c47 b73eaa192ab95cab8e279d904a301d61ec84be69781b369bd73e538437680bc3 f2e5bd14494b6b3aef5924a75b992fa3cc4fba75426996b58b87b80c9c6b6630 cabf0db3d73622405c6ad92e55a24d186ba72e5f9155ca0e26a3bfff3f234656

Map

Whois Information

  • inetnum: 59.124.0.0 - 59.127.255.255
  • netname: HINET-NET
  • descr: Data Communication Business Group,
  • descr: Chunghwa Telecom Co.,Ltd.
  • descr: No.21, Sec.1, Xinyi Rd., Taipei City
  • descr: 10048, Taiwan
  • country: TW
  • admin-c: HN27-AP
  • tech-c: HN27-AP
  • abuse-c: AT939-AP
  • status: ALLOCATED PORTABLE
  • mnt-by: MAINT-TW-TWNIC
  • mnt-irt: IRT-TWNIC-AP
  • last-modified: 2021-11-04T00:50:11Z
  • irt: IRT-TWNIC-AP
  • address: 3F., No. 123, Sec. 4, Bade Rd., Songshan Dist., Taipei 105, Taiwan
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: TWA2-AP
  • tech-c: TWA2-AP
  • mnt-by: MAINT-TW-TWNIC
  • last-modified: 2021-11-04T00:59:51Z
  • role: ABUSE TWNICAP
  • address: 3F., No. 123, Sec. 4, Bade Rd., Songshan Dist., Taipei 105, Taiwan
  • country: ZZ
  • phone: +000000000
  • e-mail: [email protected]
  • admin-c: TWA2-AP
  • tech-c: TWA2-AP
  • nic-hdl: AT939-AP
  • abuse-mailbox: [email protected]
  • mnt-by: APNIC-ABUSE
  • last-modified: 2021-11-04T01:00:32Z
  • person: HINET Network-Adm
  • address: CHTD, Chunghwa Telecom Co., Ltd.
  • address: No. 21, Sec. 21, Hsin-Yi Rd.,
  • address: Taipei Taiwan 100
  • country: TW
  • phone: +886 2 2322 3495
  • phone: +886 2 2322 3442
  • phone: +886 2 2344 3007
  • fax-no: +886 2 2344 2513
  • fax-no: +886 2 2395 5671
  • e-mail: [email protected]
  • nic-hdl: HN27-AP
  • mnt-by: MAINT-TW-TWNIC
  • last-modified: 2011-08-22T06:04:01Z
  • inetnum: 59.127.0.0 - 59.127.255.255
  • netname: HINET-NET
  • descr: Chunghwa Telecom Co.,Ltd.
  • descr: No.21-3, Sec. 1, Xinyi Rd., Taipei 10048, Taiwan, R.O.C.
  • descr: Taipei Taiwan
  • country: TW
  • admin-c: HN184-TW
  • tech-c: HN184-TW
  • mnt-by: MAINT-TW-TWNIC
  • changed: [email protected] 20051020
  • status: ASSIGNED NON-PORTABLE
  • person: HINET Network-Adm
  • address: CHTD, Chunghwa Telecom Co., Ltd.
  • address: Data-Bldg. 6F, No. 21, Sec. 1, Hsin-Yi Rd.,
  • address: Taipei Taiwan
  • country: TW
  • phone: +886-2-2322-3495
  • fax-no: +886-2-2344-2513
  • e-mail: [email protected]
  • nic-hdl: HN184-TW
  • changed: [email protected] 20130307