198.245.61.105 Threat Intelligence and Host Information

Apr 02, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 198.245.61.105 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 60/100

Host and Network Information

  • Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110.004 - Credential Stuffing, T1110 - Brute Force

  • Tags: cowrie, cyber security, ioc, malicious, Nextray, phishing, ssh

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: haley_ssh

  • Country: Canada
  • Network:
  • Noticed: 32 times
  • Protocols Attacked: SSH
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: k2pool.vip stuhost.codes verhomeland.net jailbaitfashion.net

Malware Detected on Host

Count: 4 387a4ff8895a49a46eaa8e4f84bbc598a788f9029efbc7fd3d0fce1c274b30c6 0eb6a98886096f56db7e497b575de2e93bc8e6eade942a531ff18531766eb53b d29ae1e0fbf98975eb854ba81074c314d57ce90943b8456198727440a4641d5d 40e2f20cef7de057d4164289c083fccf1bb1d31a82cfa1612d402a45ff842c90

Map

Whois Information

Links to attack logs

****** ****** ****** bruteforce-ip-list-2020-12-26

Share on: