209.141.34.42 Threat Intelligence and Host Information
General
This page contains threat intelligence information for the IPv4 address 209.141.34.42 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.
Potentially Malicious Host 🟡 40/100
Host and Network Information
-
Tags: blacklist, botnet, cyber security, ioc, malicious, Malicious IP, mirai, Nextray, phishing, scan, smb, tcp
-
View other sources: Spamhaus VirusTotal
- Country: United States
- Network:
- Noticed: 33 times
- Protocols Attacked: ntp
- Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
- Passive DNS Results: chywrqm.biz dwffeoi.biz sbzdghs.biz szickme.biz mvrtrqz.biz zzmrtxq.biz bllvuut.biz qryshcm.biz pnehqvt.biz qlbzjwv.biz bdkbyny.biz nwyrmiu.biz ukwvuly.biz nwryamn.biz npdfqfq.biz kaycdkg.biz avrrtus.xyz dvxtcuq.xyz wyiehgd.xyz xeqrhvf.xyz cduihrm.xyz tmguokd.xyz svjgubl.xyz cbizlyl.xyz vziywjp.xyz mzocfys.xyz hdiztrs.xyz zwbbzhr.xyz hrgacxw.xyz birhrqq.xyz lujtyor.xyz pkpemvc.xyz euydiie.xyz jcroqep.xyz rxgcegq.xyz reqeyig.xyz wjnwfxj.biz wasgrxg.biz cngamdw.biz sahqsuc.biz sfbtrlx.biz inlvfgn.biz zoaamhb.biz ywlpixl.biz igxzdou.biz bihxqng.biz uwsgwyf.biz owcgzfh.biz eyurzqp.biz nnmgwpv.biz edipbpn.biz xiymkrt.xyz wtqnuf.xyz xiwjfx.xyz tgnpgrk.xyz dhrmdfz.xyz cbhyjm.xyz cunwllc.xyz mgikzo.xyz mxvdpgy.xyz hcvoaf.xyz lhjukri.xyz liiwtnh.xyz zavjjax.xyz iyllxka.xyz qfiaws.xyz qubfpgk.xyz lfavsd.xyz ypzfwvg.xyz jtvqfo.xyz odozdn.xyz olforzc.xyz ucfzzjv.xyz edyybor.xyz nnkiviw.xyz kzsjhjk.xyz rzkeknd.xyz kunbkhj.xyz rokchfx.xyz feihvps.xyz dxjnvu.biz xdoujd.biz dpmjex.biz xfxwnf.biz crdeqc.biz duuyvq.biz zsutuq.biz lsfhpy.biz ymexrr.biz fmndxt.biz cbafwm.biz husgaj.biz lchzxk.biz yiguvn.biz lirvjn.biz lmndev.biz vlgjol.biz tgdwsc.biz etvpen.biz qrnkjf.biz xawnqo.biz jhszqs.biz klfqht.biz dkhqry.biz ftrrwk.biz iixnfx.biz yejady.biz yqwgke.biz jgladk.biz ogaoyd.biz elpxom.biz kuurzc.biz tzfzvt.biz cfbtxw.biz ddxnbu.biz qkethx.biz klwdia.biz biucao.shop byieng.shop ancwdj.shop www.ancwdj.shop
Open Ports Detected
Map
Whois Information
- NetRange: 209.141.32.0 - 209.141.63.255
- CIDR: 209.141.32.0/19
- NetName: PONYNET-04
- NetHandle: NET-209-141-32-0-1
- Parent: NET209 (NET-209-0-0-0-0)
- NetType: Direct Allocation
- OriginAS: AS53667
- Organization: FranTech Solutions (SYNDI-5)
- RegDate: 2011-01-27
- Updated: 2012-03-25
- Ref: https://rdap.arin.net/registry/ip/209.141.32.0
- OrgName: FranTech Solutions
- OrgId: SYNDI-5
- Address: 1621 Central Ave
- City: Cheyenne
- StateProv: WY
- PostalCode: 82001
- Country: US
- RegDate: 2010-07-21
- Updated: 2024-11-25
- Ref: https://rdap.arin.net/registry/entity/SYNDI-5
- OrgAbuseHandle: FDI19-ARIN
- OrgAbuseName: Dias, Francisco
- OrgAbusePhone: +1-778-977-8246
- OrgAbuseEmail: fdias@frantech.ca
- OrgAbuseRef: https://rdap.arin.net/registry/entity/FDI19-ARIN
- OrgTechHandle: FDI19-ARIN
- OrgTechName: Dias, Francisco
- OrgTechPhone: +1-778-977-8246
- OrgTechEmail: fdias@frantech.ca
- OrgTechRef: https://rdap.arin.net/registry/entity/FDI19-ARIN
- NetRange: 209.141.34.0 - 209.141.34.255
- CIDR: 209.141.34.0/24
- NetName: BUYVM-US-209-141-34-0-24
- NetHandle: NET-209-141-34-0-1
- Parent: PONYNET-04 (NET-209-141-32-0-1)
- NetType: Reallocated
- OriginAS:
- Organization: BuyVM Services (BS-28)
- RegDate: 2011-08-14
- Updated: 2011-08-14
- Ref: https://rdap.arin.net/registry/ip/209.141.34.0
- OrgName: BuyVM Services
- OrgId: BS-28
- Address: 55 S. Market Street, Suite 1090
- City: San Jose
- StateProv: CA
- PostalCode: 95113
- Country: US
- RegDate: 2011-08-14
- Updated: 2011-09-24
- Ref: https://rdap.arin.net/registry/entity/BS-28
- OrgTechHandle: FDI19-ARIN
- OrgTechName: Dias, Francisco
- OrgTechPhone: +1-778-977-8246
- OrgTechEmail: fdias@frantech.ca
- OrgTechRef: https://rdap.arin.net/registry/entity/FDI19-ARIN
- OrgAbuseHandle: FDI19-ARIN
- OrgAbuseName: Dias, Francisco
- OrgAbusePhone: +1-778-977-8246
- OrgAbuseEmail: fdias@frantech.ca
- OrgAbuseRef: https://rdap.arin.net/registry/entity/FDI19-ARIN
Links to attack logs
awsjap-ntp-bruteforce-ip-list-2021-08-07 ****** ntp-bruteforce-ip-list-2021-08-13 awsjap-ntp-bruteforce-ip-list-2021-08-13 bruteforce-files-list-2021-02-18 awsjap-ntp-bruteforce-ip-list-2021-08-08 ****** ****** awsjap-ntp-bruteforce-ip-list-2021-02-10
Share on: