212.104.161.141 Threat Intelligence and Host Information

Share on:
May 14, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 212.104.161.141 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 35/100

Host and Network Information

  • Mitre ATT&CK IDs: T1110 - Brute Force
  • Tags: Brute-Force, Bruteforce, Nextray, SSH, cyber security, ioc, malicious, phishing, scanners, ssh, vultr

  • View other sources: Spamhaus VirusTotal

  • Country: Spain
  • Network: AS200845 avatel & wikiker telecom s.l.
  • Noticed: 7 times
  • Protcols Attacked: ssh
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 1 208011b2462f86a86ea3dee9dffd182fb52929c638762e1c5f01b212a19c7a63 221ff8793e957c80cce4c14383dd0cf6b9b411f3a2061e014c65d24be7499e94 df0d0bf321a4a5d64c1edc9d34520b5cd372a087297aed047d8d67f707f57d7a 37943834bf4d591f9f0c339affc7d524c0dfee4fc63b7586ee178ea14f8a1d9d b889f18eeeaf0643d60a7eda79e3adbb364bb4f848c371788016d8c4f9f4dcc6 ec2dc64367775c73ec74474443d71007305feedd6c63adc604d76e7a2a771bf6 88725da8483fc08a5213aabb200cb8b8d85669cf80afd7214ea1e2c50796934b a96bdacff1031f068ece2f41d76fd33f8748cdfc428d449d847ff5f34d75ec28 7931c2f9c0c0a749f78e0a2b30d761f31fb24a0baa351868dab765850c8a50e8 ae0a73b841a0080a73ef403983ee11c84518d220720b42fe60072f68df7b4725 90ec3e594a240a67902052736ce6b1600f587587cbaa09b30c5660f5f8459e87

Map

Whois Information

  • inetnum: 115.240.0.0 - 115.247.255.255
  • netname: RELIANCEJIO-IN
  • descr: Reliance Jio Infocomm Limited
  • country: IN
  • org: ORG-RJIL1-AP
  • admin-c: RJIL1-AP
  • tech-c: RJIL1-AP
  • abuse-c: AR1022-AP
  • status: ALLOCATED PORTABLE
  • mnt-by: APNIC-HM
  • mnt-lower: MAINT-IN-RELIANCEJIO
  • mnt-routes: MAINT-IN-RELIANCEJIO
  • mnt-irt: IRT-RELIANCEJIO-IN
  • last-modified: 2020-08-19T13:07:29Z
  • irt: IRT-RELIANCEJIO-IN
  • address: Reliance JIO INFOCOMM LTD GHANSOLI INDIA
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: IBSP1-AP
  • tech-c: IBSP1-AP
  • mnt-by: MAINT-IN-RELIANCEJIO
  • last-modified: 2023-05-12T04:22:23Z
  • organisation: ORG-RJIL1-AP
  • org-name: Reliance Jio Infocomm Limited
  • country: IN
  • address: Reliance Coporate IT park LTD
  • address: Ghansoli NaviMumbai
  • phone: +912279670000
  • fax-no: +912279610099
  • e-mail: [email protected]
  • mnt-ref: APNIC-HM
  • mnt-by: APNIC-HM
  • last-modified: 2017-11-15T12:56:20Z
  • role: ABUSE RELIANCEJIOIN
  • address: Reliance JIO INFOCOMM LTD GHANSOLI INDIA
  • country: ZZ
  • phone: +000000000
  • e-mail: [email protected]
  • admin-c: IBSP1-AP
  • tech-c: IBSP1-AP
  • nic-hdl: AR1022-AP
  • abuse-mailbox: [email protected]
  • mnt-by: APNIC-ABUSE
  • last-modified: 2023-05-12T04:23:24Z
  • role: Reliance Jio Infocomm Limited
  • address: Reliance JIO INFOCOMM LTD GHANSOLI INDIA
  • country: IN
  • phone: +91-44770000
  • e-mail: [email protected]
  • admin-c: RJIL1-AP
  • tech-c: RJIL1-AP
  • nic-hdl: RJIL1-AP
  • mnt-by: MAINT-IN-RELIANCEJIO
  • last-modified: 2016-03-09T23:55:07Z
  • route: 115.243.32.0/21
  • origin: AS55836
  • descr: Reliance Jio Infocomm Limited
  • mnt-by: MAINT-IN-RELIANCEJIO
  • last-modified: 2020-08-14T19:13:18Z