213.202.225.111 Threat Intelligence and Host Information

Share on:
Aug 09, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 213.202.225.111 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 10/100

Host and Network Information

  • View other sources: Spamhaus VirusTotal

  • Country: Germany
  • Network: AS24961 myloc managed it ag
  • Noticed: 1 times
  • Protcols Attacked: Anonymous Proxy
  • Passive DNS Results: events-rosenheim.de www.events-rosenheim.de multinova.at webmail.mwk-biogas.com vitalpilzen.at www.vitalpilzen.at www.multinova.uk www.tai-ping.de biool.de wiedemann-fahrzeugtechnik.at trailer-line.at taiwoo-chinarestaurant.de anhaenger-bauteile.de anhaengerbauteile.at ef-zurrgurte.at e-f-spanngurte.at leistung-durch-ernaehrung.de w-ft.de alkofahrzeugtechnik.at uphoff.org mwk-bionik.com anhaenger-bauteile-discount.com mwk-handels-gmbh.com anhaenger-bauteile.com multinova.uk trailer-line.com mwk-bionik-sales.com www.ctr-computer.de ctr-computer.de rott-mtr.de arts-of-mea.com www.arts-of-mea.com www.technoring.de www.sparo-electronic.de technoring.de www.biool.de www.segway-rosenheim.de www.rott-mtr.de develop.mwk-bionik.de vitalpilzforum.de www.vitalpilzforum.de www.urschitz.de wir-verkaufen-deine-immobilie.online www.mikaled.de mikaled.de urschitz.de biosol.mwk-bionik.de amd-net.de www.amd-net.de www.pixelkorb.de ctr-itshop.de www.ctr-itshop.de www.ldb-mwk.de ldb-mwk.de www.sieger-huber.de ctr-edv.de mx2.ctr-computer.de srv1438.dedi.server-hosting.expert sieger-huber.de sbneumann.de www.sbneumann.de www.joachim-darjes-strasse-jena.de joachim-darjes-strasse-jena.de xn–glcksrolle-erlangen-69b.de www.ctr-edv.de panel.srv1438.dedi.server-hosting.expert www.braeunungsland.de mwk-bionikshop.de www.mwk-bionikshop.de www.alko-fahrzeugtechnik.at alko-fahrzeugtechnik.at hundertpixel.de www.anhaenger-bauteile.de anhaengerbauteile-discount.com my-kaffee-ling-zhi.de reishi-lingzhi-kaffee.de dgtmuenchen.de labor-uphoff.mwk-bionik.de mwk-bionik.de www.mwk-bionik.de www.wetprotect-shop.de wetprotect-shop.de www.uphoff-gmbh.de uphoff-gmbh.de www.vitalpilze.ch vitalpilze.ch pixelkorb.de

Malware Detected on Host

Count: 11 9f0e298828797e17694baf12544651cfc2b5f251b980da5c8b8ec7bd76ba614c 58f81b910bdf1f5d3c4b600c25e62241fc5022e519c3be7d8724916b2af91eef cd5d042fd14f2e823e12fc39b59aaa2cfdb8f7cb9598718595f03bb4fbf5850f 9c822d7db80704493e36e9d60e29df3aa6b8677533e642b289b5db1d9ba4ae21 b515fc3f5261c555f0c5abfc8f86406857ffb436b3edc00d577f092849227b48 cb9b5de24abc07c35239d070817df4605ef0da6adae22d3e3cfe9ba3dff9dea6 11dccdac82b04bb907a07be52a76dfae22b0513c12ebd9553f5f85a55d47f528 ce1e5faf6908fdbb186660772f855fe952af03dc72538d02aad80f9af2561b19 15bd34c11aba1ef887bb085dbddb7c81cd6afad3e0eb1ce0da7e7d1266bd97f8 2c31efdd18d58b8997c5c0c26075f16cf608276b7a8b74a8df966248f48eb133

Open Ports Detected

22

Map

Whois Information

  • inetnum: 213.202.192.0 - 213.202.255.255
  • netname: DE-MYLOC-DUS-20021021
  • country: DE
  • org: ORG-MMIA3-RIPE
  • admin-c: MOPS-RIPE
  • tech-c: MOPS-RIPE
  • status: ALLOCATED PA
  • mnt-by: MYLOC-MNT
  • mnt-by: RIPE-NCC-HM-MNT
  • created: 2020-11-04T10:31:11Z
  • last-modified: 2020-11-04T10:31:11Z
  • organisation: ORG-MMIA3-RIPE
  • org-name: myLoc managed IT AG
  • country: DE
  • org-type: LIR
  • address: Am Gatherhof 44
  • address: 40472
  • address: Düsseldorf
  • address: GERMANY
  • phone: +4921161708110
  • fax-no: +4921161708111
  • admin-c: MOPS-RIPE
  • tech-c: MOPS-RIPE
  • abuse-c: MOPS-RIPE
  • mnt-ref: MYLOC-MNT
  • mnt-by: RIPE-NCC-HM-MNT
  • mnt-by: MYLOC-MNT
  • created: 2019-10-28T10:48:29Z
  • last-modified: 2021-02-09T10:11:49Z
  • role: myLoc NOC
  • address: myLoc managed IT AG
  • address: Network Operations & Services
  • address: Am Gatherhof 44
  • address: 40472 Duesseldorf DE
  • admin-c: PHAN
  • tech-c: PHAN
  • tech-c: DDO
  • tech-c: JOH
  • tech-c: NIL
  • tech-c: STH
  • tech-c: KT3550-RIPE
  • nic-hdl: MOPS-RIPE
  • abuse-mailbox: [email protected]
  • mnt-by: MYLOC-MNT
  • created: 2013-02-11T16:38:10Z
  • last-modified: 2022-07-08T14:48:44Z
  • route: 213.202.192.0/18
  • descr: myLoc managed IT AG
  • origin: AS24961
  • mnt-by: MYLOC-MNT
  • created: 2017-02-02T17:04:52Z
  • last-modified: 2017-02-02T17:06:25Z

Links to attack logs

anonymous-proxy-ip-list-2023-08-08