213.239.242.238 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 213.239.242.238 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 5/100

Host and Network Information

• View other sources: Spamhaus VirusTotal

• Country: Germany
• Network: AS24940 hetzner online gmbh
• Noticed: 1 times
• Protcols Attacked: SSH
• Passive DNS Results: classyplan.app ns1.graphox.us eoda-multigaming-clan.de birolawfirm.com www.eoda-multigaming-clan.de coroniker.at fluffybread.cf fluffybread.cf design-uhren.net thw-rb-biberach.de www.design-uhren.net design-uhren.net ns1.konglomerat.ch ns2.b2go.cloud ruetz.info alpenbett.com steindorf.com schneeinfo.com allinklusive.com almhuetten.com 5-ng.de 1-nl.de exclusive-lab.com szenevienna.com luxveranstaltungen.de millstatt.com bozen.com badtatzmannsdorf.com lanersbach.com klangspuren.com emotionalmaps.de ehrwald.com skiwm.com alpenregion.com finkenberg.com eizellvorsorge.org winterferien.at stanton.at europasportregion.com presseggersee.com rodelinfo.com badeseen.com argealp.com austria-travel.com coffeeandroll.com grundlsee.com cxendesktop.de sprachferien.com matrei-osttirol.com innsbruck-tourismus.com forgottenforecast.com mariaalm.com liebtraum.com oetztal-arena.com visit-austria.com altenmarkt-zauchensee.com radhotel.com visiteuropa.com alpenraum.com alpine-hotel.com drau.at oesterreichurlaub.com suedtirol-wanderhotels.com seminarhotels.com rundreise.com oetztalarena.com hermagor.com badaussee.com alpenwinter.com kaernten-info.com coffee-and-roll.com zillertalinfo.com lermoos.com koessen.com pillerseetal.com sambaincelle.de altaussee.com wirtshaeuser.com coffee-and-roll.at naturarena-kaernten.com pricetrader.de poertschach.com alpenhotels.com besterpreis.com europareise.com alpinewellness.at skitickets-online.com sommerurlaub.com gasthoefe.com mountain.at tourmax.com traveltothealps.com travelarena.com seeboden.com kirchbergintirol.com winterferien.com innsbruck-tourism.at rube.druwe.net ns1.unique-internet.de ns2.tiborschrag.de ns2.tabak-suche.de ns1.paneck.de ns7.snhosting.de ns4.dlivio.eu ns4.buerodienstleistungen-langenbrink.de ns1.nimeserver.com ns2.gekkofyre.io ns1.pferde-gala.org ns4.3w-uranos.de dns4.itnetsolution.com ns2.zendler-systeme.de ns2.ffw-buechenbronn.de n1.badns.de a.dns.wittenberg.onl ns1.sco.az ns2.stadtraumev.de ns2.rurcoast-design.de ns1.naboto.com dns3.ternum.de ns4.webhut.es ns2.blake-hofer.net ns2.dhofer.net ns2.hofer-blake.net ns2.kk-business.info ns1.niklasgoerke.de ns1.pandonym.com nameserver1.chaosrp.de ns1.your-dns.net www.ns1.smartwebtechnologies.eu ns2.yoga-4-kids.ch ns2.yoga-by-lara.ch ns2.yoga-4-teens.ch ns1.yoga-4-teens.ch ns1.yoga-by-lara.ch ns1.yoga-4-kids.ch s-ns1.mojoitservices.eu a.ns.wrns.biz ns2.cbm.koeln ns2.sohei.blog ns1.sohei.blog ns1.wilke.systems ns4.fncp.ru www.innsbruck-tourismus.com ns1.happyhosting.gr ns2.einspunkt.de ns2.derwassermann.info ns1.root-core.net first-ns.netlope.de ns2.inverto-webhotel.dk ns1.goettlicher.net ns1.blueoceanhosting.ch theroboreview.com ns2.rentalking.de ns4.net-logix.de ns1.caballo-horsemarket.com ns1.pbi.io ns1.nabiona.ch ns2.admin.taurus.feelia.de ns1.swissphilanthropyacademy.ch ns2.blumenkristalle.de ns5.cwccargo.co.za ns1.telsso.de ns1.back-ns.de ns1.nomrem.com ns2.adx-server.com dns1.jaegginet.ch ns1.studio.az ns2.blumenkristall.de ns03.casp.ru tuxertal.com ns2.osalliance.com ns1.techcultivation.de ns1.bilgeri-informatik.ch ns2.sohei.store ns2.nvw.be dns1.flueckiger-optik.ch ns2.ttc-guerzenich.de saalbach-hinterglemm.com ns1.shukurzade.com ns2.moments.pl ns2.rtr.at ns2.godsofwar.de ns2.gfconcept.de ns01.castible.de ns1.volpe-it.de ns1.schlierholz.ch dns2.squeakyhost.com ns2.zellverfuegbareswasser.com ns6.unique-internet.de ns2.stevebot.at ns1.hobbycarrier.de ns1.woland.me ns1.dnsflotte.de ns1.ientu.net ns2.politzentrale.de ns-h1.msrz.de ns1.pegasus-server.de ns1.firstex.de ns1.hess-treuhand.ch rube.druwe.dev ns1.twoday.net ns3.box.mymailhost.de ns1.katharina-rivilis.de ns1.elektro-andres.ch ns2.ksm-mc.com ns2.ksm-mc.de ns2.pronetedv.com ns2.blumenkristalle.com ns2.mfits.de ns2.buehler.at ns2.welcheswassertrinkstdu.de ns1.fox.az ns1.citybrand.az ns01.tms-it.de itvss98.sfns.de b.ns.bit-strickerei.de gettyimages.com.pe dns2.squeakydev.ovh ns2.xn–zellverfgbareswasser-wec.de dns2.squeakymusic.ovh ns1.poincare.eu ns1.sokkeninsandalen.eu ns1.smartwebtechnologies.eu ns2.perfekteswasser.com ns2.derwassermann.academy ns3.meissner-it.de ns2.admingate.net dns2.miloxi.net ns2.volkermauel.de ns2.startitupkit.de ns1.trustedwatch.info ns2.chris.cologne ns2.pronetedv.de ns1.nomrem.az ns1.bachmanndesign.de ns2.cso-web.at ns2.wttv-dueren.de ns1.swisskalk.ch ns2.modellbaumauel.de ns2.bitmammut.de ns3.elleneleighrealestatereferrals.com dns.cytracon1.info ns1.biehler-stiftungen.ch ns1.spreendigital.net ns1.fuchs-cloud.de ns3.ka-mediendesign.de ns2.plattenjunkie.de dns-01.ns.hanobox.net ns1.webmediatec.net ns1.latson.de ns1.sternendreck.de ns1.kerber-softwareberatung.de 3dih.gg ns1.euronet.az ns1.dmknet.de ns11.logfile.at ns2.einspunkt.com ns2.geschnappt.com ns1.hoppl.in ns1.xenox-systems.net ns1.ypromo.ru etheryield.com ns1.groware.hu dns1.verfriemlt.de ns2.x-cloud24.de ns4.uhlmann.world ns2.kk-business.net spektar.ba ns1.edw.ro ns1.manbiz.gr apiassist.lesr.solutions gettyimages.com.mx ns1.bjcreative.de ns2.tecbit.eu ns1.cpanelhosting.africa ns2.wimme.net ns.qubits.ch ns1.documentfoundation.org assist.lesr.solutions ns2.inheaden.com ns2.kk-business.org ns2.pridelab.ru ns.webnerds.gr NS2.ALSERV.DE ns2.adatahost.net ns1.ailove.ru ns2.adatahost.com gettyimages.com.ar ns1.bluetopia.pt name4h.modellarchiv.ch ns1.cipserver.net ns1.jskinternet.pl ns1.first-ns.de

Malware Detected on Host

Count: 1 02b0aaf971cf58cf354887f30b339b0f5a8002849b535fab8a474491d9667692

Open Ports Detected

53

Map

Whois Information

• inetnum: 213.239.242.236 - 213.239.242.239
• netname: HOS-14498
• descr: HOS-14498
• country: DE
• admin-c: HOAC1-RIPE
• tech-c: HOAC1-RIPE
• status: ASSIGNED PA
• mnt-by: HOS-GUN
• created: 2022-01-25T02:06:46Z
• last-modified: 2022-01-25T02:06:46Z
• role: Hetzner Online GmbH - Contact Role
• address: Hetzner Online GmbH
• address: Industriestrasse 25
• address: D-91710 Gunzenhausen
• address: Germany
• phone: +49 9831 505-0
• fax-no: +49 9831 505-3
• abuse-mailbox: abuse@hetzner.com
• org: ORG-HOA1-RIPE
• admin-c: MH375-RIPE
• tech-c: GM834-RIPE
• tech-c: SK2374-RIPE
• tech-c: MF1400-RIPE
• tech-c: SK8441-RIPE
• tech-c: DD15478-RIPE
• nic-hdl: HOAC1-RIPE
• mnt-by: HOS-GUN
• created: 2004-08-12T09:40:20Z
• last-modified: 2022-11-22T18:33:55Z
• route: 213.239.192.0/18
• descr: HETZNER-RZ-NBG-BLK2
• origin: AS24940
• mnt-by: HOS-GUN
• created: 2003-05-28T16:24:38Z
• last-modified: 2003-05-28T16:24:38Z