216.10.242.18 Threat Intelligence and Host Information

Jun 19, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 216.10.242.18 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 17/100

Host and Network Information

JARM: 15d3fd16d21d21d00042d43d000000fe02290512647416dcf0a400ccbc0b6b
View other sources: Spamhaus VirusTotal

Country: India
Network: AS394695 pdr
Noticed: 1 times
Protocols Attacked: Anonymous Proxy
Passive DNS Results: saukhya.nityaga.com nityaga.com saukhyaclinic.com doctor.nityaga.com api.iimmmumbai.org disha.iimmmumbai.org api.nityaga.com www.babydeveloping.com www.heetu.com heetu.com babydeveloping.com heetu-api.dhisofttech.com saraswatchamber.com www.saraswatchamber.com mauleecreations.com www.mauleecreations.com iimm.org.in www.iimm.org.in www.test.akuner.com test.akuner.com dhisofttech.com www.dhisofttech.com rabiztek.com www.rabiztek.com api-pune.iimm.org.in mumbai.iimm.org.in pune.iimm.org.in iimmmumbai.iimm.org.in api.iimm.org.in whm.216-10-242-18.cprapid.com 216-10-242-18.cprapid.com www.216-10-242-18.cprapid.com www.bmpshrimoney.in www.tezpe.in vijaymultiservices.in allrechargepoint.in bmpshrimoney.in tezpe.in

Open Ports Detected

106 22 3306 443 80 8001 8005 8014 8082 81 82 83 86 88 9000 9001 9002

CVEs Detected

CVE-2015-9251 CVE-2019-11358 CVE-2020-11022 CVE-2020-11023 CVE-2021-23017 CVE-2021-3618 CVE-2023-44487

Map

Whois Information

NetRange: 216.10.240.0 - 216.10.255.255
CIDR: 216.10.240.0/20
NetName: APNIC
NetHandle: NET-216-10-240-0-1
Parent: NET216 (NET-216-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2017-03-14
Updated: 2017-03-14
Ref: https://rdap.arin.net/registry/ip/216.10.240.0
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN

Links to attack logs

Share on: