217.12.204.114 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 217.12.204.114 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 34/100

Host and Network Information

• Tags: file score, file type, low risk, ms windows, none related, pe32, pexe, related pulses, ssl certificate, tags none, whois, whois record, yara detections

• View other sources: Spamhaus VirusTotal

• Contained within other IP sets: hphosts_emd

• Country: Ukraine
• Network:
• Noticed: 2 times
• Protocols Attacked: spam
• Countries Attacked: United States of America

Malware Detected on Host

Count: 1825 659e20206fc1c37be5132c4dc9d2bcc7c4af25420dee01651dee5057276dde9b 9e8b3d4af9ab133147d7ad873fe01fd1676d5c1ebbb8cd3d2ba31a9db58cac52 c32b374df687b56413b88a8d31750e607ca2d146493faecb12afdf1470665ca5 75306686eb3d77fe4185a7005c51a0f688bc9f6f2dfcb98044f9762a175dc4f9 83a6953b3062364b4897593789a8195d93a2c399913dc1fae77b1ab415137f94 f1e107d0755842fd5ac3f758a19fc98b150bbc0ea215c0e8d1611e8030af46af 3faba20928a28e0ef6e5331c035cfe8b878ecd365047f17ca2d61b158e4f67d1 a7912a9c2d719ffb95e3b733845b574f6aefa1b0b8a5c67feba47a2f440f4668 10de6e3785ae9e2165757e7e7055d527d6ea029b6c19e13a0f55860b332ec064 f191e26487f9c001b2910a1ce5ef0b029ea842754057dbc54d90d77936c5a2eb

Map

Links to attack logs

forum-spam-ip-list-2014-12-13 ****** ****** forum-spam-ip-list-2014-12-11 ******