23.94.200.220 Threat Intelligence and Host Information

Share on:

Dec 25, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 23.94.200.220 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 40/100

Malware Detected on Host

Count: 4 c289203cdfcd4bf834befbdc4cd500f54b1e9ec02137a20eb862ed91c23b0995 a68955f837da9fb8e3707ea830996d556fbef62db4bf378b13d1957a06456387 18857eb69f10af09e9dd08d1595d4935cb0caecd0bfa60de2a9ee356d0de08ae 9c58fa22f21aa228c02dee8e1a47bfcf8ea8ab7caf1f3a8efacbaa27d1639ed2

Open Ports Detected

22 8016

CVEs Detected

CVE-2016-20012 CVE-2017-15906 CVE-2018-15473 CVE-2018-15919 CVE-2018-20685 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408 CVE-2023-51384 CVE-2023-51385

Map

Whois Information

NetRange: 23.94.0.0 - 23.95.255.255
CIDR: 23.94.0.0/15
NetName: CC-16
NetHandle: NET-23-94-0-0-1
Parent: NET23 (NET-23-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS36352
Organization: ColoCrossing (VGS-9)
RegDate: 2013-08-16
Updated: 2013-08-16
Ref: https://rdap.arin.net/registry/ip/23.94.0.0
OrgName: ColoCrossing
OrgId: VGS-9
Address: 325 Delaware Avenue
Address: Suite 300
City: Buffalo
StateProv: NY
PostalCode: 14202
Country: US
RegDate: 2005-06-20
Updated: 2023-05-11
Ref: https://rdap.arin.net/registry/entity/VGS-9
OrgTechHandle: NETWO882-ARIN
OrgTechName: Network Operations
OrgTechPhone: +1-800-518-9716
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/NETWO882-ARIN
OrgAbuseHandle: ABUSE3246-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-800-518-9716
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3246-ARIN
OrgNOCHandle: NETWO882-ARIN
OrgNOCName: Network Operations
OrgNOCPhone: +1-800-518-9716
OrgNOCEmail: [email protected]
OrgNOCRef: https://rdap.arin.net/registry/entity/NETWO882-ARIN
NetRange: 23.94.200.0 - 23.94.200.255
CIDR: 23.94.200.0/24
NetName: CC-23-94-200-0-24
NetHandle: NET-23-94-200-0-1
Parent: CC-16 (NET-23-94-0-0-1)
NetType: Reassigned
OriginAS: AS36352
Organization: RackNerd LLC (RL-872)
RegDate: 2023-08-23
Updated: 2023-08-23
Ref: https://rdap.arin.net/registry/ip/23.94.200.0
OrgName: RackNerd LLC
OrgId: RL-872
Address: 10602 N. Trademark Pkwy Suite 511
City: Rancho Cucamonga
StateProv: CA
PostalCode: 91730
Country: US
RegDate: 2021-10-20
Updated: 2022-03-02
Comment: https://www.racknerd.com
Comment: Support is available 24x7 at [email protected]
Comment: Report abuse to: [email protected]
Ref: https://rdap.arin.net/registry/entity/RL-872
OrgAbuseHandle: RAD128-ARIN
OrgAbuseName: RackNerd Abuse Department
OrgAbusePhone: +1-888-881-6373
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/RAD128-ARIN
OrgTechHandle: RACKN3-ARIN
OrgTechName: RackNerd NOC
OrgTechPhone: +1-888-881-6373
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/RACKN3-ARIN

Links to attack logs

digitaloceanlondon-ssh-bruteforce-ip-list-2023-12-25