34.120.180.124 Threat Intelligence and Host Information

Jun 19, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 34.120.180.124 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 5/100

Host and Network Information

  • JARM: 29d3fd00029d29d21c42d43d00041df48f145f65c66577d0b01ecea881c1ba

  • View other sources: Spamhaus VirusTotal

  • Country: United States
  • Network: AS396982 google
  • Noticed: 1 times
  • Protocols Attacked: Anonymous Proxy
  • Passive DNS Results: airflow-publisher.jobtome.host mgpyhqtmyayvkqtvvpnq.guitar.gkemanagedcerts.certsbridge.com

Malware Detected on Host

Count: 1 4283777e3d3c6d394633a4ad826f33285bc3f78d068956cd7837e59549cb942b

Open Ports Detected

10001 10134 102 10243 1025 10554 1099 11000 111 1119 122 12345 1250 13 1311 14265 1433 15 1521 16010 16992 17 179 1801 18245 19071 1911 1925 195 1962 2000 20000 2008 20256 20547 2081 2082 2087 21 2111 2121 21379 2154 22 221 2345 2455 2602 264 27015 27017 27210 2761 2806 3001 3110 3268 3269 3301 33060 3388 3406 3498 3551 3566 3689 37215 3749 37777 389 3922 4000 4040 4042 4064 4242 427 43 4321 4369 44158 443 4444 4506 4840 49 4949 50070 5010 502 51235 522 5222 5269 53 5432 54445 548 55554 5672 5801 587 5900 5901 6001 60010 61613 61616 6264 6352 6379 6512 6588 6666 6667 6697 7022 7535 7537 771 789 80 8002 8009 8021 8031 8047 8060 8069 8087 8098 8099 81 8123 8126 8200 8291 83 8333 84 8446 8575 8649 873 88 8871 8881 8888 9019 902 9042 9051 9089 9090 9102 9160 9191 9200 9217 9220 9600 9800 99 992 995 9981

Map

Whois Information

Links to attack logs

anonymous-proxy-ip-list-2024-04-26

Share on: