37.140.192.145 Threat Intelligence and Host Information

Jun 19, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 37.140.192.145 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 42/100

Host and Network Information

  • Mitre ATT&CK IDs: T1199 - Trusted Relationship, T1498 - Network Denial of Service, T1598 - Phishing for Information

  • Tags: aplicaciones, cuando, despus, eliminar lumma, google chrome, haga, javascript, lumma, macos, malware, microsoft edge, mozilla firefox, paso, please, tenga, trojan, troyano, urls, ventanas mac, windows

  • View other sources: Spamhaus VirusTotal

Malware Detected on Host

Count: 8 34d2728f512eeb4f79f4fae915c9feb18db2717214957d03a5d7058986508e6f a4b08ccac13ad8d2432b31a23cb02463109137dcb493bfc985efe1bca2edec7d c0a37c9b8f52dc23a74f0477baac01fd164220bcbf5f2e8fcecbdee98d532958 e71d56dfcafdacaa0ec40a02047887db5287c3d8aa3318fe9e24805e322967b3 b60004cf3b319182c85d8feeae4d3fc9d9f7cec8dd7740b1f7731f1d21cb11a8 34d32726e259b6de158cd66a0d2dd7e10ea55497a06aa60c9ceff78667da40c0 dacadcb203ee07b3d94403264be3414fe6106d1ef28269668a6c2aa463aa5f6f 7873dddec4a46e7ad104de9b6bd68f590575b7680a1d20b9fe1329d1ad95348f

Open Ports Detected

111 143 21 22 25 3306 443 53 587 80 993 995

Map

Whois Information

  • inetnum: 37.140.192.0 - 37.140.195.255
  • netname: REGRU-NETWORK
  • descr: Reg.Ru Hosting
  • country: RU
  • admin-c: ARP-RIPE
  • tech-c: RGRU-RIPE
  • status: ASSIGNED PA
  • mnt-by: REGRU-MNT
  • mnt-domains: REGRU-MNT
  • mnt-routes: SKYMEDIA-MNT
  • mnt-routes: REGRU-MNT
  • created: 2012-04-27T12:50:37Z
  • last-modified: 2022-03-21T10:43:44Z
  • role: Reg.Ru Network Operations
  • address: Russia, Moscow, Vassily Petushkova st., house 3, Office 326
  • phone: +7 (495) 580-11-11
  • fax-no: +7 (495) 491-55-53
  • admin-c: ARP-RIPE
  • admin-c: MS55099-RIPE
  • tech-c: ARP-RIPE
  • tech-c: MS55099-RIPE
  • nic-hdl: RGRU-RIPE
  • mnt-by: REGRU-MNT
  • abuse-mailbox: abuse@reg.ru
  • created: 2011-03-30T12:49:27Z
  • last-modified: 2022-11-29T14:58:55Z
  • person: Pavel Arbuzov
  • address: house 3, Vassily Petushkov str., Moscow, Russia, 125476
  • phone: +74955140573
  • nic-hdl: ARP-RIPE
  • mnt-by: REGRU-MNT
  • created: 2011-02-24T13:00:30Z
  • last-modified: 2011-02-24T13:00:30Z
  • route: 37.140.192.0/24
  • descr: Reg.Ru
  • origin: AS197695
  • mnt-by: REGRU-MNT
  • created: 2013-12-31T08:59:59Z
  • last-modified: 2014-02-23T09:57:54Z

Links to attack logs

anonymous-proxy-ip-list-2024-02-01

Share on: