41.59.87.86 Threat Intelligence and Host Information

Share on:

Apr 08, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Potentially Malicious Host 🟡 45/100

Host and Network Information

Tags: Malicious IP, Nextray, Port scan, blacklist, botnet, bruteforce, cyber security, digital ocean, ioc, malicious, mirai, mssql, nmap, phishing, port-scan, scan, smb, tcp, vultr
View other sources: Spamhaus VirusTotal
Country: Tanzania, United Republic of
Network: AS33765 african network information center
Noticed: 36 times
Protcols Attacked: SSH
Countries Attacked: Australia, Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Spain, Turkey, Ukraine, United Kingdom, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: biz295.inmotionhosting.com 104-244-122-63.cprapid.com www.104-244-122-63.cprapid.com

Open Ports Detected

143 2082 2083 2095 21 2222 25 3306 443 465 5432 80 993

CVEs Detected

CVE-2016-20012 CVE-2017-15906 CVE-2018-15473 CVE-2018-15919 CVE-2018-20685 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2019-9193 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617

Map

Whois Information

NetRange: 104.227.0.0 - 104.227.255.255
CIDR: 104.227.0.0/16
NetName: B2NETSOLUTIONS
NetHandle: NET-104-227-0-0-1
Parent: NET104 (NET-104-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: B2 Net Solutions Inc. (BNS-34)
RegDate: 2014-10-17
Updated: 2020-10-14
Ref: https://rdap.arin.net/registry/ip/104.227.0.0
OrgName: B2 Net Solutions Inc.
OrgId: BNS-34
Address: 205-1040 South Service Road
City: Stoney Creek
StateProv: ON
PostalCode: L8E 6G3
Country: CA
RegDate: 2011-10-24
Updated: 2021-09-16
Comment: https://servermania.com
Ref: https://rdap.arin.net/registry/entity/BNS-34
OrgAbuseHandle: NOC13339-ARIN
OrgAbuseName: Network Operations Center
OrgAbusePhone: +1-716-745-4678
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/NOC13339-ARIN
OrgNOCHandle: NOC13339-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-716-745-4678
OrgNOCEmail: [email protected]
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC13339-ARIN
OrgTechHandle: NOC13339-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-716-745-4678
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/NOC13339-ARIN
OrgAbuseHandle: NOC33347-ARIN
OrgAbuseName: Network Operations Center
OrgAbusePhone: +1-716-745-4678
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/NOC33347-ARIN
RAbuseHandle: ABUSE8009-ARIN
RAbuseName: Abuse Department
RAbusePhone: +1-647-846-0310
RAbuseEmail: [email protected]
RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE8009-ARIN

Links to attack logs