41.72.192.242 Threat Intelligence and Host Information

Share on:
Jun 07, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 41.72.192.242 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 30/100

Host and Network Information

  • Tags: Nextray, bruteforce, cyber security, digital ocean, ioc, la, lafusioncenter, louisiana, malicious, phishing, telnet, tsec

  • View other sources: Spamhaus VirusTotal

  • Country: Kenya
  • Network: AS30844 liquid telecommunications ltd
  • Noticed: 1 times
  • Protcols Attacked: telnet
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Singapore, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 3 0cb05bdda6a9f4f79a3fcd58653ddc7edf0e253119c5f385eecf52bdd009f94a ecb7a8554e6b4304bc0a0e8513b9a97cd2f60cf02f7cbc1ca14d9f39ac2c260b 0f4f0ee66f281568afbfccc46949f6d41f4dd5a3eaac7e9667e4ba5dfcace27e

Map

Whois Information

  • inetnum: 41.72.192.0 - 41.72.192.255
  • netname: CallKey_Networks
  • descr: CallKey Networks
  • country: KE
  • admin-c: AA110-AFRINIC
  • tech-c: AA110-AFRINIC
  • status: ASSIGNED PA
  • mnt-by: LIQUID-TOL-MNT
  • mnt-lower: LIQUID-TOL-MNT
  • parent: 41.72.192.0 - 41.72.223.255
  • person: Andrew Alston
  • address: Block A, Sameer Business Park,
  • address: Mombasa Road,
  • address: Nairobi
  • address: Kenya
  • phone: tel:+254-20-5000000
  • nic-hdl: AA110-AFRINIC
  • mnt-by: AA110-MNTR
  • route: 41.72.192.0/24
  • descr: Maintainer Liquid Telecommunications Operations Limited
  • origin: AS30844
  • org: ORG-LTOL1-AFRINIC
  • mnt-lower: LIQUID-TOL-MNT
  • mnt-by: AFRINIC-HM-MNT
  • organisation: ORG-LTOL1-AFRINIC
  • org-name: Liquid Telecommunications Operations Limited
  • org-type: LIR
  • country: MU
  • address: 10th Floor,
  • address: Raffles Tower,
  • address: 19 Cybercity
  • address: Ebene
  • phone: tel:+254-733-222204
  • phone: tel:+230-466-7620
  • phone: tel:+263-8677-033306
  • phone: tel:+254-731-033754
  • admin-c: RD10-AFRINIC
  • admin-c: DH19-AFRINIC
  • admin-c: CM53-AFRINIC
  • admin-c: AS116-AFRINIC
  • tech-c: DV5-AFRINIC
  • tech-c: DH19-AFRINIC
  • tech-c: CM53-AFRINIC
  • tech-c: MC69-AFRINIC
  • tech-c: AA110-AFRINIC
  • tech-c: AS116-AFRINIC
  • mnt-ref: AFRINIC-HM-MNT
  • mnt-ref: LIQUID-TOL-MNT
  • mnt-by: AFRINIC-HM-MNT

Links to attack logs

dosing-telnet-bruteforce-ip-list-2021-12-30