41.74.131.104 Threat Intelligence and Host Information
General
This page contains threat intelligence information for the IPv4 address 41.74.131.104 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.
Potentially Malicious Host 🟡 50/100
Host and Network Information
-
Tags: cyber security, ioc, malicious, Nextray, phishing
-
View other sources: Spamhaus VirusTotal
- Country: Cabo Verde
- Network:
- Noticed: 30 times
- Protocols Attacked: ssh
- Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Malware Detected on Host
Count: 4 becb61c579ac70cedf424f77c5ab40dee7422b7403428a658f7ac570e4dd04db d86256a639b9b877e1eba3134ff5df8410e6b44a451e059ebd259a36c8711bf0 e47b29ca024d94423605bbcebbae4de5a1f4354be3d4853828905ddbe60a980d 82b6a0dd572f0fc993b9c013413003aa416a5cd0a04b185498189ed1448e0280
Open Ports Detected
CVEs Detected
CVE-2016-10735 CVE-2018-14040 CVE-2018-14041 CVE-2018-14042 CVE-2024-6531
Map
Whois Information
- inetnum: 41.74.128.0 - 41.74.135.255
- netname: DSL5
- descr: CVMultimedia
- org: ORG-CVTS1-AFRINIC
- admin-c: DD48-AFRINIC
- tech-c: YM21-AFRINIC
- tech-c: DD48-AFRINIC
- status: ASSIGNED PA
- mnt-by: CVTS1-MNT
- mnt-lower: CVTS1-MNT
- parent: 41.74.128.0 - 41.74.143.255
- organisation: ORG-CVTS1-AFRINIC
- org-name: CABO VERDE TELECOM, S.A
- org-type: LIR
- country: CV
- address: Rua Cabo Verde Telecom, Várzea, CP 220
- address: Praia
- phone: tel:+238-260-92-51
- admin-c: DD48-AFRINIC
- admin-c: AS213-AFRINIC
- tech-c: DD48-AFRINIC
- tech-c: YM21-AFRINIC
- mnt-ref: AFRINIC-HM-MNT
- mnt-ref: CVTS1-MNT
- mnt-by: AFRINIC-HM-MNT
- person: Denivaldo Delgado
- nic-hdl: DD48-AFRINIC
- address: Rua Cabo Verde Telecom, V�rzea, CP 220
- address: Praia
- address: Cabo Verde
- phone: tel:+238-350-36-03
- mnt-by: GENERATED-YQ0OP6M5HVK8R8RMSUUBTHCPQKBMDOHF-MNT
- person: Yannick Monteiro
- address: Rua Cabo Verde Telecom
- address: Praia
- address: Cape Verde
- phone: tel:+238-350-39-33
- nic-hdl: YM21-AFRINIC
- mnt-by: GENERATED-IMUYIUQ5MC2830PK8SMHI6J35CT0IXUM-MNT
- route: 41.74.128.0/21
- origin: AS37517
- descr: CVMultimedia3105202008
- mnt-by: CVTS1-MNT
Links to attack logs
****** ****** vultrparis-ssh-bruteforce-ip-list-2022-12-28 ******
Share on: