45.119.212.196 Threat Intelligence and Host Information

Share on:

General

This page contains threat intelligence information for the IPv4 address 45.119.212.196 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Known Malicious Host 🔴 75/100

Host and Network Information

  • Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110.004 - Credential Stuffing, T1110 - Brute Force
  • Tags: Bruteforce, Brute-Force, cowrie, cyber security, ioc, malicious, Nextray, phishing, probing, scanning, ssh, SSH, webscan, webscanner bruteforce web app attack
  • JARM: 2ad2ad0002ad2ad0002ad2ad2ad2ad83c2e51da709c877942c98b10a5e814a

  • View other sources: Spamhaus VirusTotal
  • Contained within other IP sets: blocklist_de, blocklist_de_ssh, blocklist_net_ua, ciarmy, et_compromised, greensnow

  • Country: Vietnam
  • Network: AS131423 branch of long van system solution jsc - hanoi
  • Noticed: 1 times
  • Protcols Attacked: ssh
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: actechsoftware.com dangky5gviettel.net cuongthinhgaminggear.com www.kegachdep.com.vn kegachdep.com.vn www.dangky4gviettel.club thaygiaotinh.edu.vn www.thaygiaotinh.edu.vn daugaotsuno.com.vn suachuadienlanhhanoi1.com www.luatgiakhanh.com luatgiakhanh.com www.seihomax.com seihomax.com www.innovativeshield.com.vn namvietauto.com.vn www.namvietauto.com.vn vaynhanhsieutoc.net www.ncnmedia.vn ncnmedia.vn www.panelpu.vn panelpu.vn daiichihanoi.vn havitext.com www.noithatnewhome.com.vn noithatnewhome.com.vn anduys.com www.anduys.com lapdat-capquangviettel.com www.lapdat-capquangviettel.com minhtampharma.com.vn www.minhtampharma.com.vn www.tritamviet.vn www.hanoicam.com hanoicam.com www.dacsannuirunghoabinh.com dacsannuirunghoabinh.com hoangtusport.com songphat.info www.linhkienhaiso.com 3shousing.com quasinhnhat.net www.quasinhnhat.net thegioinhadat24h.vn dongyongxuong.com.vn hoclaiotoc500.com dailythueency.com dongtrunghathaohadung.com.vn tongdaituvanbhnt.com www.tongdaituvanbhnt.com www.dangky3g4g-viettel.net smartmotor-viettel.com www.smartmotor-viettel.com www.chukyso-viettel.net chukyso-viettel.net www.3shousing.com www.khautrangazone.com www.hamashi.vn gcop.vn www.bionanoplus.vn bionanoplus.vn www.hungmanhchuyenphatnhanh.com hungmanhchuyenphatnhanh.com www.cauthangngockhanh.com number8.vn tienthinhalu.com.vn tamhome.com.vn www.tamhome.com.vn tritamviet.vn vietnameseart.com.vn www.thoson247.com thoson247.com bmplaw.vn www.duhocquangtrung.com.vn duhocquangtrung.com.vn congtynhatminh.com www.congtynhatminh.com thangmaychauau.com.vn setupsieuthi.com www.setupsieuthi.com www.vaynhanhsieutoc.net luanmart.com www.daiichihanoi.vn www.hoangtusport.com vaytiennhanhhaidang.com linhkienhaiso.com www.locuabaosong.com locuabaosong.com banthotamsang.com www.banthotamsang.com www.bmplaw.vn suadinhduongvang.com.vn www.suadinhduongvang.com.vn www.lightup-vn.com lightup-vn.com www.canducphuc.com webhth.com www.setuptm.com www.noithatgodepthachthat.com www.mayxaydungphuthai.com mayxaydungphuthai.com vietimex.biz www.maychebiengocn.com maychebiengocn.com www.thanhconggroup.net thanhconggroup.net www.banthohungthinh.vn banthohungthinh.vn kingmobile.vn www.thietkewebgiare247.com thietkewebgiare247.com cauthangngockhanh.com www.suadiennuocbachkhoa.asia suadiennuocbachkhoa.asia www.icac.vn icac.vn www.baohothoitrang.com.vn baohothoitrang.com.vn forexdaututhongminh.com www.forexdaututhongminh.com tinhtedalat.com.vn www.tinhtedalat.com.vn ducphongmedia.com www.duoclieuhoabinh3s.com duoclieuhoabinh3s.com bob-mc.vn www.bob-mc.vn suachuaelectrolux247.com canducphuc.com azbike.vn www.xonghoibachung.com.vn xonghoibachung.com.vn khuyenmai.invisaligncenter.com.vn khaitruong.invisaligncenter.com.vn www.thachcaotuanhanh.vn thachcaotuanhanh.vn dangky3g4g-viettel.net dangky-3g4gviettel.net www.maylocnuochaiphong.com.vn maylocnuochaiphong.com.vn ngoinhatheky22.com www.ngoinhatheky22.com www.dangky-3g4gviettel.net www.xaydunganphatapc.vn xaydunganphatapc.vn trungtamdienlanhsaoviet.vn parisbellamour.com www.parisbellamour.com dienmayhungtin.com.vn www.dienmayhungtin.com.vn sonoppo.com www.sonoppo.com containerhanoi.com.vn setuptm.com noithatgodepthachthat.com www.cayxadenhoabinh3s.com cayxadenhoabinh3s.com www.hanoipeakbespoke.com hanoipeakbespoke.com diepluccollagenblueocean.com www.diepluccollagenblueocean.com daiichi-life-vietnam.com www.daiichi-life-vietnam.com innovativeshield.com.vn ldtfood.com www.ldtfood.com www.hicoffee.pro hicoffee.pro kyanhfoods.com www.kyanhfoods.com hoaphatsaigongiasi.vn www.banthohungthinh.com banthohungthinh.com www.detox7dayx3.com detox7dayx3.com mizuken.com.vn www.mizuken.com.vn thietbidienpmp.com.vn www.thietbidienpmp.com.vn duongsatthongnhat.vn ulvac.com.vn demo-thietkeweb.com vattucongtrinhhanoi.com www.vattucongtrinhhanoi.com www.xonghoibachung.com xonghoibachung.com vlxdhanoi.vn www.vlxdhanoi.vn thiensamkorea.com www.thiensamkorea.com www.demo-thietkeweb.com www.thegioinhadat24h.vn nhagolongtrong.com www.nhagolongtrong.com www.mita.net.vn mita.net.vn dangky4gviettel.club invisaligncenter.com.vn www.invisaligncenter.com.vn www.xaydungnhahanoi.com xaydungnhahanoi.com inoxquoctehoabinh.cloudpro.vn

Open Ports Detected

22 3069 443 5432 80 8080 8888

CVEs Detected

CVE-2019-11358 CVE-2020-11022 CVE-2020-11023 CVE-2020-23064 CVE-2021-23017 CVE-2021-3618

Map

Whois Information

  • inetnum: 45.119.212.0 - 45.119.215.255
  • netname: LVHN-VN
  • descr: Branch of Long Van System Solution JSC - Hanoi
  • descr: No. 23, 37/2 Dich Vong Str, Dich Vong Ward, Cau Giay, Hanoi
  • admin-c: QDT3-AP
  • tech-c: HG880-AP
  • country: VN
  • mnt-by: MAINT-VN-VNNIC
  • mnt-lower: MAINT-VN-VNNIC
  • mnt-irt: IRT-VNNIC-AP
  • status: ALLOCATED PORTABLE
  • last-modified: 2017-11-18T08:44:41Z
  • irt: IRT-VNNIC-AP
  • address: Ha Noi, VietNam
  • phone: +84-24-35564944
  • fax-no: +84-24-37821462
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: NTTT1-AP
  • tech-c: NTTT1-AP
  • mnt-by: MAINT-VN-VNNIC
  • last-modified: 2017-11-08T09:40:06Z
  • person: Ha Giang
  • address: Long Van System Solution JSC
  • country: VN
  • phone: +84-24-62820238
  • e-mail: [email protected]
  • nic-hdl: HG880-AP
  • mnt-by: MAINT-VN-VNNIC
  • last-modified: 2017-11-18T08:45:53Z
  • person: Quach Dinh Toan
  • address: Long Van System Solution JSC
  • country: VN
  • phone: +84-24-62820238
  • e-mail: [email protected]
  • nic-hdl: QDT3-AP
  • mnt-by: MAINT-VN-VNNIC
  • last-modified: 2017-11-18T08:45:32Z
  • route: 45.119.212.0/24
  • origin: AS131423
  • descr: Vietnam Internet Network Information Center (VNNIC)
  • mnt-by: MAINT-VN-VNNIC
  • last-modified: 2022-03-16T08:06:58Z

Links to attack logs

vultrmadrid-ssh-bruteforce-ip-list-2023-03-11 vultrmadrid-ssh-bruteforce-ip-list-2023-04-24 dofrank-ssh-bruteforce-ip-list-2023-06-06 vultrmadrid-ssh-bruteforce-ip-list-2023-05-28 dofrank-ssh-bruteforce-ip-list-2023-07-14 bruteforce-ip-list-2023-04-17 bruteforce-ip-list-2023-04-23 vultrmadrid-ssh-bruteforce-ip-list-2023-05-29 vultrmadrid-ssh-bruteforce-ip-list-2023-06-15 digitaloceanfrankfurt-ssh-bruteforce-ip-list-2023-08-14 digitaloceanfrankfurt-ssh-bruteforce-ip-list-2023-08-11 ** dotoronto-ssh-bruteforce-ip-list-2023-07-10 vultrmadrid-ssh-bruteforce-ip-list-2023-03-24 dofrank-ssh-bruteforce-ip-list-2023-04-20 vultrmadrid-ssh-bruteforce-ip-list-2023-06-25 dofrank-ssh-bruteforce-ip-list-2023-07-08 vultrmadrid-ssh-bruteforce-ip-list-2023-07-17 vultrmadrid-ssh-bruteforce-ip-list-2023-05-13 dofrank-ssh-bruteforce-ip-list-2023-06-18 digitaloceanfrankfurt-ssh-bruteforce-ip-list-2023-08-02 dolondon-ssh-bruteforce-ip-list-2023-07-13 dofrank-ssh-bruteforce-ip-list-2023-04-12 dotoronto-ssh-bruteforce-ip-list-2023-04-20 vultrmadrid-ssh-bruteforce-ip-list-2023-07-08 vultrwarsaw-ssh-bruteforce-ip-list-2023-07-25 vultrmadrid-ssh-bruteforce-ip-list-2023-05-05 dotoronto-ssh-bruteforce-ip-list-2023-05-10 vultrmadrid-ssh-bruteforce-ip-list-2023-05-11 vultrmadrid-ssh-bruteforce-ip-list-2023-06-14 vultrmadrid-ssh-bruteforce-ip-list-2023-03-31 vultrmadrid-ssh-bruteforce-ip-list-2023-04-20 dofrank-ssh-bruteforce-ip-list-2023-06-28 dofrank-ssh-bruteforce-ip-list-2023-07-04 vultrmadrid-ssh-bruteforce-ip-list-2023-04-19 bruteforce-ip-list-2023-07-12 dosing-ssh-bruteforce-ip-list-2023-07-14 vultrwarsaw-ssh-bruteforce-ip-list-2023-07-17 vultrmadrid-ssh-bruteforce-ip-list-2023-03-14 bruteforce-ip-list-2023-04-21 dofrank-ssh-bruteforce-ip-list-2023-05-14 vultrmadrid-ssh-bruteforce-ip-list-2023-05-19