45.12.4.190 Threat Intelligence and Host Information

Share on:
Jun 25, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 45.12.4.190 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 10/100

Host and Network Information

  • Tags: C&C

  • View other sources: Spamhaus VirusTotal

  • Country: Russia
  • Network: AS42632 mnogobyte
  • Noticed: 1 times
  • Protcols Attacked: Anonymous Proxy
  • Passive DNS Results: ncznw6a.com originatalmaker.buzz

Malware Detected on Host

Count: 9 4544175786875551be87bab158d068dc80aaed866a834d2039779a1327d9de33 af91e3aa41ea6be830a78c19e561961261f0dba24da0c6a0f2995ba519d3e2ed ffa6753ac1878343f16047d051fd8a47bbdfe1f40f12cb781a4fc9a5ba70f231 0870a7a8eef719e4e245ab59e53eb39bd1eab44ac68922a8151b69d49f14f0d3 07211dec7aaf7c9b0eb1d1318a97035ed68e6730616e6d3be0534ea2db1064ae a1efefae0b7f7ac59b7bac528cc2d08af6516d87915606f655623234853a1aed 8138ed7580719afa51a14c8e049bd22b8a27e4abca7cf80840feed4a019da0f0 eb762dd89788ed9663f8516d781ebfdcf4327646594851ac3023e0d2da6f3a02 3fc00a815bc3c02ffaa1cdbb4acb9358aa6fd7dcb5db3b6dd9098fd8e5d1d33c

Open Ports Detected

22

Map

Whois Information

  • inetnum: 45.12.4.0 - 45.12.4.255
  • netname: DEDICSH
  • country: RU
  • org: ORG-IHL17-RIPE
  • geoloc: 55.712712 37.688948
  • admin-c: GA11044-RIPE
  • tech-c: GA11044-RIPE
  • status: SUB-ALLOCATED PA
  • mnt-by: mnt-ru-dedicsh-1
  • created: 2022-02-11T17:59:56Z
  • last-modified: 2022-12-12T15:38:39Z
  • organisation: ORG-IHL17-RIPE
  • org-name: Internet Hosting LLC
  • country: RU
  • org-type: LIR
  • address: Novo-rogachevskaya 11a
  • address: 141800
  • address: Dmitrov
  • address: RUSSIAN FEDERATION
  • phone: +74956662234
  • admin-c: AA34010-RIPE
  • tech-c: AA34010-RIPE
  • abuse-c: AR48792-RIPE
  • mnt-ref: mnt-ru-internethosting-1
  • mnt-ref: mnt-ru-dedicsh-1
  • mnt-ref: lir-ru-skystark-1-MNT
  • mnt-by: RIPE-NCC-HM-MNT
  • mnt-by: mnt-ru-internethosting-1
  • created: 2018-10-17T16:59:07Z
  • last-modified: 2022-12-28T10:30:48Z
  • person: GLEB ARTAMONOV
  • address: Novo-rogachevskaya 11a
  • address: 141800
  • address: Dmitrov
  • address: RUSSIAN FEDERATION
  • phone: +74956662234
  • nic-hdl: GA11044-RIPE
  • mnt-by: mnt-ru-dedicsh-1
  • created: 2019-04-29T02:14:48Z
  • last-modified: 2019-06-14T22:49:49Z
  • route: 45.12.4.0/24
  • descr: InternetHosting network
  • org: ORG-AGA48-RIPE
  • origin: AS48158
  • mnt-by: MNT-TRI
  • created: 2022-02-18T16:18:40Z
  • last-modified: 2022-02-18T16:23:57Z
  • organisation: ORG-AGA48-RIPE
  • org-name: Artamonov Gleb Aleksandrovich
  • country: RU
  • org-type: OTHER
  • address: Novo-rogachevskaya 11a
  • address: 141800
  • address: Moscow
  • address: RUSSIAN FEDERATION
  • phone: +74956662234
  • admin-c: GA11044-RIPE
  • tech-c: GA11044-RIPE
  • abuse-c: AR52317-RIPE
  • mnt-ref: MNT-MBNET
  • mnt-ref: mnt-ru-dedicsh-1
  • mnt-by: mnt-ru-dedicsh-1
  • created: 2019-04-29T02:14:49Z
  • last-modified: 2022-12-28T10:19:56Z

Links to attack logs

anonymous-proxy-ip-list-2023-06-22