45.129.56.200 Threat Intelligence and Host Information

Share on:

Jun 23, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 45.129.56.200 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 60/100

Host and Network Information

Mitre ATT&CK IDs: T1110 - Brute Force
Tags: BC FEED, Bruteforce, Nextray, SSH, Scan, Scanning IP, Scanning IPs, TOR, Telnet, VPN, attack, badrequest, bcsoc, bruteforce, cyber security, ioc, login, malicious, phishing, probing, scanner, scanning, webscan, webscanner, webscanner bruteforce web app attack
Known tor exit node
View other sources: Spamhaus VirusTotal
Contained within other IP sets: sblam, stopforumspam_365d, tor_exits, tor_exits_1d, tor_exits_30d, tor_exits_7d
Known TOR node
Country: Denmark
Network: AS39351 31173 services ab
Noticed: 1 times
Protcols Attacked: redis
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 14 dfc41ce030340214dfb943f97574b23d44728460586c139e7873732fcd44c1af b11e614cdd02aecb8d6ae65bf67bfac8cbefd68830065217e2cb48922743bb12 efdeda4e1c251f9d9d5b11644141ec61d272f4b7d9429edbbd726529087f3147 ec43e150012d049bbdf9a552c9a466482c628db8b981064584998a97d2662914 4bd36c47a55f024278a19f31cc8de05e9a5db7b6309b01ed8ae12a2845ea3641 d643588fd00e7cbb933a634a3a1636e4b789dd7bc22ecf4a83c80f133ab1a849 e7711425a3037a9b4a805b185c9096b2db65a523f07c8f908ab89d1da37370b7 f2d2ac74db5bbbb4afb1818bf345019c15a5688b574e53c5f93aa41b1df353c4 390412e6563edba4228e57e56543284c106789e689f62e4ac32d58879bb019c9 7ddef1c1c6c94febf3565291d7f4604f550144fd90a33b8c7445626ac29256d3

Map

Whois Information

inetnum: 45.129.56.0 - 45.129.56.255
netname: NET-31173-45-129-56
country: DK
geoloc: 55.6820 12.5670
language: da
descr: 31173 Services AB infrastructure in Copenhagen, Denmark.
org: ORG-SD248-RIPE
admin-c: SD12718-RIPE
tech-c: SD12718-RIPE
abuse-c: SD12718-RIPE
status: ASSIGNED PA
mnt-by: ESAB-MNT
created: 2020-04-21T12:18:28Z
last-modified: 2020-05-05T11:41:49Z
organisation: ORG-SD248-RIPE
org-name: 31173 Services Denmark
org-type: OTHER
geoloc: 55.6820 12.5670
language: da
address: 31173 Services AB
address: c/o Interxion
address: Industriparken 20A
address: 2750 Ballerup
address: Denmark
admin-c: SD12718-RIPE
tech-c: SD12718-RIPE
mnt-by: ESAB-MNT
mnt-ref: ESAB-MNT
created: 2020-04-21T12:24:42Z
last-modified: 2020-05-05T11:27:02Z
role: 31173 Services Denmark
address: 31173 Services AB
address: c/o Interxion
address: Industriparken 20A
address: 2750 Ballerup
address: Denmark
abuse-mailbox: [email protected]
admin-c: NEMO1-RIPE
tech-c: KPE-RIPE
nic-hdl: SD12718-RIPE
mnt-by: ESAB-MNT
created: 2020-04-21T12:16:06Z
last-modified: 2020-04-21T12:16:06Z
route: 45.129.56.0/24
origin: AS39351
mnt-by: ESAB-MNT
created: 2019-07-16T08:22:10Z
last-modified: 2020-04-21T12:14:10Z

Links to attack logs