45.14.64.8 Threat Intelligence and Host Information

Share on:
Oct 21, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 45.14.64.8 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 25/100

Host and Network Information

  • Tags: Bruteforce, Brute-Force, cyber security, ioc, malicious, Nextray, phishing, SSH

  • View other sources: Spamhaus VirusTotal

  • Country: Japan
  • Network: AS43959 xtom gmbh
  • Noticed: 1 times
  • Protcols Attacked: ssh
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: czc.life xero.fun sb.xero.fun 978f841304bef856.cdn.jiashule.com dbe30e4c1f1dfb7d.cdn.jiashule.com f2594e8293eca5d0.cdn.jiashule.com 3feffc91d61d894f.cdn.jiashule.com 6023c502a108daca.cdn.jiashule.com 7d522a1c7ed441d5.cdn.jiashule.com 9b0f80e4712e9041.cdn.jiashule.com f4602b2a57b15134.cdn.jiashule.com 0e4c99d4421382b3.cdn.jiashule.com bd8006b486e64b15.cdn.jiashule.com 20b9897a063f767f.cdn.jiashule.com 8ba856299df80330.cdn.jiashule.com 2ca8ea3796fafb98.cdn.jiashule.com 1be9b3959c586421.cdn.jiashule.com f7d02cda5297ad4d.cdn.jiashule.com 659dd74ff4c63837.cdn.jiashule.com bbef9675983cb933.cdn.jiashule.com 39a3584265042693.cdn.jiashule.com 7e9660d3bf42bee1.cdn.jiashule.com 2c82009d569737dd.cdn.jiashule.com 7f337265970c4aa6.cdn.jiashule.com d6e821d11e368b10.cdn.jiashule.com 95808573def8c710.cdn.jiashule.com 9fb604e76e8e5bac.cdn.jiashule.com 9fc7ac69024f018e.cdn.jiashule.com d05f6fedb0e8437a.cdn.jiashule.com 2962f6cd37b3a6ce.cdn.jiashule.com 2e986816b42206e1.cdn.jiashule.com acad5574370a3ad5.cdn.jiashule.com 07e5e5571dd4f4d7.cdn.jiashule.com 4a8b1f885a967159.cdn.jiashule.com f24b343dea0746ec.cdn.jiashule.com

Open Ports Detected

22 80

Map

Whois Information

  • inetnum: 45.14.64.0 - 45.14.64.255
  • netname: XNNET
  • descr: XNNET LLC
  • country: JP
  • org: ORG-XL63-RIPE
  • admin-c: XLLC-RIPE
  • tech-c: XLLC-RIPE
  • status: ASSIGNED PA
  • mnt-by: XNNET-MNT
  • mnt-lower: XNNET-MNT
  • mnt-routes: XNNET-MNT
  • mnt-domains: XNNET-MNT
  • created: 2020-10-15T11:33:58Z
  • last-modified: 2021-11-23T13:25:12Z
  • organisation: ORG-XL63-RIPE
  • org-name: XNNET LLC
  • country: US
  • org-type: LIR
  • address: 30 N Gould St Ste R
  • address: 82801
  • address: Sheridan, WY
  • address: UNITED STATES
  • phone: +85255730001
  • admin-c: XLLC-RIPE
  • tech-c: XLLC-RIPE
  • abuse-c: XLLC-RIPE
  • mnt-ref: XNNET-MNT
  • mnt-ref: xtom
  • mnt-by: RIPE-NCC-HM-MNT
  • mnt-by: XNNET-MNT
  • created: 2019-07-31T10:53:33Z
  • last-modified: 2021-11-23T13:09:01Z
  • role: XNNET LLC NOC
  • address: 30 N Gould St Ste R
  • address: Sheridan, WY, US
  • abuse-mailbox: [email protected]
  • nic-hdl: XLLC-RIPE
  • phone: +1 8057230001
  • mnt-by: XNNET-MNT
  • created: 2021-11-23T13:04:21Z
  • last-modified: 2021-11-23T13:04:21Z
  • route: 45.14.64.0/24
  • origin: AS3214
  • mnt-by: xtom
  • created: 2020-10-15T11:34:37Z
  • last-modified: 2020-10-15T11:34:37Z
  • route: 45.14.64.0/24
  • origin: AS3258
  • descr: Customer Prefixes
  • mnt-by: xtom
  • created: 2023-06-09T08:19:23Z
  • last-modified: 2023-06-09T08:19:23Z
  • route: 45.14.64.0/24
  • origin: AS43959
  • mnt-by: xtom
  • created: 2020-10-15T11:40:05Z
  • last-modified: 2020-10-15T11:40:05Z

Links to attack logs

vultrmadrid-ssh-bruteforce-ip-list-2022-11-17