45.148.122.159 Threat Intelligence and Host Information

Share on:

Jun 23, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 45.148.122.159 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 30/100

Host and Network Information

Tags: C&C, DNS, Malicious IP, Nextray, aws, awsau, awsbah, awsjap, blacklist, botnet, bruteforce, cyber security, dnsserver, epoch sha256 creation time url/attachment emotet , fail2ban, ioc, la, lafusioncenter, louisiana, malicious, mirai, nmap, ntp, phishing, portscan, probe, redis, scan, scanner, scanners, tcp, udp
View other sources: Spamhaus VirusTotal
Country: Netherlands
Network: AS64425 skb enterprise b.v.
Noticed: 1 times
Protcols Attacked: ntp
Countries Attacked: Australia, Bahrain, Canada, Czechia, Denmark, Estonia, France, Germany, Japan, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: alljb.org skbenl1.643216.xyz

Malware Detected on Host

Count: 8 2f05ba7f9cd19fdd2fc5894ed0b4dd0bf580e07ee146e8b1ee1df8a4ca573ad7 1ad7d14a62380e90c36918e3b1d2196139606508a6d6975d74d2326df0a4cb54 f05c6f8f55b22f4558cad1a8cb0f8a02221e3a2227581db57d7629fd6c995296 ba5d464e8c47fa301c390979e76a1b64aa4ba259abf46798a3dd3b9c7a8d6182 3fcff38491c5fb6c9e34fd4fbd1f50f0ba231cc0dde5269b3df1893c4f45ecf3 49606640d47abcc5bdcde756735ae30be90b7119e22b50de361000ec754b2d81 7f7a4797535d8ea738cde3762c49a253b5157f8a1e1976136ee0310f1ed96c14 3e67e51ded28007b20a3f96ccaa80e6e5accd932a92f7dc83a42577fe10ba322

Map

Whois Information

inetnum: 45.148.122.0 - 45.148.122.255
netname: SKB-Enterprise
country: NL
geoloc: 52.3702 4.8952
admin-c: SE4295-RIPE
tech-c: SE4295-RIPE
org: ORG-SE92-RIPE
status: ASSIGNED PA
mnt-by: skbenterprise
created: 2019-09-03T08:08:59Z
last-modified: 2023-04-17T20:25:40Z
organisation: ORG-SE92-RIPE
org-name: SKB Enterprise B.V.
country: NL
org-type: OTHER
address: Kingsfordweg 151
address: 1043 GR Amsterdam
address: The Netherlands
abuse-c: SE4341-RIPE
mnt-ref: skbenterprise
mnt-ref: IPXO-MNT
mnt-ref: SpectraIP
mnt-by: skbenterprise
created: 2016-07-28T14:36:56Z
last-modified: 2022-12-01T17:25:32Z
role: SKB Enterprise B.V.
address: Kingsfordweg 151
address: 1043 GR Amsterdam
address: The Netherlands
abuse-mailbox: [email protected]
phone: +31852018594
nic-hdl: SE4295-RIPE
mnt-by: skbenterprise
created: 2016-06-01T08:52:20Z
last-modified: 2021-09-20T13:47:20Z
route: 45.148.122.0/24
origin: AS64425
mnt-by: skbenterprise
created: 2019-09-06T21:03:47Z
last-modified: 2019-09-06T21:03:47Z

Links to attack logs