5.249.227.109 Threat Intelligence and Host Information

Dec 29, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 5.249.227.109 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 10/100

Host and Network Information

  • Country: Norway
  • Network: AS51468 one.com a s
  • Noticed: 1 times
  • Protcols Attacked: SSH

Malware Detected on Host

Count: 46 8e0a750afb0de81e58c00a8abc9288777b326f8218c294e58e79d58f07985dc2 735c3aed42f2979c0543b6656c3c926a15fb607c082f44147c6757d6977501b6 6586c0b781c3b56021605168da3caeafbe41fe01a0d8f7cfcbd5a8390224851e 6f8a56599b475d70cb25121d1bfb3c42eef1917b24957654f07920356cb99967 085220a9b9461680358cc0bd764bbf8e0f13f1f19babe73c323bc47a2da001ea 01bbca8e051825b2ffd03e14075977aa969c777991efc15fb55c01c98a05ab63 626f3d605736860471ec33c65087b3a2055674b21a4d67915e3fe68e407945d4 8855550f8f75604143fe8690094e9d811a07cb91209506884dec6bf4ca6f0acc 33005241b5867cf89969cf4980a1901cdda48fc967297d85f68e6417eafc0e11 3d28e521ca329b68dc47d9d1d620c0e44fd5b50718cdad8f2c23008997668aed

Open Ports Detected

113 161 22 443 80

Whois Information

  • inetnum: 5.249.224.0 - 5.249.227.255
  • netname: NO-INIC
  • org: ORG-iA975-RIPE
  • descr: FastName Infrastructure
  • country: NO
  • admin-c: BN1844-RIPE
  • tech-c: BN1844-RIPE
  • status: ASSIGNED PA
  • mnt-by: FASTNAME-MNT
  • mnt-domains: FASTNAME-MNT
  • created: 2013-08-20T19:03:49Z
  • last-modified: 2013-08-20T19:14:38Z
  • organisation: ORG-iA975-RIPE
  • org-name: DIGITAL GARDEN AS
  • country: NO
  • org-type: LIR
  • address: Orsnesalleen 17
  • address: 3120
  • address: Notteroy
  • address: NORWAY
  • phone: +4733350400
  • fax-no: +4733350401
  • mnt-ref: RIPE-NCC-HM-MNT
  • mnt-ref: ONECOM-MNT
  • mnt-by: RIPE-NCC-HM-MNT
  • mnt-by: ONECOM-MNT
  • abuse-c: FNOC42-RIPE
  • created: 2012-02-17T14:43:33Z
  • last-modified: 2022-11-29T11:19:36Z
  • person: Bjornar Ness
  • address: Ørsnesalleen 17
  • address: 3120 Nøtterøy
  • phone: +47 92048688
  • nic-hdl: BN1844-RIPE
  • mnt-by: FASTNAME-MNT
  • created: 2012-09-06T15:24:53Z
  • last-modified: 2020-05-27T08:05:39Z
  • route: 5.249.226.0/23
  • origin: AS51468
  • mnt-by: FASTNAME-MNT
  • created: 2021-06-23T08:51:06Z
  • last-modified: 2021-06-23T08:51:06Z

Links to attack logs

****** ****** ******

Share on: