5.9.1.3 Threat Intelligence and Host Information

Dec 30, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 5.9.1.3 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 25/100

Host and Network Information

JARM: 29d29d15d29d29d00042d42d000000df133019600a83abfb096ff3e86cd79d
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_net_ua, botscout_30d, cleantalk_30d, cleantalk_7d, cleantalk_updated_30d, cleantalk_updated_7d, coinbl_hosts, cruzit_web_attacks, esentire_crazyerror_su, esentire_dorttlokolrt_com, esentire_maddox1_ru, haley_ssh, hphosts_ats, hphosts_emd, nixspam, nullsecure, proxylists_30d, proxylists_7d, proxz_30d, proxz_7d, sblam, socks_proxy_30d, stopforumspam_180d, stopforumspam_1d, stopforumspam_30d, stopforumspam_365d, stopforumspam_7d, stopforumspam_90d, stopforumspam, taichung, turris_greylist, uscert_hidden_cobra

Country: Germany
Network: AS24940 hetzner online gmbh
Noticed: 1 times
Protcols Attacked: Anonymous Proxy
Passive DNS Results: gw02.litreca.cloud www.gw02.litreca.cloud litreca.cloud ltc-treng.litreca.com imap.litreca.com edge.litreca.com outlook.litreca.com smtp.litreca.com plesk.litreca.com sax-ag.com gmtworld.de support.litreca.com sax-systemhaus-ag.com www.litreca.org litreca.net litreca-ag.net litreca.at www.litreca-ag.ch litreca-ag.ag www.litreca.de accountbook.de litreca-ag.ch www.litreca.at www.litreca-ag.net litreca-ag.org www.litreca.ag litreca.org www.litreca-ag.ag litreca.ag www.litreca-ag.org www.litreca-ag.com www.litreca.net www.accountbook.de litreca.de litreca.ch litreca-ag.com www.litreca.ch installer.litreca.com www.data.litreca.com data.litreca.com treproxy1.litreca.com lab.litreca.com www.lab.litreca.com install.litreca.com www.cloud.litreca.com cloud.litreca.com portal.litreca.com ftp.litreca.com dl.litreca.com test.litreca.com www.workandmeet.de workandmeet.de litreca.com neu.litreca.com sax-ag.de www.litreca.com www.sax-ag.de

Malware Detected on Host

Count: 1 3d7958a5fdd8d063ab40a4b7a389f28c92adbbb417fb5803927a1461cde7d5b0

Open Ports Detected

110 143 21 22 25 443 465 80 8443 8880 993 995

Map

Whois Information

inetnum: 5.9.1.0 - 5.9.1.31
netname: HETZNER-fsn1-dc7
descr: Hetzner Online GmbH
descr: Datacenter fsn1-dc7
country: DE
admin-c: HOAC1-RIPE
tech-c: HOAC1-RIPE
status: ASSIGNED PA
mnt-by: HOS-GUN
mnt-lower: HOS-GUN
mnt-routes: HOS-GUN
created: 2012-06-12T08:40:57Z
last-modified: 2018-03-15T13:24:16Z
role: Hetzner Online GmbH - Contact Role
address: Hetzner Online GmbH
address: Industriestrasse 25
address: D-91710 Gunzenhausen
address: Germany
phone: +49 9831 505-0
fax-no: +49 9831 505-3
abuse-mailbox: abuse@hetzner.com
org: ORG-HOA1-RIPE
admin-c: MH375-RIPE
tech-c: GM834-RIPE
tech-c: SK2374-RIPE
tech-c: MF1400-RIPE
tech-c: SK8441-RIPE
tech-c: DD15478-RIPE
nic-hdl: HOAC1-RIPE
mnt-by: HOS-GUN
created: 2004-08-12T09:40:20Z
last-modified: 2022-11-22T18:33:55Z
route: 5.9.0.0/16
descr: HETZNER-RZ-FKS-BLK5
origin: AS24940
mnt-by: HOS-GUN
created: 2012-04-26T10:30:12Z
last-modified: 2012-04-26T10:30:12Z

Links to attack logs

Share on: