62.109.22.8 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 62.109.22.8 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 45/100

Host and Network Information

• Tags: Bruteforce, Brute-Force, cyber security, ioc, malicious, Nextray, phishing, SSH

• View other sources: Spamhaus VirusTotal

• Country: Russia
• Network:
• Noticed: 50 times
• Protocols Attacked: ssh
• Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
• Passive DNS Results: www.cms.zerro.site cms.zerro.site zerro.site www.zerro.site bryansk.xn–80asnhgagd.xn–p1ai rostov-on-don.xn–80asnhgagd.xn–p1ai volgograd.xn–80asnhgagd.xn–p1ai perm.xn–80asnhgagd.xn–p1ai irkutsk.xn–80asnhgagd.xn–p1ai cheboksary.xn–80asnhgagd.xn–p1ai tyumen.xn–80asnhgagd.xn–p1ai kursk.xn–80asnhgagd.xn–p1ai himki.xn–80asnhgagd.xn–p1ai kaluga.xn–80asnhgagd.xn–p1ai astrahan.xn–80asnhgagd.xn–p1ai petrozavodsk.xn–80asnhgagd.xn–p1ai orenburg.xn–80asnhgagd.xn–p1ai kazan.xn–80asnhgagd.xn–p1ai kirov.xn–80asnhgagd.xn–p1ai ivanovo.xn–80asnhgagd.xn–p1ai sochi.xn–80asnhgagd.xn–p1ai grozny.xn–80asnhgagd.xn–p1ai krasnoyarsk.xn–80asnhgagd.xn–p1ai kemerovo.xn–80asnhgagd.xn–p1ai sevastopol.xn–80asnhgagd.xn–p1ai ulan-ude.xn–80asnhgagd.xn–p1ai vladivostok.xn–80asnhgagd.xn–p1ai samara.xn–80asnhgagd.xn–p1ai penza.xn–80asnhgagd.xn–p1ai habarovsk.xn–80asnhgagd.xn–p1ai ryazan.xn–80asnhgagd.xn–p1ai www.xn--80asnhgagd.xn–p1ai syktyvkar.xn–80asnhgagd.xn–p1ai saint-petersburg.xn–80asnhgagd.xn–p1ai tula.xn–80asnhgagd.xn–p1ai arhangelsk.xn–80asnhgagd.xn–p1ai novorossiysk.xn–80asnhgagd.xn–p1ai barnaul.xn–80asnhgagd.xn–p1ai lipeck.xn–80asnhgagd.xn–p1ai tver.xn–80asnhgagd.xn–p1ai tambov.xn–80asnhgagd.xn–p1ai nizhnevartovsk.xn–80asnhgagd.xn–p1ai balashiha.xn–80asnhgagd.xn–p1ai mytischi.xn–80asnhgagd.xn–p1ai tomsk.xn–80asnhgagd.xn–p1ai nizhny-novgorod.xn–80asnhgagd.xn–p1ai volzhsk.xn–80asnhgagd.xn–p1ai tolyatti.xn–80asnhgagd.xn–p1ai smolensk.xn–80asnhgagd.xn–p1ai surgut.xn–80asnhgagd.xn–p1ai krasnodar.xn–80asnhgagd.xn–p1ai ulyanovsk.xn–80asnhgagd.xn–p1ai voronezh.xn–80asnhgagd.xn–p1ai vladimir.xn–80asnhgagd.xn–p1ai naberezhnye-chelny.xn–80asnhgagd.xn–p1ai chita.xn–80asnhgagd.xn–p1ai stavropol.xn–80asnhgagd.xn–p1ai vladikavkaz.xn–80asnhgagd.xn–p1ai orel.xn–80asnhgagd.xn–p1ai kaliningrad.xn–80asnhgagd.xn–p1ai ekaterinburg.xn–80asnhgagd.xn–p1ai novosibirsk.xn–80asnhgagd.xn–p1ai mahachkala.xn–80asnhgagd.xn–p1ai chelyabinsk.xn–80asnhgagd.xn–p1ai podolsk.xn–80asnhgagd.xn–p1ai yoshkar-ola.xn–80asnhgagd.xn–p1ai izhevsk.xn–80asnhgagd.xn–p1ai sterlitamak.xn–80asnhgagd.xn–p1ai novokuzneck.xn–80asnhgagd.xn–p1ai kurgan.xn–80asnhgagd.xn–p1ai ufa.xn–80asnhgagd.xn–p1ai omsk.xn–80asnhgagd.xn–p1ai cherepovec.xn–80asnhgagd.xn–p1ai nizhnekamsk.xn–80asnhgagd.xn–p1ai magnitogorsk.xn–80asnhgagd.xn–p1ai xn–80asnhgagd.xn–p1ai saratov.xn–80asnhgagd.xn–p1ai belgorod.xn–80asnhgagd.xn–p1ai vologda.xn–80asnhgagd.xn–p1ai nizhnij-tagil.xn–80asnhgagd.xn–p1ai yaroslavl.xn–80asnhgagd.xn–p1ai murmansk.xn–80asnhgagd.xn–p1ai almetevsk.xn–80asnhgagd.xn–p1ai saransk.xn–80asnhgagd.xn–p1ai www.cloud.zerro.site cloud.zerro.site www.old.rostsayt.ru old.rostsayt.ru rostcms.ru www.rostcms.ru www.lada.rostsayt.ru lada.rostsayt.ru novokuzneck.rostsayt.ru mahachkala.rostsayt.ru naberezhnye-chelny.rostsayt.ru volgograd.rostsayt.ru tula.rostsayt.ru grozny.rostsayt.ru saransk.rostsayt.ru syktyvkar.rostsayt.ru moscow.rostsayt.ru kaliningrad.rostsayt.ru chelyabinsk.rostsayt.ru ufa.rostsayt.ru habarovsk.rostsayt.ru omsk.rostsayt.ru kaluga.rostsayt.ru smolensk.rostsayt.ru mytischi.rostsayt.ru petrozavodsk.rostsayt.ru ekaterinburg.rostsayt.ru sterlitamak.rostsayt.ru orenburg.rostsayt.ru irkutsk.rostsayt.ru kemerovo.rostsayt.ru kurgan.rostsayt.ru stavropol.rostsayt.ru sevastopol.rostsayt.ru lipeck.rostsayt.ru vladivostok.rostsayt.ru tver.rostsayt.ru vladikavkaz.rostsayt.ru nizhnij-tagil.rostsayt.ru ulyanovsk.rostsayt.ru rostov-on-don.rostsayt.ru murmansk.rostsayt.ru vologda.rostsayt.ru nizhnevartovsk.rostsayt.ru kursk.rostsayt.ru ivanovo.rostsayt.ru nizhnekamsk.rostsayt.ru tyumen.rostsayt.ru voronezh.rostsayt.ru nizhny-novgorod.rostsayt.ru orel.rostsayt.ru tomsk.rostsayt.ru tambov.rostsayt.ru novosibirsk.rostsayt.ru himki.rostsayt.ru perm.rostsayt.ru ryazan.rostsayt.ru kirov.rostsayt.ru saratov.rostsayt.ru izhevsk.rostsayt.ru krasnoyarsk.rostsayt.ru kazan.rostsayt.ru vladimir.rostsayt.ru podolsk.rostsayt.ru volzhsk.rostsayt.ru krasnodar.rostsayt.ru novorossiysk.rostsayt.ru saint-petersburg.rostsayt.ru cherepovec.rostsayt.ru sochi.rostsayt.ru samara.rostsayt.ru magnitogorsk.rostsayt.ru penza.rostsayt.ru yoshkar-ola.rostsayt.ru surgut.rostsayt.ru yaroslavl.rostsayt.ru ulan-ude.rostsayt.ru barnaul.rostsayt.ru chita.rostsayt.ru balashiha.rostsayt.ru www.chita.rostsayt.ru arhangelsk.rostsayt.ru belgorod.rostsayt.ru bryansk.rostsayt.ru cheboksary.rostsayt.ru www.balashiha.rostsayt.ru www.cheboksary.rostsayt.ru www.barnaul.rostsayt.ru www.belgorod.rostsayt.ru www.bryansk.rostsayt.ru www.arhangelsk.rostsayt.ru www.astrahan.rostsayt.ru astrahan.rostsayt.ru www.almetevsk.rostsayt.ru almetevsk.rostsayt.ru www.tolyatti.rostsayt.ru tolyatti.rostsayt.ru rostsayt.ru www.rostsayt.ru akirikovich.ru

Open Ports Detected

10050 110 143 21 22 25 443 465 5432 587 80 9000 993 995

CVEs Detected

CVE-2020-12783 CVE-2020-28007 CVE-2020-28008 CVE-2020-28009 CVE-2020-28010 CVE-2020-28011 CVE-2020-28012 CVE-2020-28013 CVE-2020-28014 CVE-2020-28015 CVE-2020-28016 CVE-2020-28017 CVE-2020-28018 CVE-2020-28019 CVE-2020-28021 CVE-2020-28022 CVE-2020-28023 CVE-2020-28024 CVE-2020-28025 CVE-2020-28026 CVE-2020-8015 CVE-2021-27216 CVE-2021-38371 CVE-2022-37451 CVE-2022-37452 CVE-2023-51766

Map

Links to attack logs

****** vultrmadrid-ssh-bruteforce-ip-list-2023-04-03 ****** dofrank-ssh-bruteforce-ip-list-2023-04-03 ******