62.149.157.166 Threat Intelligence and Host Information

Oct 21, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 62.149.157.166 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 10/100

Host and Network Information

  • Country: Italy
  • Network: AS31034 aruba s.p.a.
  • Noticed: 1 times
  • Protcols Attacked: SSH
  • Passive DNS Results: mdm-srl.it gmmspa.com grupposorbo.com anthericaposta.it in.arubabusiness.it in.lentek.it mx.tieng.it nexto.cloud mx.sterylab.it webmail.virtusbinascocalcio.it in.remailer.it mymail.ducaticaffeuae.com mymail.xdiavel.com webmail.progettoassistenzamilano12.it webmail.cislsondrio.it webmail.sapsalumi.it in.widestore.net webmail.optea.it webmail.sanifarmsardegna.it mbox.neh.it webmail.tecnosfer.it

Malware Detected on Host

Count: 6 35c0010af204edb210e87560335aea8f6e7242c137a0d9699babcff61936bd35 8c185258c13e8a990a6667c156d0cc7d5a56934cc595862144377f206c5299c5 481b7d4fe352cc683eadd4a36f44868fa5b8911ea07ed2398fd9666a5013006e c2939687154137c35a181f82e8455b29c3e4ea1bef87817f8036fbf8745bc319 69c0426ea172072707de4c35fa78e1182d93dc945954e5cf609bf9c205913604 d6d126d09d19c0b34dc8be6658611f5748d8c0f312389a33306a240e1def17e2

Open Ports Detected

25 80

Map

Whois Information

  • inetnum: 62.149.128.0 - 62.149.159.255
  • netname: ARUBA-NET
  • descr: Aruba S.p.A. - Shared Hosting and Mail services
  • country: IT
  • admin-c: SS936-RIPE
  • tech-c: AN3450-RIPE
  • status: ASSIGNED PA
  • mnt-by: ARUBA-MNT
  • created: 2008-12-16T09:57:13Z
  • last-modified: 2008-12-16T09:57:13Z
  • role: ARUBA Network
  • address: Aruba S.p.A.
  • address: via S.Clemente 53
  • address: 24036 Ponte San Pietro (BG)
  • address: Italy
  • abuse-mailbox: abuse@staff.aruba.it
  • admin-c: SC279-RIPE
  • admin-c: AC68-RIPE
  • tech-c: LR8449-RIPE
  • tech-c: PL14025-RIPE
  • tech-c: MP36509-RIPE
  • tech-c: RADA-RIPE
  • nic-hdl: AN3450-RIPE
  • mnt-by: ARUBA-MNT
  • created: 2008-11-19T19:02:34Z
  • last-modified: 2021-09-03T15:23:40Z
  • person: Susanna Santini
  • address: Aruba S.p.A.
  • address: Via S.Clemente, 53
  • address: 24036 Ponte San Pietro (BG)
  • phone: +39 0575 0505
  • fax-no: +39 0575 862000
  • nic-hdl: SS936-RIPE
  • mnt-by: ARUBA-MNT
  • created: 1970-01-01T00:00:00Z
  • last-modified: 2017-11-15T08:14:40Z
  • route: 62.149.128.0/19
  • descr: Aruba S.p.A. Network
  • origin: AS31034
  • mnt-by: ARUBA-MNT
  • created: 2011-08-02T16:14:16Z
  • last-modified: 2011-08-02T16:14:16Z
Share on: