62.204.41.173 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 62.204.41.173 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 15/100

Host and Network Information

• Tags: Brute Force, SSL VPN, VPN

• View other sources: Spamhaus VirusTotal

• Country: Russia
• Network: AS59425 horizon llc
• Noticed: 1 times
• Protcols Attacked: SSH
• Countries Attacked: Spain
• Passive DNS Results: amazon.purchase-cancellation.com www.monzo-online-check.com monzo-online-check.com monzo-bank-account.com www.monzo-bank-account.com monzo-bank-check.com www.monzo-bank-check.com amazon-order-cancellation.com www.amazon-order-cancellation.com

Malware Detected on Host

Count: 1 7b7bbfdef418bb31ca9ece892564e99b1c8431b0ea51ae7923db41e7e35a427c

Whois Information

• inetnum: 62.204.41.0 - 62.204.41.255
• netname: RU-HORIZONMSK-20211008
• country: RU
• org: ORG-HL276-RIPE
• admin-c: EA7219-RIPE
• tech-c: EA7219-RIPE
• status: ALLOCATED PA
• mnt-by: lir-ru-horizonmsk-1-MNT
• mnt-by: RIPE-NCC-HM-MNT
• mnt-lower: lir-ru-horizonmsk-1-MNT
• mnt-routes: lir-ru-horizonmsk-1-MNT
• created: 2021-10-08T15:11:34Z
• last-modified: 2021-10-08T15:11:34Z
• organisation: ORG-HL276-RIPE
• org-name: HORIZON LLC
• country: RU
• org-type: LIR
• address: per Malyj Lyovshinskij 10, floor IV, office 2/88-7
• address: 119034
• address: Moscow
• address: RUSSIAN FEDERATION
• phone: +7 495 008 87 36
• admin-c: EA7219-RIPE
• tech-c: EA7219-RIPE
• abuse-c: AR65536-RIPE
• mnt-ref: lir-ru-horizonmsk-1-MNT
• mnt-by: RIPE-NCC-HM-MNT
• mnt-by: lir-ru-horizonmsk-1-MNT
• created: 2021-10-07T14:14:29Z
• last-modified: 2021-10-07T14:14:29Z
• role: Evgeniy Atnalin
• address: RUSSIAN FEDERATION
• address: Moscow
• address: 119034
• address: per Malyj Lyovshinskij 10, floor IV, office 2/88-7
• phone: +7 495 008 87 36
• nic-hdl: EA7219-RIPE
• mnt-by: lir-ru-horizonmsk-1-MNT
• created: 2021-10-07T14:14:28Z
• last-modified: 2021-10-07T14:14:29Z
• route: 62.204.41.0/24
• origin: AS59425
• mnt-by: lir-ru-horizonmsk-1-MNT
• created: 2022-01-19T10:15:39Z
• last-modified: 2022-01-19T10:15:39Z

Links to attack logs

****** ****** ******