63.141.242.45 Threat Intelligence and Host Information

Dec 06, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 63.141.242.45 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 30/100

Host and Network Information

  • Tags: aaaa, alexa top, algorithm, all search, artemis, as13335, asyncrat, ave maria, bank, blacklist http, body, cisco umbrella, citadel, cobalt strike, code, contact phone, cookie, covid19, creation date, cus cngts, cyber threat, data, date, detection list, dns replication, dnssec, domains, domain status, emotet, engineering, facebook, files domain, file size, files related, file type, first, format, full name, general full, gmbh version, google, hash, hashes, hostname, http, https://www.virustotal.com/gui/collection/54321340057709266cb812, identifier, info, ip summary, ipv4, kb script, key algorithm, key identifier, key info, kraken, legal, llc validity, magic iso8859, magic pdf, malicious, malware, malware site, march, matsnu, million, miner, mon oct, namecheap, namecheap inc, netsky, none file, number, nymaim, ogoogle trust, open ports, otx octoseek, passive dns, pdf document, phishing, phishing site, phishtank, ponmocup, pulse pulses, pulses none, qakbot, ramnit, ransomware, record type, redline stealer, registrar abuse, registrar url, related tags, resource, reverse dns, safe site, sample, samples, san francisco, scan endpoints, search, server, service privacy, showing, simda, site, software, ssdeep, status page, stealer, subject key, subject public, summary, suppobox, tag count, team, team malware, text, text text, threat report, tinba, trid adobe, trid file, ttl value, type name, type textplain, united, unknown, url http, urls, url summary, usage, v3 serial, vawtrak, vhash, x509v3 key, zbot, zeus

  • View other sources: Spamhaus VirusTotal

Malware Detected on Host

Count: 1252 ca557da80d718f3484360aa5e5d65ba0e55a7f444cb88d6214934d66575b4898 54a72f4dbcd0783433279ae2ed0402739ca48a6bd8bc802db2cb7e7801210f56 8a2e31bda07c18d3421411ed7596dba58beaeff17f64d6b82a3ea18f3d28d29e ef36b07614b8106739bdab612771b5c94ddc60eb2083a741513268e554834a4f a35de700f89f693cb02ad83ecf408b050abe826f8582f9c7a9205a89c2292cb9 57e7a2e202daf5bd1003ae897fa488448eaa4bd894e8658ad57c9a347d212090 ad9b2cb0890c135b40adf8576d0ed56d23309c605734c1cc597a590669691729 22cc97bc3ca114079b79a4e3e0d26e20f9034fa94fa3ab203dc3ea80b55dc2c0 5be10de735ffbfe60e739a4a9a9dcd9086abe9f730f1590b9e97487082da2501 312ebd5f707521270a11247bbf94615a5d072614efad948bb81c5ee220635300

Open Ports Detected

1022 443 53 80 8080

Map

Whois Information

Links to attack logs

****** ****** ******

Share on: