83.97.20.90 Threat Intelligence and Host Information

Share on:
Oct 21, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 83.97.20.90 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 20/100

Host and Network Information

  • Known tor exit node

  • View other sources: Spamhaus VirusTotal

  • Known TOR node
  • Country: Romania
  • Network:
  • Noticed: 1 times
  • Protcols Attacked: telnet
  • Passive DNS Results: 90.20.97.83.ro.ovo.sc cnc.c541f5d439a359.xyz

Malware Detected on Host

Count: 50 55c589e4dec4cd61e924491a5b68de743e31e1d6cc855380684fb9f0299b7146 1f65569b77f21f47256db339700b4ff33b7570e44e1981b5c213b7b2e65b0f6c 40aefcfc0aa60af97ed41cd611e958f6cd577187ce6fc26434667aeadc2d8c2a 4628f32209707e8ea65f0a7c265a72bcf70da4f5ad91671d8f2424c07971b86f 8eb51ca2a5d1bf95b2886e37bbc4b75b681ba67b3441f3f624e552e74382685c d2bac03ff468f685ad62ee954772fa71a5f644444b1c40c1df7f6b88962409f9 822cd0e205b8885e7fe7dfb58a0db06c8c62236a51acb98988aaa7254f536e87 d72cb35dc7284bccfa376851b105d11c5f95e1d8f2e7a3667f6d5caf4f2cbeca dfc62310da5416f6e3b2483bccb44f874e46601a0a90e1d9e6e956c5cee3ad00 0884c26d124252d7471c9677ebc2d0e63a7a8dfc061fb873b7f7648dc8b310e5

Open Ports Detected

22

Map

Whois Information

  • inetnum: 83.97.20.0 - 83.97.20.255
  • netname: OvO-RO
  • descr: OVO Systems Ltd.
  • country: RO
  • admin-c: ME5262-RIPE
  • status: ASSIGNED PA
  • mnt-by: M247-EU-MNT
  • mnt-by: OVO-MNT
  • tech-c: ON1235-RIPE
  • created: 2021-02-12T14:01:32Z
  • last-modified: 2021-03-04T09:19:53Z
  • org: ORG-OSL22-RIPE
  • organisation: ORG-OSL22-RIPE
  • org-name: OvO Systems Ltd
  • org-type: OTHER
  • address: Suite 9, Ansuya Estate, Revolution Avenue
  • address: Mahe, Seychelles
  • abuse-c: ACRO36548-RIPE
  • mnt-ref: OVO-MNT
  • mnt-by: OVO-MNT
  • created: 2020-11-05T00:42:46Z
  • last-modified: 2020-11-05T19:13:26Z
  • role: M247 Europe
  • address: Sos. Fabrica de Glucoza, Nr 11B
  • address: etaj 1, Sector 2, Bucuresti Romania
  • admin-c: PP13161-RIPE
  • tech-c: MP26073-RIPE
  • abuse-mailbox: [email protected]
  • nic-hdl: ME5262-RIPE
  • mnt-by: M247-EU-MNT
  • created: 2014-01-13T12:11:34Z
  • last-modified: 2014-12-08T16:22:40Z
  • role: OvO NOC
  • address: Suite 9, Ansuya Estate, Revolution Avenue, Mahe, Seychelles
  • nic-hdl: ON1235-RIPE
  • mnt-by: OVO-MNT
  • created: 2020-11-05T00:33:31Z
  • last-modified: 2020-11-05T00:33:31Z
  • route: 83.97.20.0/24
  • origin: AS9009
  • mnt-by: GLOBALAXS-MNT
  • created: 2021-02-12T14:01:48Z
  • last-modified: 2021-02-12T14:01:48Z

Links to attack logs

aws-telnet-bruteforce-ip-list-2020-10-26