85.204.116.129 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 85.204.116.129 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 10/100

Host and Network Information

• View other sources: Spamhaus VirusTotal
• Contained within other IP sets: turris_greylist

• Country: Romania
• Network:
• Noticed: 1 times
• Protocols Attacked: SSH
• Passive DNS Results: citidex.sbs www.citidex.sbs marktplaatsbetaling-voorstel.com

Malware Detected on Host

Count: 8 7af34b7fdb63da12138bdbde83cce713c2f328c295c3fbf075daa6ffb3cb3591 5e0c98698ae02494883ca1e032cfc97ab0b9522645b844d0f44a011c66259183 8bd8a9fbfba4cb5e6beaf2a3d1105812661136324d9fcafdbef02e2da3314fca ee0f8039637ccf72dfdd65d1b238290926f5817f6a1f8f1b5b124fa38ff2d9dd b64e748cdf10bde231cbc691156e91a095e9a3696b40771b4cf75af5c35d9200 5e17c32f4f202a2664a56157b8b811941813acb2c21e222e1ee899de0bd4187e a94e427952e75c8b19756d377238777ec6c3abe41049640e9d1d3a4b21fa3f8a ee017cea3c7dc9bd2976189abfa688f6a29db1686e022be7023fffed43f55f7f

Map

Links to attack logs

****** nmap-scanning-list-2021-09-12 ****** ******