88.99.163.122 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 88.99.163.122 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 30/100

Host and Network Information

• Tags: Nextray, TOR, VPN, awsindia, awssafrica, cyber security, ioc, malicious, ntp, phishing, scanners, tsec

• View other sources: Spamhaus VirusTotal

• Country: Germany
• Network: AS24940 hetzner online gmbh
• Noticed: 1 times
• Protcols Attacked: ntp
• Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, India, Latvia, Lithuania, Norway, Poland, Romania, South Africa, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
• Passive DNS Results: deo-4.msg2.top deo-4.93ms.net

Malware Detected on Host

Count: 10 a4a63515b6bd2562e94430e10629c0c9e69309b2281dc857628cd537909c0352 f046b65739764aa74d38bfaf666094d45ad087b3bc6430c5a19c599b1735a54e 25837be752586ccedb7da8ab32d563a7baa799d91ca69067f0b8acc14dfc0923 857df9f995f743358d9379eb9d8ef7848e7969ecc13394600eadbf973076d664 a7e484d7cdbcb39538cd203c269d39b15d59f1703cf73429ca67128bb66c0a00 5f2d7cd27902b67960a9b6f83cb72fce166c58c243f8ab3efefa692a1a14e709 5ec5871b702ab135831503398816c6d1572c3371c48531dc3ffee82c4562dc4e c4ff36e96bcf9b63ded13a73d3b2d7d1ec41e3df97f033d0ae9d0a258aa84a75 425ae114d638b10a23765c40e4b8513d8661d96a72ccaa693c88d381d17ba8dd a704a34d89db55ca4c443e0c52707b71873a4d00fb5e32efe6c12868c7b0c1e5

Map

Whois Information

• inetnum: 88.99.163.64 - 88.99.163.127
• netname: HETZNER-fsn1-dc1
• descr: Hetzner Online GmbH
• descr: Datacenter fsn1-dc1
• country: DE
• admin-c: HOAC1-RIPE
• tech-c: HOAC1-RIPE
• status: ASSIGNED PA
• mnt-by: HOS-GUN
• mnt-lower: HOS-GUN
• mnt-routes: HOS-GUN
• created: 2018-03-15T14:13:26Z
• last-modified: 2018-03-15T14:13:26Z
• role: Hetzner Online GmbH - Contact Role
• address: Hetzner Online GmbH
• address: Industriestrasse 25
• address: D-91710 Gunzenhausen
• address: Germany
• phone: +49 9831 505-0
• fax-no: +49 9831 505-3
• abuse-mailbox: [email protected]
• org: ORG-HOA1-RIPE
• admin-c: MH375-RIPE
• tech-c: GM834-RIPE
• tech-c: SK2374-RIPE
• tech-c: MF1400-RIPE
• tech-c: SK8441-RIPE
• tech-c: DD15478-RIPE
• nic-hdl: HOAC1-RIPE
• mnt-by: HOS-GUN
• created: 2004-08-12T09:40:20Z
• last-modified: 2022-11-22T18:33:55Z
• route: 88.99.0.0/16
• org: ORG-HOA1-RIPE
• descr: HETZNER-DC
• origin: AS24940
• mnt-by: HOS-GUN
• created: 2016-08-23T08:30:46Z
• last-modified: 2016-08-23T08:30:46Z
• organisation: ORG-HOA1-RIPE
• org-name: Hetzner Online GmbH
• country: DE
• org-type: LIR
• address: Industriestrasse 25
• address: D-91710
• address: Gunzenhausen
• address: GERMANY
• phone: +49 9831 5050
• fax-no: +49 9831 5053
• admin-c: MF1400-RIPE
• admin-c: GM834-RIPE
• admin-c: HOAC1-RIPE
• admin-c: MH375-RIPE
• admin-c: SK2374-RIPE
• admin-c: SK8441-RIPE
• abuse-c: HOAC1-RIPE
• mnt-ref: RIPE-NCC-HM-MNT
• mnt-ref: HOS-GUN
• mnt-by: RIPE-NCC-HM-MNT
• mnt-by: HOS-GUN
• created: 2004-04-17T11:07:58Z
• last-modified: 2022-11-22T18:32:44Z

Links to attack logs

awsindia-ntp-bruteforce-ip-list-2022-05-23 awssafrica-ntp-bruteforce-ip-list-2022-05-23 awsbah-ntp-bruteforce-ip-list-2022-05-23