92.204.222.114 Threat Intelligence and Host Information

Nov 25, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 92.204.222.114 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 20/100

Host and Network Information

JARM: 2ad2ad16d2ad2ad0002ad2ad2ad2ad783c15df386a8f7b030295f1ff4c2373
View other sources: Spamhaus VirusTotal

Country: France
Network: AS21499 host europe gmbh
Noticed: 1 times
Protcols Attacked: SSH
Passive DNS Results: www.leighroad.com leighroad.com sxb1plvcpnl447255.prod.sxb1.secureserver.net www.bookshop.uk.com www.coloursofchildhood.com www.hamptonbondbooks.com www.clinitube.com www.skillsclinic.com www.finderinternational.co.uk www.althrop.com www.gegzo.com www.ukmedicalcare.com www.lcndomains.com www.hamptonbond.com www.uklifecare.com www.sanwalawelfaretrust.org www.ayub.org.uk www.humayun.co.uk www.mooncotton.com mooncotton.com humayun.co.uk www.harperbond.com www.banksyco.uk banksyco.uk farrerco.uk www.farrerco.uk sanwalawelfaretrust.org hamptonbondbooks.com coloursofchildhood.com finderinternational.co.uk lcndomains.com harperbond.com hamptonbond.com clinitube.com gegzo.com skillsclinic.com althrop.com bookshop.uk.com ukmedicalcare.com uklifecare.com ayub.org.uk

Open Ports Detected

143 2077 2082 2083 22 25 3306 443 465 587 80 995

CVEs Detected

CVE-2010-4478 CVE-2010-4755 CVE-2010-5107 CVE-2011-4327 CVE-2011-5000 CVE-2012-0814 CVE-2014-1692 CVE-2014-2532 CVE-2014-2653 CVE-2015-5352 CVE-2015-5600 CVE-2015-6563 CVE-2015-6564 CVE-2015-9253 CVE-2016-0777 CVE-2016-10009 CVE-2016-10010 CVE-2016-10011 CVE-2016-10012 CVE-2016-10708 CVE-2016-10735 CVE-2016-1908 CVE-2016-20012 CVE-2017-15906 CVE-2017-7272 CVE-2017-7963 CVE-2018-14040 CVE-2018-14042 CVE-2018-15473 CVE-2018-19395 CVE-2018-19396 CVE-2018-20676 CVE-2018-20677 CVE-2018-20685 CVE-2019-11358 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2019-8331 CVE-2019-9637 CVE-2019-9638 CVE-2019-9639 CVE-2019-9641 CVE-2020-11022 CVE-2020-11023 CVE-2020-15778 CVE-2020-23064 CVE-2021-36368 CVE-2022-31628 CVE-2022-31629 CVE-2023-38408

Map

Whois Information

inetnum: 92.204.208.0 - 92.204.223.255
netname: DE-GD-EMEA-DCN
descr: DCN Sub Alloc
country: DE
org: ORG-GDNB2-RIPE
admin-c: HM5126-RIPE
tech-c: HM5126-RIPE
status: SUB-ALLOCATED PA
mnt-by: GODADDY-MNT
mnt-lower: MNT-HEG-MASS
mnt-routes: MNT-HEG-MASS
created: 2020-08-07T08:15:36Z
last-modified: 2020-08-07T08:15:36Z
organisation: ORG-GDNB2-RIPE
org-name: Go Daddy Netherlands B.V.
org-type: OTHER
address: H.J.E. Wenckebachweg 127
address: 1096 AM
address: Amsterdam
address: NETHERLANDS
phone: +14805058809
fax-no: +14805058844
admin-c: JB12522-RIPE
abuse-c: AR16180-RIPE
mnt-ref: GODADDY-MNT
mnt-ref: MNT-GDG-NL
mnt-by: GODADDY-MNT
created: 2019-06-03T08:36:52Z
last-modified: 2019-06-04T07:31:45Z
role: HEG Mass
address: HEG Mass
address: Daimler Strasse 9-11
address: 50354 Huerth
address: Germany
phone: +49 2203 1045 0
admin-c: JUPP
tech-c: JUPP
nic-hdl: HM5126-RIPE
mnt-by: MNT-HEG-MASS
created: 2015-11-05T11:32:14Z
last-modified: 2023-04-28T10:37:52Z
route: 92.204.208.0/20
descr: GD MASS Network
origin: AS21499
mnt-by: MNT-HEG-MASS
created: 2020-08-07T08:18:35Z
last-modified: 2020-08-07T08:18:35Z

Share on: