93.91.4.86 Threat Intelligence and Host Information

Share on:

General

This page contains threat intelligence information for the IPv4 address 93.91.4.86 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 30/100

Host and Network Information

  • Mitre ATT&CK IDs: T1110 - Brute Force
  • Tags: Bruteforce, cyber security, digital ocean, ioc, malicious, Nextray, phishing, scanners, ssh

  • View other sources: Spamhaus VirusTotal

  • Country: Russia
  • Network: AS31430 ooo suntel
  • Noticed: 1 times
  • Protcols Attacked: ssh
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 4 3fb5aa613b9e2b3dc25c32b6ec736c25524006d4f42ab1a6dfd910b529bb6a5d 8ee266b0c6c0f69e61964b825d060422a450321f7ea36b23b8cdc10407c6e428 92acabcae34201c842578df286d5691aa78f559087c6bce0d352a83cdc5d8dfe 5db23307e00d9d18d5e83a82be4babee987e97f6afdda8aa08c54ce9d2ebe453

Open Ports Detected

1723

Map

Whois Information

  • inetnum: 93.91.4.0 - 93.91.4.127
  • netname: TEL-NET-14210
  • descr: object-BUTLEROVA7, client-raspred-inteleg-system”
  • country: RU
  • admin-c: AVB160-RIPE
  • tech-c: AVB160-RIPE
  • created: 2009-02-18T09:51:54Z
  • last-modified: 2009-02-18T09:51:54Z
  • status: ASSIGNED PA
  • mnt-by: TEL-NET-MNT
  • person: Alexey V Borisov
  • address: Lenin Sloboda, d. 26, Moscow, Russia, 115280
  • phone: + 7 495 7874200
  • nic-hdl: AVB160-RIPE
  • mnt-by: TEL-NET-MNT
  • created: 2007-06-07T12:05:49Z
  • last-modified: 2017-02-16T10:36:20Z
  • route: 93.91.0.0/20
  • descr: TEL-NET-AS
  • origin: AS31430
  • mnt-by: TEL-NET-MNT
  • created: 2008-04-28T10:17:18Z
  • last-modified: 2008-04-28T10:17:18Z

Links to attack logs

dofrank-ssh-bruteforce-ip-list-2022-06-15