178.130.45.167 Threat Intelligence and Host Information

Share on:
Apr 16, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Potentially Malicious Host 🟡 37/100

Host and Network Information

  • Tags: Malicious IP, SSH, Telnet, UK Based, attack, blacklist, botnet, bruteforce, ip monitor, login, mirai, scan, scanner, ssh, tcp, telnet, tsec

  • View other sources: Spamhaus VirusTotal

  • Country: Russian Federation
  • Network: AS12389 pjsc rostelecom
  • Noticed: 8 times
  • Protcols Attacked: telnet

Malware Detected on Host

Count: 1 8e890d30b75a78750788b8d98054f0cf19ac3d2296307c2e7392c1b89c782bc8

Open Ports Detected

554 80 9001

CVEs Detected

CVE-2018-10088

Map

Whois Information

  • inetnum: 178.130.44.0 - 178.130.45.255
  • netname: RU-RTK-20100315
  • country: RU
  • org: ORG-JR8-RIPE
  • admin-c: RTNC-RIPE
  • tech-c: RTNC-RIPE
  • status: ALLOCATED PA
  • mnt-by: ROSTELECOM-MNT
  • mnt-by: RIPE-NCC-HM-MNT
  • created: 2020-09-11T14:10:42Z
  • last-modified: 2020-09-11T14:10:42Z
  • organisation: ORG-JR8-RIPE
  • org-name: PJSC Rostelecom
  • country: RU
  • org-type: LIR
  • address: 14 A, Sinopskaya nabereznaya
  • address: 191167
  • address: S.Peterburg
  • address: RUSSIAN FEDERATION
  • phone: +7 499 999-82-83
  • fax-no: +74999953619
  • admin-c: RTNC-RIPE
  • admin-c: EP6706-RIPE
  • admin-c: IE1277-RIPE
  • admin-c: NM7547-RIPE
  • admin-c: AA728-RIPE
  • admin-c: SVS153-RIPE
  • admin-c: ASV77-RIPE
  • admin-c: RVP-RIPE
  • admin-c: VEV57-RIPE
  • admin-c: TR4627-RIPE
  • admin-c: TL4565-RIPE
  • admin-c: DN216-RIPE
  • admin-c: DA2353-RIPE
  • admin-c: IS111-RIPE
  • admin-c: VE128-RIPE
  • admin-c: SS216-RIPE
  • abuse-c: RTNC-RIPE
  • mnt-ref: RIPE-NCC-HM-MNT
  • mnt-ref: ROSTELECOM-MNT
  • mnt-ref: ROSNIIROS-MNT
  • mnt-by: RIPE-NCC-HM-MNT
  • mnt-by: ROSTELECOM-MNT
  • created: 2005-03-22T11:11:20Z
  • last-modified: 2023-01-26T10:52:42Z
  • role: PJSC Rostelecom Technical Team
  • address: PJSC Rostelecom
  • address: Russian Federation
  • abuse-mailbox: [email protected]
  • admin-c: IE1277-RIPE
  • tech-c: IE1277-RIPE
  • nic-hdl: RTNC-RIPE
  • mnt-by: ROSTELECOM-MNT
  • created: 2007-11-27T13:28:11Z
  • last-modified: 2022-12-12T07:46:18Z
  • route: 178.130.44.0/23
  • origin: AS12389
  • mnt-by: ROSTELECOM-MNT
  • created: 2021-12-21T10:34:15Z
  • last-modified: 2021-12-21T10:34:15Z

Links to attack logs

doamsterdam-telnet-bruteforce-ip-list-2023-03-13