194.67.27.30 Threat Intelligence and Host Information

Share on:

Apr 24, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Likely Malicious Host 🟠 65/100

Host and Network Information

Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110 - Brute Force, T1110.004 - Credential Stuffing
Tags: Brute-Force, Bruteforce, Nextray, SSH, Telnet, attack, cowrie, cyber security, ioc, login, malicious, phishing, scanner, ssh, tsec
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_de, blocklist_de_ssh, greensnow
Country: Russian Federation
Network: AS3216 pjsc vimpelcom
Noticed: 50 times
Protcols Attacked: ssh
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Map

Whois Information

inetnum: 194.67.27.0 - 194.67.27.255
netname: RU-TELEROSS-MSK-and-Static-IP-Pool-NET
descr: 111250 Russia Moscow TeleRoss et EDN/SOVINTEL
descr: p2p and xEthr, xDSL clients static IP pool
status: ASSIGNED PA
country: RU
admin-c: SVNT1-RIPE
tech-c: SVNT2-RIPE
mnt-by: SOVINTEL-MNT
created: 2013-02-21T04:53:14Z
last-modified: 2013-02-21T04:53:14Z
role: Sovintel NOC
address: 111250 Russia Moscow Krasnokazarmennaya, 12
mnt-by: SOVINTEL-MNT
org: ORG-ES15-RIPE
phone: +7 800 7008061
fax-no: +7 495 7871010
abuse-mailbox: [email protected]
admin-c: IAI1-RIPE
admin-c: DM3740-RIPE
tech-c: DM3740-RIPE
tech-c: SVNT2-RIPE
nic-hdl: SVNT1-RIPE
created: 2004-05-13T11:50:32Z
last-modified: 2022-04-20T08:31:22Z
role: Sovintel Abuse Department
address: 111250 Russia Moscow, Krasnokazarmennaya, 12
org: ORG-ES15-RIPE
fax-no: +7 495 7254300
phone: +7 495 7871000
nic-hdl: SVNT2-RIPE
admin-c: SVNT1-RIPE
tech-c: SVNT1-RIPE
mnt-by: SOVINTEL-MNT
created: 2004-05-14T10:21:01Z
last-modified: 2018-11-08T08:46:48Z
abuse-mailbox: [email protected]
route: 194.67.0.0/18
descr: SOVAM DELEGATED BLOCK-1
origin: AS3216
mnt-by: AS3216-MNT
mnt-by: SOVINTEL-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2012-05-25T05:53:39Z

Links to attack logs