195.161.114.130 Threat Intelligence and Host Information

Jan 11, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 195.161.114.130 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 51/100

Host and Network Information

  • Mitre ATT&CK IDs: T1036 - Masquerading, T1204.002 - Malicious File, T1221 - Template Injection, T1566.001 - Spearphishing Attachment

  • Tags: all cve, cve20130074 add, domains http, ellenmmm cve, expl, exploit, exploits, explorer, files, Gamaredon, iocs files, metasploit, msil, oval oval, Primitive Bear, scan endpoints, targeted

  • View other sources: Spamhaus VirusTotal

Malware Detected on Host

Count: 83 f25f4a78760bf0644c06814a3439b772610d7d62f6c5efde8fb314cc58697b01 611e4b4e3fd15a1694a77555d858fced1b66ff106323eed58b11af2ae663a608 0d91e2ec22cbbc0c5612af42d09d342f42bfdb63667afc07606e7cd5cd0fbdfc 7266bf63e84941be9ead4f8ccba2d0c0f78735f58e2eba3a0cb277b2c68cb0a5 e12c6b63c6216338aa645b63f589d2e96e868f9b1f6402520649cfeb7c053c83 63da0b2abb744a5c92c3a1fff2c3e5940f5c969890f3f16fd8dca0a1363da494 36ed18f16e5d279ec11da50bd4f0024edc234cccbd8a21e76abcfc44e2d08ff2 4c12713ef851e277a66d985f666ac68e73ae21a82d8dcfcedf781c935d640f52 6b2a77bbd4a8daa4be10c32ffb9212ef6464e313b8ccfe1bb8208f5d6071be74 404ed6164154e8fb7fdd654050305cf02835d169c75213c5333254119fc51a83

Map

Links to attack logs

****** ****** ******

Share on: