217.66.206.155 Threat Intelligence and Host Information

Share on:
May 15, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 217.66.206.155 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 55/100

Host and Network Information

  • Mitre ATT&CK IDs: T1498 - Network Denial of Service, T1499 - Endpoint Denial of Service, T1499.002 - Service Exhaustion Flood
  • Tags: DDOS, DDoS, HEAD Floods, KillNet, Killnet, T1498, T1499, cc.py

  • View other sources: Spamhaus VirusTotal

  • Country: Iran
  • Network: AS24631 tose h fanavari ertebabat pasargad arian co. pjs
  • Noticed: 23 times
  • Protcols Attacked: Anonymous Proxy

Open Ports Detected

102 10250 11112 11210 113 11371 1167 12000 12345 1290 143 1433 15 1515 17 17000 1701 1883 19000 19071 2000 2010 2030 2052 2056 2081 2087 2096 21 2200 2220 2221 2222 22222 2555 2557 26 2601 27017 2762 3000 3001 3050 3072 3084 3086 3093 3094 3119 3129 31337 3306 3408 3460 3498 3542 3554 3560 3690 3791 4040 4242 4282 444 4443 4550 4840 491 50000 5002 50070 5009 5010 50100 51106 51235 5201 5209 5321 5432 5560 5822 587 593 5985 60129 6080 61613 6264 6379 6588 6605 6653 7171 7474 771 7776 7779 80 8003 8006 8032 8042 8045 8046 8081 8092 8100 8112 8123 8237 830 8404 8406 8418 8420 8545 8586 86 8784 8807 8851 8860 8864 8873 8878 8888 8891 9002 9009 902 9027 9037 9051 9089 9092 9103 9160 9189 9219 9220 9221 9222 9302 9445 9600 9743 9800

CVEs Detected

CVE-2006-20001 CVE-2013-4352 CVE-2013-5704 CVE-2013-6438 CVE-2014-0098 CVE-2014-0117 CVE-2014-0118 CVE-2014-0226 CVE-2014-0231 CVE-2014-3523 CVE-2014-3581 CVE-2014-8109 CVE-2015-0228 CVE-2015-3183 CVE-2015-3184 CVE-2015-3185 CVE-2016-0736 CVE-2016-2161 CVE-2016-4975 CVE-2016-5387 CVE-2016-8612 CVE-2016-8743 CVE-2017-15710 CVE-2017-15715 CVE-2017-3167 CVE-2017-7679 CVE-2017-9788 CVE-2017-9798 CVE-2018-1283 CVE-2018-1301 CVE-2018-1302 CVE-2018-1303 CVE-2018-1312 CVE-2018-17199 CVE-2019-0217 CVE-2019-0220 CVE-2019-10092 CVE-2019-10098 CVE-2019-17567 CVE-2020-11985 CVE-2020-13938 CVE-2020-1927 CVE-2020-1934 CVE-2020-35452 CVE-2021-26690 CVE-2021-26691 CVE-2021-34798 CVE-2021-39275 CVE-2021-40438 CVE-2021-44790 CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23943 CVE-2022-26377 CVE-2022-28330 CVE-2022-28614 CVE-2022-28615 CVE-2022-29404 CVE-2022-30556 CVE-2022-31813 CVE-2022-36760 CVE-2022-37436 CVE-2023-25690 CVE-2023-28625

Map

Whois Information

  • inetnum: 217.70.188.0 - 217.70.191.255
  • netname: GANDI-NET1
  • descr: GANDI DEDICATED HOSTING SERVERS
  • country: FR
  • admin-c: SD10199-RIPE
  • tech-c: GNO4-RIPE
  • status: ASSIGNED PA
  • mnt-by: GANDI-NOC
  • mnt-lower: GANDI-NOC
  • mnt-routes: GANDI-NOC
  • created: 2010-02-18T16:33:48Z
  • last-modified: 2020-05-12T16:05:54Z
  • role: Gandi Network Operations
  • address: 63-65 Boulevard Massena
  • address: 75013 Paris
  • address: France
  • phone: +33 1 70 39 37 55
  • admin-c: SD10199-RIPE
  • tech-c: SD10199-RIPE
  • nic-hdl: GNO4-RIPE
  • abuse-mailbox: [email protected]
  • mnt-by: GANDI-NOC
  • created: 2010-02-10T08:56:37Z
  • last-modified: 2020-05-12T16:22:49Z
  • person: Sebastien Dupas
  • address: Gandi SAS
  • address: 63-65 boulevard Massena
  • address: 75013 Paris
  • address: France
  • phone: +33 1 70 39 37 56
  • nic-hdl: SD10199-RIPE
  • mnt-by: GANDi-NOC
  • created: 2015-04-16T16:34:47Z
  • last-modified: 2015-04-16T16:34:47Z
  • route: 217.70.176.0/20
  • descr: GANDI is an ICANN accredited registrar
  • descr: for more information:
  • descr: Web: http://www.gandi.net
  • origin: AS29169
  • mnt-by: GANDI-NOC
  • created: 2003-07-31T17:09:25Z
  • last-modified: 2003-07-31T17:09:25Z