37.120.222.132 Threat Intelligence and Host Information

Jul 24, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 37.120.222.132 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 50/100

Host and Network Information

Mitre ATT&CK IDs: T1498 - Network Denial of Service, T1499.002 - Service Exhaustion Flood, T1499 - Endpoint Denial of Service
Tags: attack ddos, botnet, cc.py, Cyclops, ddos, DDoS, DDOS, Gamardeon, HEAD Floods, HermeticWiper, IsaacWiper, Killnet, KillNet, list ips, PartyTicket, russia, russian, T1498, T1499, ukraine, WhisperGate
View other sources: Spamhaus VirusTotal

Country: Germany
Network:
Noticed: 26 times
Protocols Attacked: Anonymous Proxy
Countries Attacked: Russian Federation
Passive DNS Results: 51inlussionsections.site 11inlussionsections.site 31inlussionsections.site 41inlussionsections.site 21inlussionsections.site 3eerersererrdsdd.site 1eerersererrdsdd.site 2eerersererrdsdd.site 1eeou9458459834834.site 2conventiionalasn.site 1conventiionalasn.site 538484correction.xyz 238484correction.xyz 438484correction.xyz 338484correction.xyz 638484correction.xyz 138484correction.xyz accordinglisor.xyz alodiemislop.site dromislatings.site cromfisation.site bscaolineations.site elitesprotectionsolite.site accordinglisor.one aliverotation.xyz acriosisymos.site amicfmimos.site adorudemiso.site acrouemiso.site rahanetts.ml www.office365loginoutlook.loginaudiofaxingoutlooks.xyz login.office365loginoutlook.loginaudiofaxingoutlooks.xyz office365loginoutlook.loginaudiofaxingoutlooks.xyz sso.office365loginoutlook.loginaudiofaxingoutlooks.xyz events.api.office365loginoutlook.loginaudiofaxingoutlooks.xyz events.api.securesoutlooksauthenticats.oficecompcenterpirses.xyz login.securesoutlooksauthenticats.oficecompcenterpirses.xyz securesoutlooksauthenticats.oficecompcenterpirses.xyz www.securesoutlooksauthenticats.oficecompcenterpirses.xyz sso.securesoutlooksauthenticats.oficecompcenterpirses.xyz events.api.oficesecuresoutlooksauthenticate.officebbottlebels.xyz oficesecuresoutlooksauthenticate.officebbottlebels.xyz login.oficesecuresoutlooksauthenticate.officebbottlebels.xyz www.oficesecuresoutlooksauthenticate.officebbottlebels.xyz sso.oficesecuresoutlooksauthenticate.officebbottlebels.xyz sso.oficesecuresoutlooksauthenticat.hhsportsprotections.xyz login.oficesecuresoutlooksauthenticat.hhsportsprotections.xyz events.api.oficesecuresoutlooksauthenticat.hhsportsprotections.xyz oficesecuresoutlooksauthenticat.hhsportsprotections.xyz www.oficesecuresoutlooksauthenticat.hhsportsprotections.xyz myaccount.logingmallsecurecloudd.germailcomloudbase.xyz www.logingmallsecurecloudd.germailcomloudbase.xyz play.logingmallsecurecloudd.germailcomloudbase.xyz accounts.logingmallsecurecloudd.germailcomloudbase.xyz ssl.logingmallsecurecloudd.germailcomloudbase.xyz apis.logingmallsecurecloudd.germailcomloudbase.xyz content.logingmallsecurecloudd.germailcomloudbase.xyz login.officersoutlooksauthenticate.onlinessautlookofice360.xyz officersoutlooksauthenticate.onlinessautlookofice360.xyz www.officersoutlooksauthenticate.onlinessautlookofice360.xyz sso.loginoutlookcomauthenticate.onlineautlookofice365.xyz login.loginoutlookcomauthenticate.onlineautlookofice365.xyz loginoutlookcomauthenticate.onlineautlookofice365.xyz www.loginoutlookcomauthenticate.onlineautlookofice365.xyz events.api.loginoutlookcomauthenticate.onlineautlookofice365.xyz portal.officersoutlooks356authenticaticons.outloginoficecom.xyz hm.officersoutlooks356authenticaticons.outloginoficecom.xyz home.officersoutlooks356authenticaticons.outloginoficecom.xyz adfsrss.officersoutlooks356authenticaticons.outloginoficecom.xyz adfsrss.loginsoutlook-comsecuresauthenticates.loginoficecom.xyz hm.loginsoutlook-comsecuresauthenticates.loginoficecom.xyz home.loginsoutlook-comsecuresauthenticates.loginoficecom.xyz portal.loginsoutlook-comsecuresauthenticates.loginoficecom.xyz hm.filesecuresoutlooksauthenticates.outlookfaxing.xyz home.filesecuresoutlooksauthenticates.outlookfaxing.xyz portal.filesecuresoutlooksauthenticates.outlookfaxing.xyz adfsrss.filesecuresoutlooksauthenticates.outlookfaxing.xyz hm.filesecuresoutlooksauthenticates.setoriengineeirng-au.com adfsrss.filesecuresoutlooksauthenticates.setoriengineeirng-au.com home.filesecuresoutlooksauthenticates.setoriengineeirng-au.com portal.filesecuresoutlooksauthenticates.setoriengineeirng-au.com boostconceptrobot.com empresarialsuporte.digital empresarialsuporte.com cliente-suporteempresarial.com

Malware Detected on Host

Count: 3 f58d715578a96d5777b4688ee296de6be64866f0a9b32158338aea5e7aac0352 942edb59841d2ed087b77906165bd5d71c7812121e355093a6217ab53d8a261b b623c4c6ccd520c407a65cbdd039c91c697e7e13f5db90ddf654bc3771884668

Map

Links to attack logs

Share on: