61.19.145.66 Threat Intelligence and Host Information

Apr 29, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 61.19.145.66 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 70/100

Host and Network Information

Mitre ATT&CK IDs: T1498 - Network Denial of Service, T1499.002 - Service Exhaustion Flood, T1499 - Endpoint Denial of Service
Tags: attack ddos, botnet, botnet iocs, botnet mirai, cc.py, Cyclops, ddos, DDoS, DDOS, Gamardeon, gorillabot, gs251386, gs2513862, gs251387, HEAD Floods, HermeticWiper, iocs, IsaacWiper, Killnet, KillNet, linux, list ips, malware, mirai, mirai botnet, PartyTicket, portscan, proxy, russia, russian, T1498, T1499, ukraine, WhisperGate
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_net_ua, proxylists_1d, proxylists_30d, proxylists_7d, stopforumspam_180d, stopforumspam_365d, stopforumspam_90d, stopforumspam

Country: Thailand
Network:
Noticed: 37 times
Protocols Attacked: Anonymous Proxy
Countries Attacked: Poland, Russian Federation, Sweden

Malware Detected on Host

Count: 3 2ad8b9bd18f607f61392d8d6a79837013328644915e090901eeb09b6c460d616 2a3f7f441f869fa7b3de642b075c2ca3cd9678e52731face6908eb9f78b99c22 f4bb07fcc5b61e72c473bd3b095141f5b000987d19131803efb7f04ca3d34e49

Open Ports Detected

1723 2000 8728

Map

Whois Information

inetnum: 61.19.144.0 - 61.19.147.255
netname: CAT-North
country: TH
descr: 492 Changmai-Lumpang Road Muang changmai
descr: send spam abuse to cchumpho@cattelecom.co.th
admin-c: TC476-AP
tech-c: IC174-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2008-09-04T07:04:28Z
person: IP-network CAT Telecom
nic-hdl: IC174-AP
e-mail: noc@cat.net.th
address: Data Comm. Dept. National Telecom Public Company Limited
address: NT Tower
address: 72 Charoenkrung Road Bangrak Bangkok THAILAND 10501
phone: +66-2-6142374
fax-no: +66-2-6142270
country: TH
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2022-09-05T09:44:01Z
person: THIX network staff CAT Telecom
nic-hdl: TC476-AP
e-mail: admin-thix@cat.net.th
address: Data Comm. Dept. National Telecom Public Company Limited
address: NT Tower
address: 72 Charoenkrung Road Bangrak Bangkok THAILAND 10501
phone: +66-2-6142374
fax-no: +66-2-6142270
country: TH
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2022-09-05T09:49:38Z
route: 61.19.145.0/24
origin: AS9931
descr: CAT Telecom Public Company Limited
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2023-10-02T03:23:31Z

Links to attack logs

Share on: