65.49.67.1 Threat Intelligence and Host Information

Apr 28, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 65.49.67.1 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 70/100

Host and Network Information

Mitre ATT&CK IDs: T1498 - Network Denial of Service, T1499.002 - Service Exhaustion Flood, T1499 - Endpoint Denial of Service
Tags: attack ddos, botnet, cc.py, Cyclops, ddos, DDoS, DDOS, Gamardeon, HEAD Floods, HermeticWiper, IsaacWiper, Killnet, KillNet, list ips, PartyTicket, russia, russian, T1498, T1499, ukraine, WhisperGate
View other sources: Spamhaus VirusTotal
Contained within other IP sets: socks_proxy_1d, socks_proxy_30d, socks_proxy_7d, socks_proxy

Country: United States
Network:
Noticed: 27 times
Protocols Attacked: Anonymous Proxy
Countries Attacked: Russian Federation

Open Ports Detected

123 161 1701 1723 2000 443 53 8291

CVEs Detected

CVE-2018-5951 CVE-2019-13074 CVE-2019-13954 CVE-2019-13955 CVE-2019-15055 CVE-2019-16160 CVE-2019-3976 CVE-2019-3977 CVE-2019-3978 CVE-2019-3979 CVE-2020-10364 CVE-2020-11881 CVE-2020-20021 CVE-2020-20217 CVE-2020-20220 CVE-2020-20221 CVE-2020-20225 CVE-2020-20230 CVE-2020-20247 CVE-2020-20249 CVE-2020-20250 CVE-2020-20252 CVE-2020-20253 CVE-2020-20254 CVE-2020-20262 CVE-2020-20264 CVE-2020-20265 CVE-2020-20266 CVE-2020-20267 CVE-2021-3014 CVE-2021-36613 CVE-2021-36614 CVE-2022-36522 CVE-2022-45313 CVE-2022-45315 CVE-2023-30799 CVE-2023-30800

Map

Whois Information

NetRange: 65.49.0.0 - 65.49.127.255
CIDR: 65.49.0.0/17
NetName: HURRICANE-9
NetHandle: NET-65-49-0-0-1
Parent: NET65 (NET-65-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS6939
Organization: Hurricane Electric LLC (HURC)
RegDate: 2007-10-04
Updated: 2012-02-24
Ref: https://rdap.arin.net/registry/ip/65.49.0.0
OrgName: Hurricane Electric LLC
OrgId: HURC
Address: 760 Mission Court
City: Fremont
StateProv: CA
PostalCode: 94539
Country: US
RegDate:
Updated: 2024-11-25
Ref: https://rdap.arin.net/registry/entity/HURC
OrgTechHandle: ZH17-ARIN
OrgTechName: Hurricane Electric
OrgTechPhone: +1-510-580-4100
OrgTechEmail: hostmaster@he.net
OrgTechRef: https://rdap.arin.net/registry/entity/ZH17-ARIN
OrgAbuseHandle: ABUSE1036-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-510-580-4100
OrgAbuseEmail: abuse@he.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1036-ARIN
RNOCHandle: ZH17-ARIN
RNOCName: Hurricane Electric
RNOCPhone: +1-510-580-4100
RNOCEmail: hostmaster@he.net
RNOCRef: https://rdap.arin.net/registry/entity/ZH17-ARIN
RAbuseHandle: ABUSE1036-ARIN
RAbuseName: Abuse Department
RAbusePhone: +1-510-580-4100
RAbuseEmail: abuse@he.net
RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1036-ARIN
RTechHandle: ZH17-ARIN
RTechName: Hurricane Electric
RTechPhone: +1-510-580-4100
RTechEmail: hostmaster@he.net
RTechRef: https://rdap.arin.net/registry/entity/ZH17-ARIN
NetRange: 65.49.67.0 - 65.49.67.255
CIDR: 65.49.67.0/24
NetName: HURRICANE-CE2363-A31
NetHandle: NET-65-49-67-0-1
Parent: HURRICANE-9 (NET-65-49-0-0-1)
NetType: Reassigned
OriginAS:
Customer: Calcom (C02478976)
RegDate: 2010-04-23
Updated: 2010-04-23
Ref: https://rdap.arin.net/registry/ip/65.49.67.0
CustName: Calcom
Address: 1420 Briarberry Ln
City: Gilroy
StateProv: CA
PostalCode: 95020
Country: US
RegDate: 2010-04-23
Updated: 2011-03-19
Ref: https://rdap.arin.net/registry/entity/C02478976
OrgTechHandle: ZH17-ARIN
OrgTechName: Hurricane Electric
OrgTechPhone: +1-510-580-4100
OrgTechEmail: hostmaster@he.net
OrgTechRef: https://rdap.arin.net/registry/entity/ZH17-ARIN
OrgAbuseHandle: ABUSE1036-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-510-580-4100
OrgAbuseEmail: abuse@he.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1036-ARIN
RNOCHandle: ZH17-ARIN
RNOCName: Hurricane Electric
RNOCPhone: +1-510-580-4100
RNOCEmail: hostmaster@he.net
RNOCRef: https://rdap.arin.net/registry/entity/ZH17-ARIN
RAbuseHandle: ABUSE1036-ARIN
RAbuseName: Abuse Department
RAbusePhone: +1-510-580-4100
RAbuseEmail: abuse@he.net
RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1036-ARIN
RTechHandle: ZH17-ARIN
RTechName: Hurricane Electric
RTechPhone: +1-510-580-4100
RTechEmail: hostmaster@he.net
RTechRef: https://rdap.arin.net/registry/entity/ZH17-ARIN
network:ID;I:NET-65.49.67.0/24
network:Auth-Area:nets
network:Class-Name:network
network:Network-Name;I:NET-65.49.67.0/24
network:Parent;I:NET-65.49.0.0/17
network:IP-Network:65.49.67.0/24
network:Org-Contact;I:POC-CE-2363
network:Tech-Contact;I:POC-HE-NOC
network:Abuse-Contact;I:POC-HE-ABUSE
network:NOC-Contact;I:POC-HE-NOC
network:Created:20180817203004000
network:Updated:20180817203004000
contact:ID;I:POC-CE-2363
contact:Auth-Area:contacts
contact:Class-Name:contact
contact:Name:Josue Artiga
contact:Company:Calcom
contact:Street-Address:1420 Briarberry Ln
contact:City:Gilroy
contact:Province:CA
contact:Postal-Code:95020
contact:Country-Code:US
contact:Phone:-
contact:E-Mail:-
contact:Created:20180817203001000
contact:Updated:20180817203001000
contact:ID;I:POC-HE-NOC
contact:Auth-Area:contacts
contact:Class-Name:contact
contact:Name:Network Operations Center
contact:Company:Hurricane Electric
contact:Street-Address:760 Mission Ct
contact:City:Fremont
contact:Province:CA
contact:Postal-Code:94539
contact:Country-Code:US
contact:Phone:+1-510-580-4100
contact:E-Mail:noc@he.net
contact:Created:20100901200738000
contact:Updated:20100901200738000
contact:ID;I:POC-HE-ABUSE
contact:Auth-Area:contacts
contact:Class-Name:contact
contact:Name:Abuse Department
contact:Company:Hurricane Electric
contact:Street-Address:760 Mission Ct
contact:City:Fremont
contact:Province:CA
contact:Postal-Code:94539
contact:Country-Code:US
contact:Phone:+1-510-580-4100
contact:E-Mail:abuse@he.net
contact:Created:20100901200738000
contact:Updated:20100901200738000
contact:Comment:For email abuse (spam) only

Links to attack logs

Share on: