78.85.49.18 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 78.85.49.18 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 14/100

Host and Network Information

  • Country: Russia
  • Network:
  • Noticed: 2 times
  • Protocols Attacked: Anonymous Proxy
  • Passive DNS Results: umosta.keenetic.pro device-410fc073-8019-41c0-8814-730f7ab9db4b.remotewd.com device-3a4314b0-aae1-4aa8-ae16-582b346617d0.remotewd.com hellofrunze.keenetic.link

Malware Detected on Host

Count: 3 228bfcd48779b76cfaa8512854ecaaf9d879785820f9fcb02f91d116d0d6fc92 41eac964fb3e315e1fa7fc500a2543894b98c74496994c5b2e9b18a5b55d1fcf e4baaddf417a8adb81f6b1892d039551e2295a264cf0f49d9c208c7f16f3d505

Map

Whois Information

  • inetnum: 78.85.45.0 - 78.85.64.255
  • netname: UDMVT-NET
  • descr: Second assignment
  • country: RU
  • admin-c: PAA67-RIPE
  • tech-c: PAA67-RIPE
  • status: ASSIGNED PA
  • mnt-by: MNT-PAA67
  • created: 2007-11-28T14:29:15Z
  • last-modified: 2009-02-11T10:26:14Z
  • person: Andrey Pozdeev
  • address: Izhevsk, Pushkinskaya street, 278
  • phone: +7 3412 459 417
  • nic-hdl: PAA67-RIPE
  • created: 2009-01-26T09:31:56Z
  • last-modified: 2019-03-15T05:28:16Z
  • mnt-by: MNT-PAA67
  • route: 78.85.48.0/23
  • descr: Rostelecom networks
  • origin: AS12389
  • mnt-by: ROSTELECOM-MNT
  • created: 2018-09-28T11:58:02Z
  • last-modified: 2018-09-28T11:58:02Z

Links to attack logs

dofrank-telnet-bruteforce-ip-list-2021-09-06 anonymous-proxy-ip-list-2026-02-17 ****** ******

Share on: