80.78.237.2 Threat Intelligence and Host Information
Share on:
May 06, 2023
ipinfopage
General
This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.
Potentially Malicious Host 🟡 47/100
Host and Network Information
- Mitre ATT&CK IDs: T1498 - Network Denial of Service, T1499 - Endpoint Denial of Service, T1499.002 - Service Exhaustion Flood
- Tags: Cyclops, DDOS, DDoS, Gamardeon, HEAD Floods, HermeticWiper, IsaacWiper, KillNet, Killnet, PartyTicket, T1498, T1499, WhisperGate, attack ddos, botnet, cc.py, ddos, list ips, russia, russian, ukraine
-
View other sources: Spamhaus VirusTotal
- Country: Bulgaria
- Network: AS39184 ultranet ltd
- Noticed: 26 times
- Protcols Attacked: SSH
- Countries Attacked: Russian Federation
Malware Detected on Host
Count: 2 c4ad00d7360fc45e1c35cb76b174818ad6462f13fa9b66cec85e1774a170b674 a8ec12a12486df617d26547e2a0c36f89dcf21b36875c9519ea1d59c5ddc8a21
Open Ports Detected
Map
Whois Information
- inetnum: 80.78.237.0 - 80.78.237.255
- netname: ULTRANET-NET
- descr: ULTRANET GOCE DELCHEV - HALIL NETWORK
- country: BG
- admin-c: IT711-RIPE
- tech-c: IT711-RIPE
- status: ASSIGNED PA
- mnt-by: MNT-BGULTRANET
- mnt-lower: MNT-BGULTRANET
- mnt-routes: MNT-BGULTRANET
- created: 2012-07-31T11:57:20Z
- last-modified: 2012-07-31T11:57:20Z
- person: Ivan Tushev
- address: UltraNET Ltd
- address: 14, Peter Beron str.
- address: 2800 Sandanski, Bulgaria
- phone: +359 885511000
- fax-no: +359 73832271
- nic-hdl: IT711-RIPE
- mnt-by: MNT-BGULTRANET
- created: 2005-08-02T07:29:48Z
- last-modified: 2017-10-30T21:46:54Z
- route: 80.78.237.0/24
- descr: UltraNET - Halil Network
- origin: AS39184
- mnt-by: MNT-BGULTRANET
- created: 2012-07-31T11:57:41Z
- last-modified: 2012-07-31T11:57:41Z