81.169.145.164 Threat Intelligence and Host Information

Nov 24, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 81.169.145.164 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 60/100

Host and Network Information

  • Mitre ATT&CK IDs: T1056 - Input Capture, T1115 - Clipboard Data, T1176 - Browser Extensions

  • Tags: bladabindi, center, cerber, compromiseiocs, cyber security, formbook, hashessee json, ioc, iocs, ioc searching, json file, malicious, microsoft word, mitre att, Nextray, phishing, qbot, rats, talos, threat roundup, tsec

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: cleanmx_viruses, cta_cryptowall, hphosts_emd, hphosts_fsa, malwaredomainlist, xforce_bccs

Malware Detected on Host

Count: 80 951cb2c840b128d0e3280e1fe311243828ec0b17870eb9bb0621c27a3ba70f35 f4e82bf60b85a2725ff64e1963cd1cbefaeb05f8bfada1a5fab2f7244ef47650 60c2aa4d30f1a1d84e03cde89c9d16de70071f0bed798a95e309218a8ee64997 93840611efabd4bb64d942df17c8a716b4c0bc0d38556ac71a709f4a4eef2eb1 9f9548de98dfdbbb46775695eae16e9e77ccd64f3905fe8894393bbe5685af67 8437007e6af9d7be7465f1b1a2d4af1e48454cb609aea249a667abb8133347f2 9046c4f2be9c4628e88fab7e259fd27f7cbb50112404045e1f8e51960e447aa5 b0d3e00008127d6bd5474804746474216f3eeff2a5f92795f35fa581196a0fe3 6ba9d81823e763ce643e98d6df5a76d42fef35341aea9e1afb1c1585f80d3717 008d50000d52c612180b5bc89e0d162776a2999925200f2454228c4f9f1f0fda

Open Ports Detected

21 443 80 8080

Map

Whois Information

  • inetnum: 81.169.144.0 - 81.169.148.255
  • descr: STRATO AG
  • netname: STRATO-RZG-KA
  • org: ORG-SRA1-RIPE
  • descr: Strato Rechenzentrum, Berlin
  • country: DE
  • admin-c: SRRC-RIPE
  • tech-c: SRRC-RIPE
  • status: ASSIGNED PA
  • mnt-by: STRATO-RZG-MNT
  • created: 2010-01-15T09:26:51Z
  • last-modified: 2020-11-10T11:39:47Z
  • organisation: ORG-SRA1-RIPE
  • org-name: Strato AG
  • country: DE
  • org-type: LIR
  • address: Otto-Ostrowski-Straße 7
  • address: 10249
  • address: Berlin
  • address: GERMANY
  • phone: +4972191374551
  • admin-c: SP20660-RIPE
  • abuse-c: SRAC-RIPE
  • mnt-ref: RIPE-NCC-HM-MNT
  • mnt-ref: STRATO-RZG-MNT
  • mnt-by: RIPE-NCC-HM-MNT
  • mnt-by: STRATO-RZG-MNT
  • created: 2004-04-17T11:12:39Z
  • last-modified: 2023-06-14T08:03:06Z
  • admin-c: SH15342-RIPE
  • tech-c: SH15342-RIPE
  • tech-c: SP20660-RIPE
  • role: RIPE contact
  • address: STRATO AG
  • address: Otto-Ostrowski-Straße 7
  • address: D-10249 Berlin
  • address: Germany
  • phone: +49 30 39802-0
  • org: ORG-SRA1-RIPE
  • abuse-mailbox: abuse@strato.de
  • admin-c: SH15342-RIPE
  • tech-c: SH15342-RIPE
  • nic-hdl: SRRC-RIPE
  • mnt-by: STRATO-RZG-MNT
  • created: 2010-01-15T08:35:31Z
  • last-modified: 2023-01-02T09:13:13Z
  • admin-c: SP20660-RIPE
  • tech-c: SP20660-RIPE
  • route: 81.169.145.0/24
  • descr: STRATO AG
  • descr: prefix only advertised in case of DDoS
  • origin: AS6724
  • mnt-by: STRATO-RZG-MNT
  • created: 2014-02-18T16:19:03Z
  • last-modified: 2014-02-18T16:19:03Z
Share on: