81.177.139.161 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 81.177.139.161 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 40/100

Host and Network Information

  • Tags: cyber security, ioc, malicious, Nextray, phishing

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: cleanmx_viruses

Malware Detected on Host

Count: 110 f196d297922bcc210047d165ef9813011ab1d583d719257300c8965814c1b63b 94ccd4b1e6e7efd5b706d7f5e34cee870ab6eb60784e813dd0b22ba788fda581 40af7e6b48d1326a6efbe8a26f36cbed5824b5746b069ee4cd7a6ee3c7ba7a4c 6cda3de11cb388e72127e822618b24577515825070b9a72dfd06a8deb0baf6e9 82b7481ba5626701f804d1714e6c8d80c3116a25e5091623dea50ea6d8f6b5d5 03385033ef1d6ed4017ebab8e3f01baf6747a12980a4ebd08c67ce7b729e52f9 1f8eb64025c8cdf7fc52b35aa8affc9da4dccb61c131ee517d1d38c77e3306ae a09c50ccdaaa8e216bac0aee90acc29b07dfed692a0548bc85a6722578341f40 5a188fec22ac12a929aa5fccf1afa057f1914d7d2ada3832ed7b95ceb253999b 84a25210c3100f9d7e68876baad312de24ac34744da99edc4ea87ad9b3603e0a

Open Ports Detected

21 22 2222 443 80

CVEs Detected

CVE-2016-20012 CVE-2017-15906 CVE-2018-15473 CVE-2018-15919 CVE-2018-20685 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408

Map

Whois Information

  • inetnum: 81.177.139.0 - 81.177.139.255
  • netname: AVGURO-NET
  • descr: Avguro Technologies Ltd. Hosting service provider
  • descr: Moscow, Russia
  • country: RU
  • admin-c: SU407-RIPE
  • tech-c: SU407-RIPE
  • abuse-c: ATA95-RIPE
  • status: ASSIGNED PA
  • mnt-by: AS8342-MNT
  • created: 2010-05-04T13:54:02Z
  • last-modified: 2019-01-30T08:42:03Z
  • person: Sergey Ulyashin
  • address: Avguro Technologies Ltd.
  • address: 18, 912, Yunnatov str.
  • address: 127083, Moscow, Russia
  • phone: +74952293031
  • fax-no: +74952293031
  • nic-hdl: SU407-RIPE
  • created: 2007-08-07T13:30:58Z
  • last-modified: 2020-06-04T12:20:02Z
  • mnt-by: AS8342-MNT
  • route: 81.177.128.0/19
  • descr: RTCOMM-RU
  • origin: AS8342
  • mnt-by: AS8342-MNT
  • created: 2015-03-05T10:00:46Z
  • last-modified: 2015-03-05T10:00:46Z
Share on: