91.214.31.234 Threat Intelligence and Host Information

Share on:
May 07, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Likely Malicious Host 🟠 65/100

Host and Network Information

  • Mitre ATT&CK IDs: T1498 - Network Denial of Service, T1499 - Endpoint Denial of Service, T1499.002 - Service Exhaustion Flood
  • Tags: Cyclops, DDOS, DDoS, Gamardeon, HEAD Floods, HermeticWiper, IsaacWiper, KillNet, Killnet, PartyTicket, T1498, T1499, WhisperGate, attack ddos, botnet, cc.py, ddos, list ips, russia, russian, ukraine
  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: esentire_crazyerror_su, esentire_dorttlokolrt_com, esentire_emptyarray_ru, esentire_maddox1_ru, proxylists_1d, proxylists_30d, proxylists_7d, proxz_30d, stopforumspam_180d, stopforumspam_365d

  • Country: Ukraine
  • Network: AS49327 tov telza
  • Noticed: 27 times
  • Protcols Attacked: SSH
  • Countries Attacked: Russian Federation

Malware Detected on Host

Count: 1 88cb6da94b1ff0e563cd656bc37eb1aac3506f852cb333b378d007e1d699d63b

Open Ports Detected

1723 21 22 23 3050 80 8728

Map

Whois Information

  • inetnum: 91.214.28.0 - 91.214.31.255
  • netname: TELZA-NET
  • country: UA
  • org: ORG-TA411-RIPE
  • admin-c: PVV62-RIPE
  • tech-c: PVV62-RIPE
  • status: ASSIGNED PI
  • mnt-by: RIPE-NCC-END-MNT
  • mnt-by: TELZA-MNT
  • mnt-routes: TELZA-MNT
  • mnt-domains: TELZA-MNT
  • created: 2009-05-13T12:14:08Z
  • last-modified: 2016-04-14T10:59:20Z
  • sponsoring-org: ORG-TCI1-RIPE
  • organisation: ORG-TA411-RIPE
  • org-name: TOV “Telza”
  • country: UA
  • org-type: OTHER
  • address: Ukraine, 69008 Zaporizhya, Troleybusna street 34, off.16
  • phone: +380612849920
  • fax-no: +380612849910
  • abuse-c: AR24374-RIPE
  • admin-c: PVV62-RIPE
  • tech-c: PVV62-RIPE
  • mnt-ref: TELZA-MNT
  • mnt-ref: MNT-ALFATELECOM
  • mnt-by: TELZA-MNT
  • created: 2009-05-11T07:09:28Z
  • last-modified: 2022-12-01T16:54:25Z
  • person: Popov Vladimir
  • address: 69000, Ukraine
  • phone: +380 00 111 22 33
  • nic-hdl: PVV62-RIPE
  • mnt-by: RADIOCOM-ISP
  • created: 2008-11-28T16:54:09Z
  • last-modified: 2019-11-27T21:52:03Z
  • route: 91.214.31.0/24
  • descr: for test purposes
  • origin: AS49327
  • mnt-by: TELZA-MNT
  • created: 2012-11-10T20:33:57Z
  • last-modified: 2013-04-06T10:21:23Z

Links to attack logs

roxy-ip-list-2023-05-03 roxy-ip-list-2023-05-05