94.245.133.128 Threat Intelligence and Host Information

Share on:

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Potentially Malicious Host 🟡 35/100

Host and Network Information

  • Tags: Malicious IP, Nextray, awssafrica, blacklist, botnet, bruteforce, cyber security, ioc, malicious, mirai, phishing, scan, tcp, telnet, tsec
  • View other sources: Spamhaus VirusTotal

  • Country: Russian Federation
  • Network: AS12389 pjsc rostelecom
  • Noticed: 7 times
  • Protcols Attacked: telnet
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, South Africa, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Map

Whois Information

  • inetnum: 94.245.128.0 - 94.245.159.255
  • netname: SAKHA
  • descr: Sakhatelecom, Kurashova Street, 22
  • descr: 677000 Yakutsk City
  • country: RU
  • admin-c: AEN1-RIPE
  • admin-c: dykt-ripe
  • tech-c: AEN1-RIPE
  • tech-c: dykt-ripe
  • status: ASSIGNED PA
  • mnt-by: SAKHA-MNT
  • created: 2008-11-07T10:18:00Z
  • last-modified: 2018-10-04T07:46:21Z
  • person: Alexey E Nespanov
  • address: 22, Kurashova str., 677000 Yakutsk City
  • phone: +7 4112 244032
  • phone: +7 4112 423008
  • fax-no: +7 4112 241077
  • nic-hdl: AEN1-RIPE
  • created: 2001-12-18T08:25:26Z
  • last-modified: 2020-06-04T10:24:06Z
  • mnt-by: ROSTELECOM-MNT
  • person: Fedorov Dmitry Valeryevich
  • address: 677000 Yakutsk city, Kurashova str., 22
  • phone: +7 4112 407257
  • nic-hdl: dykt-ripe
  • mnt-by: SAKHA-MNT
  • created: 2017-09-07T03:36:05Z
  • last-modified: 2017-09-07T03:50:37Z
  • route: 94.245.133.0/24
  • descr: Sakhatelecom
  • origin: AS21487
  • mnt-by: SAKHA-MNT
  • created: 2008-11-17T23:57:10Z
  • last-modified: 2018-10-04T06:13:58Z

Links to attack logs

awssafrica-telnet-bruteforce-ip-list-2022-03-02