94.247.241.70 Threat Intelligence and Host Information

Share on:
May 07, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Known Malicious Host 🔴 75/100

Host and Network Information

  • Mitre ATT&CK IDs: T1102 - Web Service, T1498 - Network Denial of Service, T1499 - Endpoint Denial of Service, T1499.002 - Service Exhaustion Flood
  • Tags: Cyclops, DDOS, DDoS, Gamardeon, HEAD Floods, HermeticWiper, IsaacWiper, KillNet, Killnet, Nextray, PartyTicket, T1498, T1499, WhisperGate, arkei, arkei password, arkei stealer, attack ddos, botnet, cc.py, contact, cyber security, ddos, follow, inside, ioc, iocs, list ips, malicious, never, osint, pastebin, phishing, python, russia, russian, sign up, stealer, twitter, ukraine, use virustotal
  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: lashback_ubl, nixspam, proxylists_1d, proxylists_30d, proxylists_7d, proxz_30d, stopforumspam, stopforumspam_180d, stopforumspam_30d, stopforumspam_365d, stopforumspam_7d, stopforumspam_90d

  • Country: Russian Federation
  • Network: AS48532 jsc er-telecom holding
  • Noticed: 50 times
  • Protcols Attacked: SSH
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Russian Federation, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 5 5ee96cce83902ae9cb52fafac4479412f4d12bfc9b699cb81763f140e7b979a8 88cb6da94b1ff0e563cd656bc37eb1aac3506f852cb333b378d007e1d699d63b c4ad00d7360fc45e1c35cb76b174818ad6462f13fa9b66cec85e1774a170b674 a02c0eacd033a9034d6c420f3ec655b8b2e837b894ad621145e47ae9dc17534b e4721b4f6be4e09599e4326244a640ad0ca57164e85929033e14da1d13d1e26e

Open Ports Detected

2000 53

Map

Whois Information

  • inetnum: 94.247.241.0 - 94.247.241.127
  • netname: ERTHSPB-NET
  • descr: CJSC “ER-Telecom Holding” Saint-Petersburg branch country: RU
  • country: RU
  • admin-c: ERTH78-RIPE
  • tech-c: ERTH78-RIPE
  • status: ASSIGNED PA
  • mnt-by: WESTCALLSPB-MNT-RIPE
  • created: 2021-10-08T10:44:49Z
  • last-modified: 2021-10-08T10:45:32Z
  • role: Network Operation Center CJSC ER-Telecom Holding Saint-Petersburg branch
  • address: JSC “ER-Telecom Holding” Saint-Petersburg
  • address: Kolomyazhsky, 29
  • address: Saint-Petersburg
  • address: Russian Federation
  • phone: +7-800-333-7000
  • fax-no: +7-800-333-7000
  • abuse-mailbox: [email protected]
  • admin-c: ERTH3-RIPE
  • tech-c: RAID1-RIPE
  • nic-hdl: ERTH78-RIPE
  • created: 2010-08-26T04:50:06Z
  • last-modified: 2019-11-08T09:18:10Z
  • mnt-by: RAID-MNT
  • route: 94.247.240.0/21
  • descr: Teleport Sankt-Peterburg Networks
  • origin: AS48532
  • mnt-by: WESTCALLSPB-MNT-RIPE
  • created: 2008-12-10T17:02:43Z
  • last-modified: 2013-04-29T07:59:02Z

Links to attack logs

roxy-ip-list-2023-05-03 roxy-ip-list-2023-05-05