96.9.77.71 Threat Intelligence and Host Information
Share on:General
This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.
Likely Malicious Host 🟠 60/100
Host and Network Information
- Mitre ATT&CK IDs: T1498 - Network Denial of Service
- Tags: Cyclops, DDOS, Gamardeon, HermeticWiper, IsaacWiper, KillNet, Nextray, PartyTicket, WhisperGate, attack ddos, botnet, cyber security, ddos, ioc, list ips, malicious, phishing, russia, russian, ukraine
- View other sources: Spamhaus VirusTotal
-
Contained within other IP sets: blocklist_net_ua, socks_proxy_1d, socks_proxy_30d, socks_proxy_7d, sslproxies_30d, sslproxies_7d, stopforumspam, stopforumspam_180d, stopforumspam_1d, stopforumspam_365d, stopforumspam_90d
- Country: Cambodia
- Network: AS131207 sinet cambodias specialist internet and telecom service provider
- Noticed: 50 times
- Protcols Attacked: SSH
- Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Russian Federation, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Malware Detected on Host
Count: 5 d97c3ae50b6cad342045d900154326d02332496c155d07382b233b110056b23a 5ee96cce83902ae9cb52fafac4479412f4d12bfc9b699cb81763f140e7b979a8 88cb6da94b1ff0e563cd656bc37eb1aac3506f852cb333b378d007e1d699d63b c4ad00d7360fc45e1c35cb76b174818ad6462f13fa9b66cec85e1774a170b674 e833f9e5d34d2abb9ac7407ccffc947d9284de6d62f373b1248a4c27cf1abf2f
Open Ports Detected
Map
Whois Information
- NetRange: 96.9.64.0 - 96.9.95.255
- CIDR: 96.9.64.0/19
- NetName: APNIC
- NetHandle: NET-96-9-64-0-1
- Parent: NET96 (NET-96-0-0-0-0)
- NetType: Early Registrations, Transferred to APNIC
- OriginAS:
- Organization: Asia Pacific Network Information Centre (APNIC)
- RegDate: 2015-08-20
- Updated: 2015-08-20
- Ref: https://rdap.arin.net/registry/ip/96.9.64.0
- OrgName: Asia Pacific Network Information Centre
- OrgId: APNIC
- Address: PO Box 3646
- City: South Brisbane
- StateProv: QLD
- PostalCode: 4101
- Country: AU
- RegDate:
- Updated: 2012-01-24
- Ref: https://rdap.arin.net/registry/entity/APNIC
- OrgAbuseHandle: AWC12-ARIN
- OrgAbuseName: APNIC Whois Contact
- OrgAbusePhone: +61 7 3858 3188
- OrgAbuseEmail: [email protected]
- OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
- OrgTechHandle: AWC12-ARIN
- OrgTechName: APNIC Whois Contact
- OrgTechPhone: +61 7 3858 3188
- OrgTechEmail: [email protected]
- OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
- inetnum: 96.9.77.0 - 96.9.77.255
- netname: SIGROUPS-KH
- descr: SINET, Dedicated Fiber, Dedicated Speed, Dedicated Support, Dedicated Always.
- country: KH
- admin-c: TP288-AP
- tech-c: DK804-AP
- abuse-c: AS2459-AP
- status: ALLOCATED NON-PORTABLE
- mnt-by: MAINT-KH-SIGROUPS
- mnt-irt: IRT-SPLUS-KH
- last-modified: 2020-07-20T09:48:39Z
- irt: IRT-SPLUS-KH
- address: Phnom Penh
- e-mail: [email protected]
- abuse-mailbox: [email protected]
- admin-c: TP288-AP
- tech-c: DK804-AP
- mnt-by: MAINT-KH-SINET
- last-modified: 2023-03-30T02:44:18Z
- role: ABUSE SPLUSKH
- address: Phnom Penh
- country: ZZ
- phone: +000000000
- e-mail: [email protected]
- admin-c: TP288-AP
- tech-c: DK804-AP
- nic-hdl: AS2459-AP
- abuse-mailbox: [email protected]
- mnt-by: APNIC-ABUSE
- last-modified: 2023-03-30T02:45:07Z
- person: Diep Kong
- country: KH
- phone: +855 81 927 999
- e-mail: [email protected]
- nic-hdl: DK804-AP
- mnt-by: MAINT-KH-SIGROUPS
- fax-no: +855 23 215 577
- last-modified: 2018-04-18T03:01:13Z
- person: Tsiferana PEDERSEN
- address: S.I Building
- country: KH
- phone: +855 23 210 586
- e-mail: [email protected]
- nic-hdl: TP288-AP
- abuse-mailbox: [email protected]
- mnt-by: MAINT-KH-SIGROUPS
- last-modified: 2011-09-02T07:45:15Z
- route: 96.9.77.0/24
- origin: AS131207
- descr: S.I Group
- mnt-by: MAINT-KH-SIGROUPS
- last-modified: 2021-05-27T07:26:45Z