IP address

OTX pulses

[67c86f1b08b6a1ffab6af3db] 2025-03-05 15:34:50.308000 | Astrill VPN and DPRK Remote Worker Fraud

Author name:	AlienVault
Pulse modified:	2025-03-05 15:34:50.308000
Indicator created:	2025-03-05 15:34:52
Indicator role:	None
Indicator title:
Indicator expiration:	2025-04-04 15:00:00

Origin AS

AS8100 - ASN-QUADRANET-GLOBAL

BGP Prefix

66.154.104.0/24

geo

United States, Los Angeles

🕑 America/Los_Angeles

hostname

66.154.104.8.static.quadranet.com

hostname_class

['ip_in_hostname', 'static']

Address block ('inetnum' or 'NetRange' in whois database)

66.154.96.0 - 66.154.127.255

last_activity

2025-03-05 16:33:23.951000

reserved_range

0

Shodan's InternetDB

Open ports: 43, 53, 70, 79, 104, 111, 113, 135, 175, 195, 264, 311, 443, 444, 554, 789, 1080, 1099, 1337, 1414, 1433, 1521, 1599, 1723, 1801, 1911, 1926, 1962, 2000, 2083, 2345, 2376, 2761, 2762, 3001, 3128, 3260, 3299, 3310, 3388, 3389, 3790, 4000, 4242, 4433, 4434, 4443, 4444, 4786, 5001, 5006, 5009, 5025, 5201, 5222, 5269, 5435, 5555, 5672, 5938, 5986, 6000, 6001, 6379, 6443, 6668, 7001, 7071, 7171, 7434, 7443, 7548, 7777, 8002, 8009, 8081, 8083, 8085, 8089, 8126, 8139, 8140, 8181, 8291, 8443, 8554, 8728, 8834, 8880, 8889, 9001, 9002, 9042, 9091, 9095, 9100, 9333, 9398, 9418, 9443, 9530, 9600, 9876, 9898, 9943, 10000, 10050, 10051, 10250, 10443, 11112, 11288, 13047, 16992, 16993, 17000, 18081, 18245, 20547, 20880, 21379, 22001, 22070, 22556, 23023, 24245, 25105, 26656, 26657, 27015, 27036, 28080, 30022, 30122, 30301, 30322, 30422, 30522, 30922, 31122, 31322, 31337, 31422, 31522, 31622, 32122, 32222, 32400, 32522, 32764, 33422, 33622, 33822, 33922, 34122, 34222, 34522, 35000, 35122, 35222, 35422, 35522, 35722, 35822, 35922, 36122, 36322, 36422, 36522, 36722, 36922, 37322, 37422, 37522, 37777, 37922, 38122, 41443, 43222, 47990, 48899, 49022, 49122, 49152, 49422, 49922, 50000, 50070, 50322, 50522, 50722, 50922, 51122, 51222, 51235, 51522, 51822, 51922, 52322, 52722, 52822, 52922, 53022, 53422, 54222, 54522, 54622, 54722, 54822, 54984, 55443, 55522, 55553, 55554, 55622, 55722, 55822, 55922, 56022, 56122, 56322, 56422, 56722, 56922, 57022, 57122, 57222, 57622, 57722, 57822, 57922, 58022, 58322, 58622, 58822, 59022, 59122, 59322, 59422, 59522, 59822, 63210, 63257, 63260

Tags: –

CPEs: –

ts_added

2025-03-05 16:33:30.252000

ts_last_update

2025-04-29 16:33:40.729000

Warden event timeline

DShield event timeline

OTX pulses