109.120.141.5 Threat Intelligence and Host Information

General

IP Address
109.120.141.5
IPv4 Address
Location
🇷🇺 Russia
RU
Network
AS
Threat Score
45/100
Medium Risk
BruteforceBrute-Forceclientsetupcowrieportscansakurahttpscanners
Attack Intelligence
Open Ports Detected
3141
Geographic Location
Country
Russia
City
Unknown
Region
Unknown
Coordinates
55.7386, 37.6068
Network Information
ASN
AS
Organization
Network
WHOIS Information
inetnum
109.120.141.0 - 109.120.141.255
org
ORG-IHCL4-RIPE
netname
RUWEB-NET
country
GB
geoloc
52.31017 4.93525
geofeed
https://ironhostr.me/georw.csv
admin-c
IHC23-RIPE
tech-c
IHC23-RIPE
abuse-c
ACRO54323-RIPE
status
ASSIGNED PA
created
2026-06-09T15:35:05Z
last-modified
2026-06-09T15:35:05Z
mnt-by
lir-ae-digitalcity-1-MNT
organisation
ORG-IHCL4-RIPE
org-name
Iron Hosting Centre LTD
reg-nr
15208839
org-type
OTHER
address
Iron Hosting Centre Ltd.
mnt-ref
IHC-MNT
role
Iron Hosting Centre (rw)
abuse-mailbox
abuse@ironhostr.me
nic-hdl
IHC23-RIPE
route
109.120.141.0/24
origin
AS216139

  • Country: Russia
  • Network:
  • Noticed: 21 times
  • Protocols Attacked: portscan
  • Passive DNS Results: seq.stage.ai.realtycalendar.ru directus.stage.ai.realtycalendar.ru mcp.ai.realtycalendar.ru agent.stage.ai.realtycalendar.ru p.stage.ai.realtycalendar.ru

CVEs Detected

CVE-2026-44848 CVE-2026-44849 CVE-2026-44850 CVE-2026-44881 CVE-2026-44882 CVE-2026-44883 CVE-2026-44884 CVE-2026-44885

Share on:
Disclaimer
This page contains threat intelligence information for the IPv4 address 109.120.141.5 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.