117.54.130.66 Threat Intelligence and Host Information

Share on:
May 05, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Likely Malicious Host 🟠 65/100

Host and Network Information

  • Mitre ATT&CK IDs: T1102 - Web Service, T1498 - Network Denial of Service
  • Tags: Cyclops, DDOS, Gamardeon, HermeticWiper, IsaacWiper, KillNet, Nextray, PartyTicket, WhisperGate, arkei, arkei password, arkei stealer, attack ddos, botnet, contact, cyber security, ddos, follow, inside, ioc, iocs, list ips, malicious, never, osint, pastebin, phishing, python, russia, russian, sign up, stealer, twitter, ukraine, use virustotal
  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: botscout_30d, nixspam, socks_proxy_1d, socks_proxy_30d, socks_proxy_7d, sslproxies_30d, stopforumspam, stopforumspam_180d, stopforumspam_30d, stopforumspam_365d, stopforumspam_90d

  • Country: Indonesia
  • Network: AS9340 indo internet pt
  • Noticed: 31 times
  • Protcols Attacked: SSH
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Russian Federation, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 3 88cb6da94b1ff0e563cd656bc37eb1aac3506f852cb333b378d007e1d699d63b c36cb4000691fc4e33014c21f831de331bded72b7d980654d29bc56cdef83717 0c74b6ce15d8cf2370e1f533b7cbd7b9e68c70e95c88ae04893b35f4a15a34de

Open Ports Detected

1701 1723 179 2000 53 8080

Map

Whois Information

  • inetnum: 117.54.0.0 - 117.54.255.255
  • netname: INDONET-ID
  • descr: IndoInternet Network
  • country: ID
  • admin-c: RN65-AP
  • tech-c: RN65-AP
  • mnt-by: MNT-APJII-ID
  • mnt-irt: IRT-INDONET-ID
  • mnt-lower: MAINT-INDONET-ID
  • status: ALLOCATED PORTABLE
  • last-modified: 2016-05-11T09:31:22Z
  • irt: IRT-INDONET-ID
  • address: PT. IndoInternet
  • address: Grha Citra Caraka Lt. M
  • address: Jl. Gatot Subroto Kav 52
  • address: Jakarta 12710
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: RN65-AP
  • tech-c: RN65-AP
  • mnt-by: MAINT-INDONET-ID
  • last-modified: 2019-03-08T04:45:29Z
  • person: Indonet Hostmaster
  • address: Grha Citra Caraka Lt.M
  • address: Jl. jend. Gatot Subroto Kav 52
  • address: Jakarta 12710
  • country: ID
  • phone: +62-21-5268164
  • fax-no: +62-21-5271850
  • e-mail: [email protected]
  • nic-hdl: RN65-AP
  • mnt-by: MAINT-INDONET-ID
  • last-modified: 2008-09-04T07:29:17Z
  • route: 117.54.0.0/16
  • descr: Route Object PT IndoInternet
  • descr: Business Enabler Service Provider
  • descr: Rumah Indonet, Rempoa Raya no. 11 Ciputat
  • origin: AS9340
  • country: ID
  • notify: [email protected]
  • mnt-by: MAINT-INDONET-ID
  • last-modified: 2011-07-14T08:48:53Z
  • inetnum: 117.54.130.0 - 117.54.130.255
  • netname: COORPORATE-NETWORK
  • descr: PT IndoInternet Coorporate
  • descr: Jl. Rempoa Raya
  • descr: Tangerang Selatan
  • descr: Indonesia
  • country: ID
  • admin-c: OA59-AP
  • tech-c: OA59-AP
  • status: ASSIGNED NON-PORTABLE
  • mnt-by: MAINT-INDONET-ID
  • mnt-irt: IRT-INDONET-ID
  • last-modified: 2023-03-10T03:05:23Z
  • irt: IRT-INDONET-ID
  • address: PT. IndoInternet
  • address: Grha Citra Caraka Lt. M
  • address: Jl. Gatot Subroto Kav 52
  • address: Jakarta 12710
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: DT-AP
  • tech-c: OA59-AP
  • mnt-by: MAINT-INDONET-ID
  • last-modified: 2022-10-11T09:54:15Z
  • person: Okie Arimawan
  • address: Jl. Rempoa Raya No. 11
  • address: Jakarta 15412, Indonesia
  • country: ID
  • phone: +62-21-73882525
  • e-mail: [email protected]
  • nic-hdl: OA59-AP
  • mnt-by: MAINT-ID-ASEAN
  • fax-no: +62-21-73882526
  • last-modified: 2018-08-23T18:07:45Z
  • route: 117.54.0.0/16
  • descr: Route Object PT IndoInternet
  • descr: Business Enabler Service Provider
  • descr: Rumah Indonet, Rempoa Raya no. 11 Ciputat
  • origin: AS9340
  • country: ID
  • notify: [email protected]
  • mnt-by: MAINT-INDONET-ID
  • last-modified: 2020-02-07T02:55:49Z

Links to attack logs

roxy-ip-list-2023-05-03