117.74.120.254 Threat Intelligence and Host Information

ipinfopage

General

This page contains threat intelligence information for the IPv4 address 117.74.120.254 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

🟠 Elevated — 55/100

Geographic Location

Host and Network Information

  • View other sources: Spamhaus VirusTotal Shodan AbuseIPDB
  • Country: Indonesia
  • Network: AS38515 grahamedia informasi
  • Noticed: 6 times
  • Protocols Attacked: Anonymous Proxy
  • Countries Attacked: Russian Federation
  • Open Ports: 1723, 2000, 8291
  • Tor Node: No

Tags

  • attack ddos
  • botnet
  • Cyclops
  • ddos
  • Gamardeon
  • HermeticWiper
  • IsaacWiper
  • list ips
  • PartyTicket
  • proxy
  • russia
  • russian
  • ukraine
  • WhisperGate

MITRE ATT&CK TTPs

  • T1498 - Network Denial of Service

Attack Log References

Whois Information

inetnum: 117.74.120.0 - 117.74.127.255 netname: GRAHAMEDIA-NET-ID descr: PT. GRAHAMEDIA INFORMASI descr: Internet Service Provider descr: Salatiga - Central Java country: ID admin-c: IK138-AP tech-c: IK138-AP status: ALLOCATED PORTABLE mnt-by: MNT-APJII-ID mnt-irt: IRT-IDNIC-ID mnt-lower: MAINT-ID-GRAHAMEDIA-NET mnt-routes: MAINT-ID-GRAHAMEDIA-NET last-modified: 2015-12-01T22:22:38Z irt: IRT-IDNIC-ID address: INDONESIA NETWORK INFORMATION CENTER address: Cyber Building 11th Floor address: Jl. Kuningan Barat No.8 address: Jakarta Selatan 12710 e-mail: abuse@idnic.net abuse-mailbox: abuse@idnic.net admin-c: IA55-AP tech-c: IH123-AP mnt-by: MNT-APJII-ID last-modified: 2018-05-31T22:29:03Z person: Irvan Adrian Kristiono nic-hdl: IK138-AP e-mail: irvan@grahamedia.net.id address: Jl. Parikesit 7 address: Salatiga, 50722 address: Indonesia phone: +62-298-316363 fax-no: +62-298-316361 country: ID mnt-by: MAINT-ID-GRAHAMEDIA-NET last-modified: 2015-08-10T02:56:32Z route: 117.74.120.0/21 descr: Route object of PT GRAHAMEDIA INFORMASI descr: INTERNET SERVICE PROVIDER descr: Salatiga, Central Java country: ID origin: AS38515 mnt-by: MAINT-ID-GRAHAMEDIA-NET last-modified: 2008-09-04T07:55:08Z inetnum: 117.74.120.1 - 117.74.120.255 netname: GRAHAMEDIA-OFFICE-NETWORK-120 descr: Grahamedia Office country: ID admin-c: LS1914-AP tech-c: LS1914-AP status: ALLOCATED NON-PORTABLE mnt-by: MAINT-ID-GRAHAMEDIA-NET mnt-irt: IRT-GRAHAMEDIANET-id last-modified: 2020-07-20T09:36:30Z irt: IRT-GRAHAMEDIANET-ID address: PT. GRAHAMEDIA INFORMASI address: Salatiga - Central Java address: Indonesia e-mail: info@grahamedia.net.id abuse-mailbox: abuse@grahamedia.net.id admin-c: IK138-AP tech-c: LS1914-AP mnt-by: MAINT-ID-GRAHAMEDIA-NET last-modified: 2020-07-21T01:25:19Z person: Lilik Sugiyanto nic-hdl: LS1914-AP e-mail: nael.lilik@grahamedia.net.id address: Jl. Parikesit No. 7 address: RT. 01 RW. 07, Ds. Karangalit address: Kel. Dukuh, Kec. Sidomukti Kota address: Salatiga 50722 address: Jawa Tengah, Indonesia phone: +62-298-316363 country: ID mnt-by: MNT-APJII-ID fax-no: +62-298-316361 last-modified: 2020-07-21T01:56:36Z route: 117.74.120.0/21 descr: Route object of PT GRAHAMEDIA INFORMASI descr: INTERNET SERVICE PROVIDER descr: Salatiga, Central Java country: ID origin: AS38515 mnt-by: MAINT-ID-GRAHAMEDIA-NET last-modified: 2008-09-04T07:55:08Z