36.91.45.10 Threat Intelligence and Host Information

Share on:
Jun 04, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 36.91.45.10 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 65/100

Host and Network Information

  • Mitre ATT&CK IDs: T1110 - Brute Force, T1498 - Network Denial of Service, T1499 - Endpoint Denial of Service, T1499.002 - Service Exhaustion Flood
  • Tags: Cyclops, DDOS, DDoS, Gamardeon, HEAD Floods, HermeticWiper, IsaacWiper, KillNet, Killnet, PartyTicket, T1498, T1499, WhisperGate, attack ddos, botnet, brute-force, bruteforce, cc.py, ddos, la, lafusioncenter, list ips, louisiana, malware, russia, russian, ssh, tcp, ukraine
  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: blocklist_net_ua, sblam, socks_proxy_1d, socks_proxy_30d, socks_proxy_7d, sslproxies_30d, stopforumspam_365d

  • Country: Indonesia
  • Network: AS7713 pt telekomunikasi indonesia
  • Noticed: 1 times
  • Protcols Attacked: Anonymous Proxy
  • Countries Attacked: Russian Federation

Malware Detected on Host

Count: 74 e60f1220b70c5e1b5073d319c6c310d5372938cefd9edc58e7e47d98c61f2714 2103cdc7013b5ee8d08282cf640a679ad67a95ce772bd5493bad239e8b25100c 5ee96cce83902ae9cb52fafac4479412f4d12bfc9b699cb81763f140e7b979a8 5e50df134f86eff192dc5708325d197d54dd487d48435e34a5490817a552abce 5e50df134f86eff192dc5708325d197d54dd487d48435e34a5490817a552abce 4c0a4017a769d538fe7d7002423fbaf497d81304a1a7ce30a5190050741f7408 87faa0a9736272d33e371751d8cd4329f00b3c4c69a081818cb2a27427819d48 7fa61d463d83d105217d1f863b3735246da5ef699b7113ed84dee42dc7f38faf b1b3056dc371156a2ef1336e219dd227448754a2a13c7e8a5f99d239584c621f c9035a532278ab54ffc505f2af89050f16388a7435a6e393166e831f53538c62

Open Ports Detected

2000 22

Map

Whois Information

  • inetnum: 36.64.0.0 - 36.95.255.255
  • netname: TELKOMNET
  • descr: PT Telekomunikasi Indonesia
  • descr: Menara Multimedia Lt. 7
  • descr: Jl. Kebon Sirih No. 12
  • descr: JAKARTA - 10340
  • country: ID
  • org: ORG-TI10-AP
  • admin-c: AZ163-AP
  • tech-c: FS370-AP
  • abuse-c: AI598-AP
  • status: ALLOCATED PORTABLE
  • mnt-by: APNIC-HM
  • mnt-lower: MAINT-TELKOMNET
  • mnt-routes: MAINT-TELKOMNET
  • mnt-irt: IRT-IDTELKOM-ID
  • last-modified: 2020-07-29T13:14:29Z
  • irt: IRT-IDTELKOM-ID
  • address: PT. TELKOM INDONESIA
  • address: STO Telkom Gambir 3th Floor
  • address: Medan Merdeka Selatan
  • address: JAKARTA
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: DF99-AP
  • tech-c: AR165-AP
  • mnt-by: MAINT-TELKOMNET
  • last-modified: 2022-12-02T11:28:22Z
  • organisation: ORG-TI10-AP
  • org-name: Telekomunikasi Indonesia (PT)
  • country: ID
  • address: PT Telkom - Divisi Infratel
  • address: Gedung STO Gambir LT 3
  • address: Jalan Merdeka Selatan No .12
  • phone: +62-21-34353699
  • fax-no: +62-21-3861215
  • e-mail: [email protected]
  • mnt-ref: APNIC-HM
  • mnt-by: APNIC-HM
  • last-modified: 2021-09-29T12:56:58Z
  • role: ABUSE IDTELKOMID
  • address: PT. TELKOM INDONESIA
  • address: STO Telkom Gambir 3th Floor
  • address: Medan Merdeka Selatan
  • address: JAKARTA
  • country: ZZ
  • phone: +000000000
  • e-mail: [email protected]
  • admin-c: DF99-AP
  • tech-c: AR165-AP
  • nic-hdl: AI598-AP
  • abuse-mailbox: [email protected]
  • mnt-by: APNIC-ABUSE
  • last-modified: 2022-12-02T11:28:54Z
  • person: Akhmad Zaimi
  • address: GSD Lt.14 Jl. Kebon Sirih No.12
  • country: ID
  • phone: +62-21-3860500
  • e-mail: [email protected]
  • nic-hdl: AZ163-AP
  • mnt-by: MAINT-TELKOMNET
  • last-modified: 2010-12-20T01:33:46Z
  • person: Febrian Setiadi
  • address: GSD Lt 14 Jl. Kebon Sirih No.12
  • country: ID
  • phone: +62-21-3860500
  • e-mail: [email protected]
  • nic-hdl: FS370-AP
  • mnt-by: MAINT-TELKOMNET
  • last-modified: 2010-12-20T01:30:54Z
  • route: 36.91.45.0/24
  • descr: PT Telekomunikasi Indonesia
  • origin: AS7713
  • mnt-by: MAINT-TELKOMNET
  • last-modified: 2018-10-01T06:33:51Z

Links to attack logs

forum-spam-ip-list-2021-05-29 roxy-ip-list-2023-05-03 forum-spam-ip-list-2021-04-16 roxy-ip-list-2023-05-05