36.92.140.113 Threat Intelligence and Host Information

Jul 24, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 36.92.140.113 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 45/100

Host and Network Information

Mitre ATT&CK IDs: T1498 - Network Denial of Service
Tags: attack ddos, botnet, combinations, compromise ipv4, Cyclops, ddos, DDOS, Gamardeon, HermeticWiper, iocs, ipv4 port, IsaacWiper, KillNet, linux, list ips, mirai, mirai botnet, PartyTicket, proxy, russia, russian, sha1, sha256, toggle, ukraine, WhisperGate
JARM: 2ad2ad16d2ad2ad22c2ad2ad2ad2ad47321614530b94a96fa03d06e666d6d6
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_net_ua

Country: Indonesia
Network:
Noticed: 33 times
Protocols Attacked: Anonymous Proxy
Countries Attacked: Russian Federation
Passive DNS Results: tltsurabaya.com ibms.mediacipta.co.id manyar-kabupaten.com

Malware Detected on Host

Count: 1 489caefb095725e68d83e9b2009e97e02a8eacc7833d534e6e12a61c32788479

Open Ports Detected

1723 179 3389 443 4911 53 8291 9080

CVEs Detected

CVE-2006-20001 CVE-2007-3205 CVE-2007-4559 CVE-2007-4723 CVE-2009-0796 CVE-2009-1390 CVE-2009-2299 CVE-2009-2940 CVE-2009-3720 CVE-2009-3765 CVE-2009-3766 CVE-2009-3767 CVE-2011-1176 CVE-2011-2688 CVE-2012-3526 CVE-2012-4001 CVE-2012-4360 CVE-2013-0941 CVE-2013-0942 CVE-2013-1753 CVE-2013-2220 CVE-2013-2765 CVE-2013-4352 CVE-2013-4365 CVE-2013-5704 CVE-2013-6438 CVE-2013-7040 CVE-2013-7440 CVE-2014-0098 CVE-2014-0117 CVE-2014-0118 CVE-2014-0224 CVE-2014-0226 CVE-2014-0231 CVE-2014-0240 CVE-2014-1912 CVE-2014-3523 CVE-2014-3581 CVE-2014-4616 CVE-2014-4650 CVE-2014-7185 CVE-2014-8109 CVE-2014-8583 CVE-2014-9365 CVE-2015-0228 CVE-2015-1283 CVE-2015-3183 CVE-2015-3184 CVE-2015-3185 CVE-2015-5652 CVE-2015-9251 CVE-2015-9253 CVE-2016-0718 CVE-2016-0736 CVE-2016-0772 CVE-2016-2161 CVE-2016-2183 CVE-2016-4472 CVE-2016-4975 CVE-2016-5387 CVE-2016-5636 CVE-2016-5699 CVE-2016-8612 CVE-2016-8743 CVE-2016-9063 CVE-2017-15710 CVE-2017-15715 CVE-2017-17522 CVE-2017-18207 CVE-2017-20005 CVE-2017-3167 CVE-2017-3735 CVE-2017-3736 CVE-2017-3737 CVE-2017-3738 CVE-2017-7272 CVE-2017-7529 CVE-2017-7679 CVE-2017-7963 CVE-2017-8923 CVE-2017-9233 CVE-2017-9788 CVE-2017-9798 CVE-2018-0732 CVE-2018-0734 CVE-2018-0737 CVE-2018-0739 CVE-2018-1060 CVE-2018-1061 CVE-2018-1283 CVE-2018-1301 CVE-2018-1302 CVE-2018-1303 CVE-2018-1312 CVE-2018-14647 CVE-2018-16843 CVE-2018-16844 CVE-2018-16845 CVE-2018-17199 CVE-2018-19395 CVE-2018-19396 CVE-2018-20852 CVE-2018-5407 CVE-2018-5951 CVE-2019-0217 CVE-2019-0220 CVE-2019-10092 CVE-2019-10098 CVE-2019-10160 CVE-2019-11358 CVE-2019-13404 CVE-2019-1547 CVE-2019-1551 CVE-2019-1552 CVE-2019-1559 CVE-2019-1563 CVE-2019-15903 CVE-2019-16056 CVE-2019-16935 CVE-2019-17567 CVE-2019-18348 CVE-2019-20372 CVE-2019-5010 CVE-2019-9511 CVE-2019-9513 CVE-2019-9516 CVE-2019-9636 CVE-2019-9637 CVE-2019-9638 CVE-2019-9639 CVE-2019-9641 CVE-2019-9674 CVE-2019-9740 CVE-2019-9947 CVE-2019-9948 CVE-2020-11022 CVE-2020-11023 CVE-2020-11579 CVE-2020-11881 CVE-2020-11985 CVE-2020-13938 CVE-2020-1927 CVE-2020-1934 CVE-2020-1968 CVE-2020-1971 CVE-2020-20217 CVE-2020-20220 CVE-2020-20230 CVE-2020-20231 CVE-2020-20249 CVE-2020-20250 CVE-2020-20252 CVE-2020-20253 CVE-2020-20254 CVE-2020-20262 CVE-2020-20264 CVE-2020-20265 CVE-2020-20266 CVE-2020-20267 CVE-2020-35452 CVE-2020-8492 CVE-2021-23017 CVE-2021-23336 CVE-2021-23840 CVE-2021-23841 CVE-2021-26690 CVE-2021-26691 CVE-2021-28667 CVE-2021-3014 CVE-2021-32785 CVE-2021-32786 CVE-2021-32791 CVE-2021-32792 CVE-2021-3426 CVE-2021-34798 CVE-2021-3618 CVE-2021-36613 CVE-2021-36614 CVE-2021-3712 CVE-2021-3733 CVE-2021-39275 CVE-2021-40438 CVE-2021-4160 CVE-2021-44790 CVE-2022-0391 CVE-2022-0778 CVE-2022-1292 CVE-2022-2068 CVE-2022-2255 CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23943 CVE-2022-26377 CVE-2022-26488 CVE-2022-28330 CVE-2022-28614 CVE-2022-28615 CVE-2022-29404 CVE-2022-30556 CVE-2022-31628 CVE-2022-31629 CVE-2022-31813 CVE-2022-36522 CVE-2022-36760 CVE-2022-37436 CVE-2022-4304 CVE-2022-45061 CVE-2022-45313 CVE-2022-45315 CVE-2022-48560 CVE-2022-48564 CVE-2022-48565 CVE-2022-48566 CVE-2022-4900 CVE-2023-0215 CVE-2023-0286 CVE-2023-0464 CVE-2023-0465 CVE-2023-0466 CVE-2023-24329 CVE-2023-25690 CVE-2023-2650 CVE-2023-27043 CVE-2023-30799 CVE-2023-30800 CVE-2023-31122 CVE-2023-32154 CVE-2023-36632 CVE-2023-3817 CVE-2023-38709 CVE-2023-40217 CVE-2023-44487 CVE-2023-5678 CVE-2024-0727 CVE-2024-24795 CVE-2024-25117 CVE-2024-3566 CVE-2024-38472 CVE-2024-38473 CVE-2024-38474 CVE-2024-38475 CVE-2024-38476 CVE-2024-38477 CVE-2024-39573 CVE-2024-40898 CVE-2024-54772 CVE-2024-6232 CVE-2024-7592 CVE-2024-9287

Map

Whois Information

inetnum: 36.64.0.0 - 36.95.255.255
netname: TELKOMNET
descr: PT Telekomunikasi Indonesia
descr: Menara Multimedia Lt. 7
descr: Jl. Kebon Sirih No. 12
descr: JAKARTA - 10340
country: ID
org: ORG-TI10-AP
admin-c: AZ163-AP
tech-c: FS370-AP
abuse-c: AI598-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-TELKOMNET
mnt-routes: MAINT-TELKOMNET
mnt-irt: IRT-IDTELKOM-ID
last-modified: 2020-07-29T13:14:29Z
irt: IRT-IDTELKOM-ID
address: PT. TELKOM INDONESIA
address: Indibiz Experience Center 3rd Floor
address: Kebon Sirih No 36
address: Jakarta
e-mail: abuse@telkom.co.id
abuse-mailbox: abuse@telkom.co.id
admin-c: RFR2-AP
tech-c: TP630-AP
mnt-by: MAINT-TELKOMNET
last-modified: 2025-04-15T06:32:42Z
organisation: ORG-TI10-AP
org-name: Telekomunikasi Indonesia (PT)
org-type: LIR
country: ID
address: PT Telkom - Divisi Digital Connectivity Service
address: Gedung Indibiz Experience Center 3rd Floor
address: Sub Divisi Internet Product and Traffic Management Jalan Kebon Sirih No.36
address: Jalan Merdeka Selatan No .12
phone: +62-21-3447070
fax-no: +62-21-3861215
e-mail: peering@telin.net
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2025-02-26T13:00:34Z
role: ABUSE IDTELKOMID
country: ZZ
address: PT. TELKOM INDONESIA
address: Indibiz Experience Center 3rd Floor
address: Kebon Sirih No 36
address: Jakarta
phone: +000000000
e-mail: abuse@telkom.co.id
admin-c: RFR2-AP
tech-c: TP630-AP
nic-hdl: AI598-AP
abuse-mailbox: abuse@telkom.co.id
mnt-by: APNIC-ABUSE
last-modified: 2025-04-15T06:33:12Z
person: Akhmad Zaimi
address: GSD Lt.14 Jl. Kebon Sirih No.12
country: ID
phone: +62-21-3860500
e-mail: djimie@telkom.co.id
nic-hdl: AZ163-AP
mnt-by: MAINT-TELKOMNET
last-modified: 2010-12-20T01:33:46Z
person: Febrian Setiadi
address: GSD Lt 14 Jl. Kebon Sirih No.12
country: ID
phone: +62-21-3860500
e-mail: febrian.setiadi@telkom.co.id
nic-hdl: FS370-AP
mnt-by: MAINT-TELKOMNET
last-modified: 2010-12-20T01:30:54Z
route: 36.92.140.0/24
descr: Temporary allocation
origin: AS7713
mnt-by: MAINT-TELKOMNET
last-modified: 2018-09-28T03:46:13Z

Links to attack logs

Share on: