69.174.102.18 Threat Intelligence and Host Information

Dec 16, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 69.174.102.18 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 35/100

Host and Network Information

Mitre ATT&CK IDs: T1595 - Active Scanning
Tags: bruteforce, cyber security, digital ocean, ioc, malicious, Nextray, phishing, scan, sip, ssh, zmap
View other sources: Spamhaus VirusTotal

Country: United States
Network:
Noticed: 46 times
Protocols Attacked: sip
Countries Attacked: Australia, Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Singapore, Turkey, Ukraine, United Kingdom, United Kingdom of Great Britain and Northern Ireland, United States of America

Open Ports Detected

10001 10134 11112 12345 14344 18245 19000 35000 37777 44818 4500 50000 53 54138 55000 5672 5938 6000 6001 60129 61613 62078 63260 7171 7415 8126 8291 8554 8728 9051 9100 9151 9333 9418 9530 9600 9633 9876 9998 9999

Map

Whois Information

NetRange: 69.174.0.0 - 69.174.127.255
CIDR: 69.174.0.0/17
NetName: NETBLK-PACKETEXCHANGE-V4-07
NetHandle: NET-69-174-0-0-1
Parent: NET69 (NET-69-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS25973
Organization: PacketExchange, Inc (PACKE-25)
RegDate: 2009-02-24
Updated: 2012-02-24
Ref: https://rdap.arin.net/registry/ip/69.174.0.0
OrgName: PacketExchange, Inc
OrgId: PACKE-25
Address: GTT Communications, Inc.
Address: 8484 Westpark Drive
Address: Suite 720
City: McLean
StateProv: VA
PostalCode: 22102
Country: US
RegDate: 2008-02-26
Updated: 2021-02-28
Ref: https://rdap.arin.net/registry/entity/PACKE-25
OrgTechHandle: AS3251-ARIN
OrgTechName: AS3257 Netguard
OrgTechPhone: +49 69 48007422
OrgTechEmail: netguard@gtt.net
OrgTechRef: https://rdap.arin.net/registry/entity/AS3251-ARIN
OrgAbuseHandle: GAD46-ARIN
OrgAbuseName: GTT Abuse Department
OrgAbusePhone: +1-703-442-5500
OrgAbuseEmail: abuse@gtt.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/GAD46-ARIN
OrgNOCHandle: GNOC16-ARIN
OrgNOCName: GTT Network Operations Center
OrgNOCPhone: +1-703-442-5500
OrgNOCEmail: noc@gtt.net
OrgNOCRef: https://rdap.arin.net/registry/entity/GNOC16-ARIN
OrgTechHandle: GNOC16-ARIN
OrgTechName: GTT Network Operations Center
OrgTechPhone: +1-703-442-5500
OrgTechEmail: noc@gtt.net
OrgTechRef: https://rdap.arin.net/registry/entity/GNOC16-ARIN
NetRange: 69.174.96.0 - 69.174.103.255
CIDR: 69.174.96.0/21
NetName: QUADRANET
NetHandle: NET-69-174-96-0-1
Parent: NETBLK-PACKETEXCHANGE-V4-07 (NET-69-174-0-0-1)
NetType: Reallocated
OriginAS: AS8100
Organization: QuadraNet Enterprises LLC (QEL-5)
RegDate: 2022-04-05
Updated: 2022-04-05
Ref: https://rdap.arin.net/registry/ip/69.174.96.0
OrgName: QuadraNet Enterprises LLC
OrgId: QEL-5
Address: 530 W. 6th ST
City: Los Angeles
StateProv: CA
PostalCode: 90014
Country: US
RegDate: 2018-06-07
Updated: 2024-11-25
Ref: https://rdap.arin.net/registry/entity/QEL-5
OrgTechHandle: QNO6-ARIN
OrgTechName: QuadraNet Network Operations
OrgTechPhone: +1-213-614-9371
OrgTechEmail: support@quadranet.com
OrgTechRef: https://rdap.arin.net/registry/entity/QNO6-ARIN
OrgAbuseHandle: QUADR4-ARIN
OrgAbuseName: QuadraNet Abuse
OrgAbusePhone: +1-213-614-8371
OrgAbuseEmail: abuse@quadranet.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/QUADR4-ARIN
network:Class-Name:network
network:Auth-Area:69.174.102.0/23
network:ID:NET-148799.69.174.102.16/29
network:Network-Name:Public Network IP Range
network:IP-Network:69.174.102.16/29
network:IP-Network-Block:69.174.102.16 - 69.174.102.23
network:Org-Name:Privatus Limited
network:Street-Address:55 Marietta St
network:City:Atlanta
network:State:AL
network:Postal-Code:30303
network:Country-Code:US
network:Tech-Contact:MAINT-148799.69.174.102.16/29
network:Created:20230524073533000
network:Updated:20230524073533000
network:Updated-By:support@quadranet.com
contact:POC-Name:Network Administrator
contact:POC-Email:support@quadranet.com
contact:POC-Phone:1-888-5-QUADRA
contact:Tech-Name:Network Administrator
contact:Tech-Email:support@quadranet.com
contact:Tech-Phone:1-888-5-QUADRA
contact:Abuse-Name:Abuse Dept
contact:Abuse-Email:abuse@quadranet.com
contact:Abuse-Phone:EMAIL ONLY

Links to attack logs

Share on: