IPMediumSignal 76/100
130.61.39.54
Location
GermanyFrankfurt am Main, HE
ASN
AS31898
Oracle Cloud Infrastructure (eu-frankfurt-1)
First Seen
Feb 18, 2024
Last Seen
Feb 9, 2026
Found in 10 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
76%
Signal Score
76 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryGermany
GermanyRegionFrankfurt am Main, HE
ASNAS31898
OrganizationOracle Cloud Infrastructure (eu-frankfurt-1)
Feed Intelligence Summary
10 reports76% confidence
10
Source reports
76%
Confidence score
Category tags
active scanningantispamattackbankingbotnetbrute forcebrute force attackcommand and controlcowrie activitycowrie honeypotcredential accesscredential harvestingcredential stuffingcredit card servicesdata exfiltrationdedecoy systemdenial of servicedistributed attackseuropefinancefinance and insurancefinancial servicesfinancial technologygermanyindicatorinitial accesslog4jmailoney activitymailoney honeypotmalicious activitymalicious payloadmalicious softwaremalwarenetworknetwork probingnetwork scanningnorth americapassword attackspayment processingphishingphishing attackphishing trapprocess injectionreconnaissanceresearchedscannerscanning activitysftp attacksocial engineeringssh attackssh monitoringt1041t1055t1059t1059.004t1059.005t1059.007t1071.001t1078t1110t1110.001t1110.002t1110.003t1110.004t1190t1203t1486t1496t1499.001t1499.002t1499.003t1565t1566.001t1566.002t1566.003t1566.004t1595t1595.001t1595.002t1595.003threat actorunited stateswealth managementweb application attackweb exploitationweb scanner
Activity Timeline
Feb 9Feb 9
Threat Activity Heatmap
· Peak: 2026-02-09LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreHigh Risk
76
SIGNAL
Signal Score
76%
Confidence
10
Reports
First seenFeb 18, 2024
Last seenFeb 9, 2026
GeolocationDE
CountryGermany
LocationFrankfurt am Main, HE
ASNAS31898
OrgOracle Cloud Infrastructure (eu-frankfurt-1)
Coords50.1049, 8.6295
VirusTotal
Not checked
WHOIS
- description
- Unknown source type: h0neytr4p
- raw
- inetnum: 130.61.0.0 - 130.65.255.255 netname: NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK descr: IPv4 address block not managed by the RIPE NCC remarks: ------------------------------------------------------ remarks: remarks: For registration information, remarks: you can consult the following sources: remarks: remarks: IANA remarks: http://www.iana.org/assignments/ipv4-address-space remarks: http://www.iana.org/assignments/iana-ipv4-special-registry remarks: http://www.iana.org/assignments/ipv4-recovered-address-space remarks: remarks: AFRINIC (Africa) remarks: http://www.afrinic.net/ whois.afrinic.net remarks: remarks: APNIC (Asia Pacific) remarks: http://www.apnic.net/ whois.apnic.net remarks: remarks: ARIN (Northern America) remarks: http://www.arin.net/ whois.arin.net remarks: remarks: LACNIC (Latin America and the Carribean) remarks: http://www.lacnic.net/ whois.lacnic.net remarks: remarks: ------------------------------------------------------ country: EU # Country is really world wide admin-c: IANA1-RIPE tech-c: IANA1-RIPE status: ALLOCATED UNSPECIFIED mnt-by: RIPE-NCC-HM-MNT created: 2019-01-07T10:48:30Z last-modified: 2019-01-07T10:48:30Z source: RIPE role: Internet Assigned Numbers Authority address: see http://www.iana.org. admin-c: IANA1-RIPE tech-c: IANA1-RIPE nic-hdl: IANA1-RIPE remarks: For more information on IANA services remarks: go to IANA web site at http://www.iana.org. mnt-by: RIPE-NCC-MNT created: 1970-01-01T00:00:00Z last-modified: 2001-09-22T09:31:27Z source: RIPE # Filtered
- references
- https://github.com/telekom-security/tpotce
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 2 years ago · Last seen 4 months ago
Appeared in 10 threat reports