103.105.66.98 Threat Intelligence and Host Information

Share on:
Mar 12, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Host and Network Information

  • Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110 - Brute Force, T1110.004 - Credential Stuffing
  • Tags: Bruteforce, Nextray, SSH, cowrie, cyber security, fail2ban, ioc, malicious, phishing, ssh
  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: haley_ssh

  • Country: Indonesia
  • Network: AS17995 pt iforte global internet
  • Noticed: 14 times
  • Protcols Attacked: SSH
  • Countries Attacked: Australia, Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: go.oresa.id survey-cmi.omgindo.com hero-cpc.omgindo.com demoproject.omgindo.com absen-dev.omgindo.com activation.demopowerindonesia.com oresa-microsite.omgindo.com oresa-link.omgindo.com ps.omgindo.com itman.omgindo.com rbishowcase.omgindo.com showcase.omgindo.com md.omgindo.com ais.omgindo.com md.demopowerindonesia.com www.demopowerindonesia.com www.cpc-indo.com www.connectmedia-indo.com ami-survey.omgindo.com matomo.omgindo.com igudang-api.omgindo.com igudang.omgindo.com cpc.omgindo.com oresa-godam.omgindo.com asset.omgindo.com hbi-homecredit.omgindo.com oresa.omgindo.com smas.omgindo.com oresa-dashboard.omgindo.com min.omgindo.com oresa-survey.omgindo.com oresa-app.omgindo.com hris.omgindo.com report.omgindo.com kantin.omgindo.com wof.demopowerindonesia.com 3m.demopowerindonesia.com smasdashboard.omgindo.com rps.demopowerindonesia.com dis.demopowerindonesia.com gofood.demopowerindonesia.com foodhall.cpc-indo.com qr.omgindo.com omgindo.com oresa-dashboard.omgindonesia.site traveloka.demopowerindonesia.com actmedia.omgindonesia.site kantin.omgindonesia.site oresa.id survey.omgindonesia.site oresa-app.omgindonesia.site demopowerindonesia.com cobasampel.com gopay-smb-v2.demopowerindonesia.com nutriboost.demopowerindonesia.com goodmood.demopowerindonesia.com self-serve.demopowerindonesia.com gopay-smb.demopowerindonesia.com asset.omgindonesia.site connectmedia-indo.com cpc.omgindonesia.site dmi.omgindonesia.site online-survey.hypermedia-indo.com cpc-indo.com hris.omgindonesia.site omgindonesia.site

Open Ports Detected

21 2222 3306 443 80 83 84

Map

Whois Information

  • inetnum: 103.105.64.0 - 103.105.67.255
  • netname: IDNIC-PRASETIA-ID
  • descr: CV. PRASETIA
  • descr: JL. Waas B No. 46 Bandung Kidul
  • descr: Bandung, Jawa Barat, 40200
  • admin-c: AFA3-AP
  • tech-c: AFA3-AP
  • country: ID
  • mnt-by: MNT-APJII-ID
  • mnt-irt: IRT-PRASETIA-ID
  • mnt-routes: MAINT-ID-PRASETIA
  • status: ALLOCATED PORTABLE
  • last-modified: 2017-12-06T10:45:52Z
  • irt: IRT-PRASETIA-ID
  • address: CV. PRASETIA
  • address: JL. Waas B No. 46 Bandung Kidul
  • address: Bandung, Jawa Barat, 40200
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: AFA3-AP
  • tech-c: AFA3-AP
  • mnt-by: MAINT-ID-PRASETIA
  • last-modified: 2018-05-31T22:31:52Z
  • person: Ahmad Fahmi Adam
  • address: JL. Waas B No. 46 Bandung Kidul
  • address: Bandung, Jawa Barat, 40200
  • country: ID
  • phone: +62-21-79184484
  • e-mail: [email protected]
  • nic-hdl: AFA3-AP
  • mnt-by: MNT-APJII-ID
  • last-modified: 2017-12-06T10:26:41Z
  • route: 103.105.66.0/24
  • descr: PT iForte Global Internet
  • descr: Jakarta
  • origin: AS17995
  • mnt-by: MAINT-ID-SOLUSINET
  • last-modified: 2018-01-11T09:54:58Z
  • inetnum: 103.105.66.0 - 103.105.66.255
  • netname: SOLUSINET-ID
  • descr: PT iForte Global Internet
  • descr: Jakarta
  • country: ID
  • admin-c: IR59-AP
  • tech-c: IR59-AP
  • status: ALLOCATED NON-PORTABLE
  • mnt-by: MAINT-ID-SOLUSINET
  • mnt-irt: IRT-SOLUSINET-ID
  • last-modified: 2018-01-11T09:10:40Z
  • irt: IRT-SOLUSINET-ID
  • address: PT iForte Global Internet
  • address: Menara BCA - 41th Floor
  • address: Jl. MH. Thamrin No. 1
  • address: Jakarta 10310 - Indonesia
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: DSA88-AP
  • tech-c: DSA88-AP
  • mnt-by: MAINT-ID-SOLUSINET
  • last-modified: 2017-10-25T06:03:54Z
  • person: Irvan Rianto
  • address: Menara BCA - 41th Floor
  • address: Jl. MH. Thamrin No. 1
  • address: Jakarta 10310 - Indonesia
  • country: ID
  • phone: +62-21-23586320
  • e-mail: [email protected]
  • nic-hdl: IR59-AP
  • mnt-by: MAINT-ID-SOLUSINET
  • fax-no: +62-21-23586321
  • last-modified: 2018-01-10T05:00:06Z
  • route: 103.105.66.0/24
  • descr: PT iForte Global Internet
  • descr: Jakarta
  • origin: AS17995
  • mnt-by: MAINT-ID-SOLUSINET
  • last-modified: 2018-01-11T09:54:58Z

Links to attack logs

bruteforce-ip-list-2021-08-26 bruteforce-ip-list-2021-09-01