103.127.67.194 Threat Intelligence and Host Information

Share on:

Mar 12, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Host and Network Information

Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110 - Brute Force, T1110.004 - Credential Stuffing
Tags: Brute-Force, Bruteforce, Nextray, SSH, Telnet, attack, cowrie, cyber security, digital ocean, greater, ioc, ip dns, ipsum, login, malicious, number, phishing, scanner, scanners, shame, ssh, vultr, wall
View other sources: Spamhaus VirusTotal
Contained within other IP sets: haley_ssh
Country: Indonesia
Network: AS9341 pt indonesia comnets plus
Noticed: 50 times
Protcols Attacked: ssh
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Spain, Turkey, Ukraine, United Kingdom, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: xii.ujian.smkn1kutasari.sch.id simnilai.km.smkn1kutasari.sch.id kbm.smkn1kutasari.sch.id sso.smkn1kutasari.sch.id wifi.smkn1kutasari.sch.id simnilai2122.smkn1kutasari.sch.id jurnalistik.smkn1kutasari.sch.id hotspot.smkn1kutasari.sch.id socket.smkn1kutasari.sch.id 2.ujian.smkn1kutasari.sch.id simnilai2021.smkn1kutasari.sch.id library.smkn1kutasari.sch.id materikulasi.smkn1kutasari.sch.id elearning.smkn1kutasari.sch.id testing.smkn1kutasari.sch.id simnilai1920.smkn1kutasari.sch.id toko.smkn1kutasari.sch.id sitaku.smkn1kutasari.sch.id simnilai1819.smkn1kutasari.sch.id simnilai1718.smkn1kutasari.sch.id simnilai1617.smkn1kutasari.sch.id ups.smkn1kutasari.sch.id pilkaos.smkn1kutasari.sch.id simnilai.smkn1kutasari.sch.id lsp.smkn1kutasari.sch.id perpustakaan.smkn1kutasari.sch.id adiwiyata.smkn1kutasari.sch.id ujian.smkn1kutasari.sch.id mikrotik.smkn1kutasari.sch.id smkn1kutasari.sch.id erapor.smkn1kutasari.sch.id to.smkn1kutasari.sch.id sias.smkn1kutasari.sch.id

Open Ports Detected

111 21 22 3000 3306 443 53 5432 80

CVEs Detected

CVE-2006-20001 CVE-2022-36760 CVE-2022-37436

Map

Whois Information

inetnum: 103.127.67.0 - 103.127.67.255
netname: ICONPLN-ID
descr: PT INDONESIA COMNETS PLUS
descr: Internet Service Provider
descr: Jl. EHV Gandul Limo - Depok
country: ID
admin-c: CA48-AP
tech-c: CH274-AP
abuse-c: AI847-AP
status: ASSIGNED NON-PORTABLE
mnt-by: MAINT-ID-ICONPLN
mnt-routes: MAINT-ID-ICONPLN
mnt-irt: IRT-ICON-ID
last-modified: 2021-12-22T13:08:43Z
irt: IRT-ICON-ID
address: PT Indonesia Comnets Plus
address: JL PLN EHV Gandul Cinere
address: Depok 16512
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: CA48-AP
tech-c: CH274-AP
mnt-by: MAINT-ID-ICONPLN
last-modified: 2022-09-21T02:01:39Z
role: ABUSE ICONID
address: PT Indonesia Comnets Plus
address: JL PLN EHV Gandul Cinere
address: Depok 16512
country: ZZ
phone: +000000000
e-mail: [email protected]
admin-c: CA48-AP
tech-c: CH274-AP
nic-hdl: AI847-AP
abuse-mailbox: [email protected]
mnt-by: APNIC-ABUSE
last-modified: 2022-09-21T02:02:42Z
person: Comnets Admin
address: PT INDONESIA COMNETS PLUS
address: Jl. EHV Gandul Limo - Depok
country: ID
phone: +62-21-753-2488
fax-no: +62-21-754-1259
e-mail: [email protected]
nic-hdl: CA48-AP
mnt-by: MAINT-ID-ICONPLN
last-modified: 2008-09-04T07:29:20Z
person: Comnets Hostmaster
address: PT INDONESIA COMNETS PLUS
address: Jl. EHV Gandul Limo - Depok
country: ID
phone: +62-21-753-2488
fax-no: +62-21-754-1259
e-mail: [email protected]
nic-hdl: CH274-AP
mnt-by: MAINT-ID-ICONPLN
last-modified: 2008-09-04T07:29:20Z
route: 103.127.67.0/24
descr: PT INDONESIA COMNETS PLUS
descr: Internet Service Provider
descr: Jl. EHV Gandul Limo - Depok
origin: AS9341
mnt-by: MAINT-ID-ICONPLN
last-modified: 2019-07-30T03:20:59Z
inetnum: 103.127.64.0 - 103.127.67.255
netname: IDNIC-TAMALA-ID
descr: PT. Tama Lamberaja Sejahtera
descr: Jl. Utan Kayu Raya No .102
descr: Utan Kayu Utara, Matraman
descr: Jakarta Timur 13120
admin-c: PBM8-AP
tech-c: PBM8-AP
country: ID
mnt-by: MNT-APJII-ID
mnt-irt: IRT-TAMALA-ID
mnt-routes: MAINT-ID-TAMALA
status: ALLOCATED PORTABLE
last-modified: 2018-12-19T15:44:05Z
irt: IRT-TAMALA-ID
address: PT. Tama Lamberaja Sejahtera
address: Jl. Utan Kayu Raya No .102
address: Utan Kayu Utara, Matraman
address: Jakarta Timur 13120
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: PBM8-AP
tech-c: PBM8-AP
mnt-by: MAINT-ID-TAMALA
last-modified: 2018-12-19T15:44:05Z
person: Pestaria BR. Malau
address: Jl. Utan Kayu Raya No .102 Rt.012 Rw.010
address: Utan Kayu Utara, Matraman
address: Jakarta Timur 13120
country: ID
phone: +62-21-8612988
e-mail: [email protected]
nic-hdl: PBM8-AP
mnt-by: MAINT-ID-ASEAN
last-modified: 2018-12-19T15:44:03Z

Links to attack logs