103.145.181.195 Threat Intelligence and Host Information

Share on:
May 05, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Potentially Malicious Host 🟡 39/100

Host and Network Information

  • Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110 - Brute Force, T1110.004 - Credential Stuffing
  • Tags: Port scan, cowrie, ssh

  • View other sources: Spamhaus VirusTotal

  • Country: Indonesia
  • Network: AS9341 pt indonesia comnets plus
  • Noticed: 2 times
  • Protcols Attacked: SSH
  • Passive DNS Results: lms.smknegeri1manggis.sch.id daring.smknegeri1manggis.sch.id

Open Ports Detected

1022 1025 1028 1029 1723 2000 22 23 443 53 7777 80

Map

Whois Information

  • inetnum: 103.145.180.0 - 103.145.181.255
  • netname: IDNIC-GAYU-ID
  • descr: PT GAYU PANGESTU WICAKSONO
  • descr: Corporate / Direct Member IDNIC
  • descr: Gd.Wisma Seba Lt.3 Room 304
  • descr: Jl.Kramat Kwitang 1 No.11,Rt.002,Rw.007,Kwitang,Senen
  • descr: Jakarta Pusat 10420
  • admin-c: WEP2-AP
  • tech-c: WEP2-AP
  • country: ID
  • mnt-by: MNT-APJII-ID
  • mnt-irt: IRT-GAYU-ID
  • mnt-routes: MAINT-ID-GAYU
  • status: ASSIGNED PORTABLE
  • last-modified: 2021-01-25T13:51:31Z
  • irt: IRT-GAYU-ID
  • address: PT GAYU PANGESTU WICAKSONO
  • address: Gd.Wisma Seba Lt.3 Room 304
  • address: Jl.Kramat Kwitang 1 No.11,Rt.002,Rw.007,Kwitang,Senen
  • address: Jakarta Pusat 10420
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: WEP2-AP
  • tech-c: WEP2-AP
  • mnt-by: MAINT-ID-GAYU
  • last-modified: 2019-11-19T08:35:06Z
  • person: Wesly Edward Panjaitan
  • address: Gd.Wisma Seba Lt.3 Room 304
  • address: Jl.Kramat Kwitang 1 No.11,Rt.002,Rw.007,Kwitang,Senen
  • address: Jakarta Pusat 10420
  • country: ID
  • phone: +62-856-1137645
  • e-mail: [email protected]
  • nic-hdl: WEP2-AP
  • mnt-by: MNT-APJII-ID
  • last-modified: 2019-11-19T08:27:20Z
  • inetnum: 103.145.181.0 - 103.145.181.255
  • netname: ICONPLN-ID
  • descr: PT Indonesia Comnets Plus
  • descr: JL PLN EHV Gandul Cinere
  • descr: Depok 16512
  • country: ID
  • admin-c: CA48-AP
  • tech-c: CH274-AP
  • status: ASSIGNED NON-PORTABLE
  • mnt-by: MNT-APJII-ID
  • mnt-by: MAINT-ID-ICONPLN
  • mnt-irt: IRT-ICON-ID
  • last-modified: 2019-11-26T12:49:05Z
  • irt: IRT-ICON-ID
  • address: PT Indonesia Comnets Plus
  • address: JL PLN EHV Gandul Cinere
  • address: Depok 16512
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: CA48-AP
  • tech-c: CH274-AP
  • mnt-by: MAINT-ID-ICONPLN
  • last-modified: 2011-03-07T08:55:21Z
  • person: Comnets Admin
  • address: PT INDONESIA COMNETS PLUS
  • address: Jl. EHV Gandul Limo - Depok
  • country: ID
  • phone: +62-21-753-2488
  • fax-no: +62-21-754-1259
  • e-mail: [email protected]
  • nic-hdl: CA48-AP
  • mnt-by: MAINT-ID-ICONPLN
  • last-modified: 2008-09-04T07:29:20Z
  • person: Comnets Hostmaster
  • address: PT INDONESIA COMNETS PLUS
  • address: Jl. EHV Gandul Limo - Depok
  • country: ID
  • phone: +62-21-753-2488
  • fax-no: +62-21-754-1259
  • e-mail: [email protected]
  • nic-hdl: CH274-AP
  • mnt-by: MAINT-ID-ICONPLN
  • last-modified: 2008-09-04T07:29:20Z
  • route: 103.145.181.0/24
  • descr: Route Object of PT. Indonesia Comnets Plus
  • descr: ISP
  • descr: Jakarta
  • origin: AS9341
  • mnt-by: MAINT-ID-ICONPLN
  • last-modified: 2019-11-26T13:00:17Z

Links to attack logs

roxy-ip-list-2023-05-03