103.145.181.242 Threat Intelligence and Host Information

Share on:

Mar 12, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Host and Network Information

Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110 - Brute Force, T1110.004 - Credential Stuffing
Tags: Brute-Force, Bruteforce, Nextray, SSH, brute-force, bruteforce, cowrie, cyber security, ioc, malicious, phishing, ssh, tcp, tsec
View other sources: Spamhaus VirusTotal
Country: Indonesia
Network: AS9341 pt indonesia comnets plus
Noticed: 50 times
Protcols Attacked: ssh
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Sweden, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 1 8a2ef8c20ca2f663f223b922fab280178a3c5886ea40ca04b4a190b85bc5f48a

Open Ports Detected

1701 1723 2000 2201 443 8001 8009 8291

CVEs Detected

CVE-2006-20001 CVE-2008-0455 CVE-2012-0883 CVE-2012-2687 CVE-2012-3499 CVE-2012-4558 CVE-2013-1862 CVE-2013-1896 CVE-2013-5704 CVE-2013-6438 CVE-2014-0098 CVE-2014-0118 CVE-2014-0226 CVE-2014-0231 CVE-2015-0228 CVE-2015-3183 CVE-2016-4975 CVE-2016-5387 CVE-2016-8612 CVE-2016-8743 CVE-2017-3167 CVE-2017-3169 CVE-2017-7679 CVE-2017-9788 CVE-2017-9798 CVE-2018-1301 CVE-2018-1302 CVE-2018-1303 CVE-2021-34798 CVE-2021-39275 CVE-2021-40438 CVE-2021-44790 CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-28330 CVE-2022-28614 CVE-2022-28615 CVE-2022-29404 CVE-2022-30556 CVE-2022-31813 CVE-2022-37436

Map

Whois Information

inetnum: 103.145.180.0 - 103.145.181.255
netname: IDNIC-GAYU-ID
descr: PT GAYU PANGESTU WICAKSONO
descr: Corporate / Direct Member IDNIC
descr: Gd.Wisma Seba Lt.3 Room 304
descr: Jl.Kramat Kwitang 1 No.11,Rt.002,Rw.007,Kwitang,Senen
descr: Jakarta Pusat 10420
admin-c: WEP2-AP
tech-c: WEP2-AP
country: ID
mnt-by: MNT-APJII-ID
mnt-irt: IRT-GAYU-ID
mnt-routes: MAINT-ID-GAYU
status: ASSIGNED PORTABLE
last-modified: 2021-01-25T13:51:31Z
irt: IRT-GAYU-ID
address: PT GAYU PANGESTU WICAKSONO
address: Gd.Wisma Seba Lt.3 Room 304
address: Jl.Kramat Kwitang 1 No.11,Rt.002,Rw.007,Kwitang,Senen
address: Jakarta Pusat 10420
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: WEP2-AP
tech-c: WEP2-AP
mnt-by: MAINT-ID-GAYU
last-modified: 2019-11-19T08:35:06Z
person: Wesly Edward Panjaitan
address: Gd.Wisma Seba Lt.3 Room 304
address: Jl.Kramat Kwitang 1 No.11,Rt.002,Rw.007,Kwitang,Senen
address: Jakarta Pusat 10420
country: ID
phone: +62-856-1137645
e-mail: [email protected]
nic-hdl: WEP2-AP
mnt-by: MNT-APJII-ID
last-modified: 2019-11-19T08:27:20Z
inetnum: 103.145.181.0 - 103.145.181.255
netname: ICONPLN-ID
descr: PT Indonesia Comnets Plus
descr: JL PLN EHV Gandul Cinere
descr: Depok 16512
country: ID
admin-c: CA48-AP
tech-c: CH274-AP
status: ASSIGNED NON-PORTABLE
mnt-by: MNT-APJII-ID
mnt-by: MAINT-ID-ICONPLN
mnt-irt: IRT-ICON-ID
last-modified: 2019-11-26T12:49:05Z
irt: IRT-ICON-ID
address: PT Indonesia Comnets Plus
address: JL PLN EHV Gandul Cinere
address: Depok 16512
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: CA48-AP
tech-c: CH274-AP
mnt-by: MAINT-ID-ICONPLN
last-modified: 2011-03-07T08:55:21Z
person: Comnets Admin
address: PT INDONESIA COMNETS PLUS
address: Jl. EHV Gandul Limo - Depok
country: ID
phone: +62-21-753-2488
fax-no: +62-21-754-1259
e-mail: [email protected]
nic-hdl: CA48-AP
mnt-by: MAINT-ID-ICONPLN
last-modified: 2008-09-04T07:29:20Z
person: Comnets Hostmaster
address: PT INDONESIA COMNETS PLUS
address: Jl. EHV Gandul Limo - Depok
country: ID
phone: +62-21-753-2488
fax-no: +62-21-754-1259
e-mail: [email protected]
nic-hdl: CH274-AP
mnt-by: MAINT-ID-ICONPLN
last-modified: 2008-09-04T07:29:20Z
route: 103.145.181.0/24
descr: Route Object of PT. Indonesia Comnets Plus
descr: ISP
descr: Jakarta
origin: AS9341
mnt-by: MAINT-ID-ICONPLN
last-modified: 2019-11-26T13:00:17Z

Links to attack logs