103.16.132.96 Threat Intelligence and Host Information

Share on:
Mar 12, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Host and Network Information

  • Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110 - Brute Force, T1110.004 - Credential Stuffing
  • Tags: Brute-Force, Bruteforce, Nextray, SSH, Scanner, Webattack, brute-force, bruteforce, cowrie, cyber security, ioc, malicious, phishing, scanners, scanning, smtp, ssh, tcp, vultr
  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: blocklist_de, blocklist_de_ssh, haley_ssh

  • Country: Indonesia
  • Network: AS131769 pt mayatama solusindo
  • Noticed: 50 times
  • Protcols Attacked: ssh
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Portugal, Romania, Spain, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: monitoring.mayatama.net

Open Ports Detected

443 80

CVEs Detected

CVE-2021-39226 CVE-2021-43798 CVE-2021-43813 CVE-2021-43815 CVE-2022-21673 CVE-2022-21702 CVE-2022-21703 CVE-2022-21713 CVE-2022-23552 CVE-2022-31097 CVE-2022-31107 CVE-2022-31123 CVE-2022-31130 CVE-2022-35957 CVE-2022-36062 CVE-2022-39201 CVE-2022-39229 CVE-2022-39306 CVE-2022-39307 CVE-2022-39324

Map

Whois Information

  • inetnum: 103.16.132.0 - 103.16.133.255
  • netname: MAYATAMA-ID
  • descr: PT Mayatama Solusindo
  • descr: Internet Service Provider
  • descr: Jl. Pangeran Diponegoro, Rimba Sekampung
  • descr: Dumai Barat, Dumai, Riau
  • country: ID
  • admin-c: YR321-AP
  • tech-c: YR321-AP
  • mnt-by: MNT-APJII-ID
  • mnt-routes: MAINT-ID-MAYATAMA
  • mnt-irt: IRT-MAYATAMA-ID
  • status: ALLOCATED PORTABLE
  • mnt-lower: MAINT-ID-MAYATAMA
  • last-modified: 2015-10-07T08:57:11Z
  • irt: IRT-MAYATAMA-ID
  • address: PT. Mayatama Solusindo
  • address: Jl. Sultan Hasanuddin No. 8A, Rimba Sekampung
  • address: Dumai Barat, Dumai, Riau
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: SS3354-AP
  • tech-c: SS3354-AP
  • mnt-by: MAINT-ID-MAYATAMA
  • last-modified: 2018-05-31T22:30:05Z
  • person: Yogi Rinanda
  • address: Jl. Pangeran Diponegoro, Rimba Sekampung
  • address: Dumai Barat, Dumai, Riau
  • country: ID
  • phone: +62-765-7007707
  • fax-no: +62-765-7007707
  • e-mail: [email protected]
  • nic-hdl: YR321-AP
  • mnt-by: MAINT-ID-MAYATAMA
  • last-modified: 2014-03-24T04:29:32Z
  • route: 103.16.132.0/23
  • descr: PT Mayatama Solusindo
  • descr: Internet Service Provider
  • descr: Jl. Sultan Hasanuddin No. 8A
  • descr: Kelurahan Rimba Sekampung Kecamatan Dumai Kota
  • descr: Kota Dumai 28826
  • origin: AS131769
  • mnt-by: MAINT-ID-MAYATAMA
  • last-modified: 2019-07-05T10:27:15Z
  • inetnum: 103.16.132.96 - 103.16.132.103
  • netname: Server_Mayatama
  • descr: PT. Mayatama Solusindo
  • descr: Internet Service Provider
  • descr: Jl. Pangeran Diponegoro No. 8A
  • descr: Kelurahan Rimba Sekampung
  • descr: Dumai-Barat 28824
  • country: ID
  • admin-c: YR321-AP
  • tech-c: YR321-AP
  • status: ASSIGNED NON-PORTABLE
  • mnt-by: MAINT-ID-MAYATAMA
  • mnt-irt: IRT-MAYATAMA-ID
  • last-modified: 2015-10-08T04:33:39Z
  • irt: IRT-MAYATAMA-ID
  • address: PT. Mayatama Solusindo
  • address: Jl. Sultan Hasanuddin No. 8A, Rimba Sekampung
  • address: Dumai Barat, Dumai, Riau
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: SS3354-AP
  • tech-c: SS3354-AP
  • mnt-by: MAINT-ID-MAYATAMA
  • last-modified: 2015-11-18T04:56:41Z
  • person: Yogi Rinanda
  • address: Jl. Pangeran Diponegoro, Rimba Sekampung
  • address: Dumai Barat, Dumai, Riau
  • country: ID
  • phone: +62-765-7007707
  • fax-no: +62-765-7007707
  • e-mail: [email protected]
  • nic-hdl: YR321-AP
  • mnt-by: MAINT-ID-MAYATAMA
  • last-modified: 2014-03-24T04:29:32Z

Links to attack logs

vultrmadrid-ssh-bruteforce-ip-list-2022-09-12 bruteforce-ip-list-2022-04-22

Links to attack logs

vultrmadrid-ssh-bruteforce-ip-list-2022-09-12 bruteforce-ip-list-2022-04-22