103.219.112.63 Threat Intelligence and Host Information

May 04, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 103.219.112.63 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 55/100

Host and Network Information

Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110.004 - Credential Stuffing, T1110 - Brute Force
Tags: Bruteforce, Brute-Force, cowrie, cyber security, ioc, malicious, Nextray, phishing, ssh, SSH
View other sources: Spamhaus VirusTotal
Contained within other IP sets: haley_ssh

Country: Indonesia
Network:
Noticed: 50 times
Protocols Attacked: ssh
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 1 fdcdb0ce47802fce665ef0a438b368fc2b6bf3430d174d4aac3ce5c7461223d7

Map

Whois Information

inetnum: 103.219.112.0 - 103.219.112.255
netname: IDNIC-BPTI-ID
descr: BPTI PEMKOT TANGERANG SELATAN
descr: Government / Direct Member IDNIC
descr: Bagian Pengelola Teknologi Informasi
descr: Jl. Maruga No. 1 Serua
descr: Ciputat Tangerang Selatan
admin-c: AA1244-AP
tech-c: AA1244-AP
country: ID
mnt-by: MNT-APJII-ID
mnt-irt: IRT-BPTI-ID
mnt-routes: MAINT-ID-BPTI-TS
status: ASSIGNED PORTABLE
last-modified: 2016-05-18T04:08:35Z
irt: IRT-BPTI-ID
address: BPTI PEMKOT TANGSEL
address: Bagian Pengelola Teknologi Informasi
address: Jl. Maruga No. 1 Serua
address: Ciputat Tangerang Selatan
e-mail: aplahunnajat@tangerangselatankota.go.id
abuse-mailbox: aplahunnajat@tangerangselatankota.go.id
admin-c: AA1244-AP
tech-c: AA1244-AP
mnt-by: MNT-APJII-ID
last-modified: 2018-05-31T22:31:15Z
person: Aplahunnajat Aplahunnajat
address: Jl. Maruga No. 1 Sarua
address: Ciputat Tangerang Selatan
country: ID
phone: +62-811-1247012
e-mail: aplahunnajat@tangerangselatankota.go.id
nic-hdl: AA1244-AP
mnt-by: MAINT-ID-BPTI-TS
last-modified: 2016-06-22T06:58:26Z
route: 103.219.112.0/24
descr: DISKOMINFO TANGERANG SELATAN
descr: Government / Direct member IDNIC
descr: Tangerang Selatan
country: ID
origin: AS135453
notify: rivan@bitechnetworks.com
mnt-by: MAINT-ID-KOMINFO-TS
mnt-routes: MAINT-ID-KOMINFO-TS
last-modified: 2018-05-31T10:13:56Z
inetnum: 103.219.112.0 - 103.219.112.255
netname: IDNIC-DISKOMINFOTS-ID
descr: DISKOMINFO TANGERANG SELATAN
descr: Government / Direct Member IDNIC
descr: Jl. Maruga No. 1 Serua
descr: Ciputat Tangerang Selatan
admin-c: RFM9-AP
tech-c: RFM9-AP
country: ID
mnt-by: MNT-APJII-ID
mnt-irt: IRT-KOMINFOTS-ID
mnt-routes: MAINT-ID-KOMINFO-TS
status: ASSIGNED PORTABLE
last-modified: 2022-12-29T18:19:51Z
irt: IRT-KOMINFOTS-ID
address: DISKOMINFO TANGERANG SELATAN
address: Dinas Komunikasi dan Informatika Kota Tangerang Selatan
address: Jl. Maruga No.1 Sarua
address: Ciputat Tangerang Selatan
e-mail: rivan@bitechnetworks.com
abuse-mailbox: abuse@tangerangselatankota.go.id
admin-c: RFM9-AP
tech-c: RFM9-AP
mnt-by: MNT-APJII-ID
last-modified: 2018-02-08T09:13:03Z
person: Rivan Firman Maulana
address: Mall Serang Lantai 3
address: Jalan Veteran No.7
address: Banten 42112, Indonesia
country: ID
phone: +62-254-7913555
e-mail: rivan@bitechnetworks.com
nic-hdl: RFM9-AP
mnt-by: MAINT-ID-BTSNET
fax-no: +62-254-7913555
last-modified: 2024-08-15T07:42:33Z

Links to attack logs

Share on: