202.137.26.5 Threat Intelligence and Host Information

Share on:

May 02, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Likely Malicious Host 🟠 65/100

Host and Network Information

Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110 - Brute Force, T1110.004 - Credential Stuffing
Tags: Brute-Force, Bruteforce, Nextray, SSH, SSH Bruteforce, Telnet, attack, aws, bruteforce, cowrie, cyber security, digital ocean, ioc, login, malicious, phishing, scanner, scanners, ssh, vultr
View other sources: Spamhaus VirusTotal
Country: Indonesia
Network: AS9905 linknet
Noticed: 50 times
Protcols Attacked: ssh
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Singapore, Spain, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: server.wantannas.go.id

Open Ports Detected

10000 110 21 22 2222 3306 5432 993 995

CVEs Detected

CVE-2016-20012 CVE-2017-15906 CVE-2018-15473 CVE-2018-15919 CVE-2018-20685 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617 CVE-2023-28531

Map

Whois Information

inetnum: 202.137.20.0 - 202.137.31.255
netname: LINKNET-ID
descr: PT. LINKNET
descr: Internet Service Provider
country: ID
admin-c: RS188-AP
tech-c: IR1-AP
mnt-by: MNT-APJII-ID
mnt-irt: IRT-IDNIC-ID
mnt-lower: MAINT-ID-LINKNET
status: ALLOCATED PORTABLE
last-modified: 2015-12-01T22:27:47Z
irt: IRT-IDNIC-ID
address: INDONESIA NETWORK INFORMATION CENTER
address: Cyber Building 11th Floor
address: Jl. Kuningan Barat No.8
address: Jakarta Selatan 12710
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: IA55-AP
tech-c: IH123-AP
mnt-by: MNT-APJII-ID
last-modified: 2018-05-31T22:29:03Z
person: Irvan Rianto
nic-hdl: IR1-AP
e-mail: [email protected]
address: Citra Graha Bld. 4th floor
address: Gatot Subroto Kav 35-36
address: Jakarta - 12950
address: Indonesia
phone: +62-21-5278811
fax-no: +62-21-5278833
country: ID
mnt-by: MAINT-ID-BM
last-modified: 2008-09-04T07:29:32Z
person: Rizky Soema di Pradja
address: Citra Graha Bld. 4th Fl.
address: Jl. Gatot Subroto Kav. 35-36
address: Jakarta - 12950
address: Indonesia
country: ID
phone: +62-21-5278811
fax-no: +62-21-5278833
e-mail: [email protected]
nic-hdl: RS188-AP
mnt-by: MAINT-ID-BM
last-modified: 2008-09-04T07:29:20Z
inetnum: 202.137.24.0 - 202.137.31.255
netname: LINKNET-ID
country: ID
descr: LINKNET
descr: Internet Service Provider- Jakarta
descr: Linknet IP Address
admin-c: EB26-AP
tech-c: EB26-AP
status: ASSIGNED NON-PORTABLE
mnt-by: MAINT-ID-LINKNET
mnt-irt: IRT-LINKNET-ID
last-modified: 2022-07-12T09:16:56Z
irt: IRT-LINKNET-ID
address: PT. LINKNET
address: Internet Service Provider
address: Jakarta
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: RS188-AP
tech-c: IR1-AP
mnt-by: MAINT-ID-LINKNET
last-modified: 2012-08-29T07:51:42Z
person: Eko Budirahardjo
nic-hdl: EB26-AP
e-mail: [email protected]
address: Lippo Cyber Park
address: Jl. Bulevar Gajah Mada No.2088
address: Lippo Karawaci 100, Tangerang 15811. Indonesia
phone: +62-21-55777755
fax-no: +62-21-5530752
country: ID
mnt-by: MAINT-ID-LINKNET
last-modified: 2008-09-04T07:30:20Z
route: 202.137.0.0/19
descr: Route Object Linknet
origin: AS9905
mnt-by: MAINT-ID-BM
last-modified: 2022-07-12T10:26:23Z

Links to attack logs