202.90.198.2 Threat Intelligence and Host Information

Apr 16, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 202.90.198.2 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 57/100

Host and Network Information

Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110.004 - Credential Stuffing, T1110 - Brute Force
Tags: attack, auto-generated security, Bruteforce, Brute-Force, cowrie, cyber security, ioc, login, malicious, Nextray, phishing, scanner, ssh, SSH, Telnet
View other sources: Spamhaus VirusTotal

Country: Indonesia
Network:
Noticed: 50 times
Protocols Attacked: ssh
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: device-f4fee6f9-a7f6-40fc-9e2c-4ce5bd5944ca.remotewd.com device-0f685237-b73a-470c-8943-7069b8827e44.remotewd.com pdcnas2021.myqnapcloud.com device-eee15121-d6f5-4cf5-ac0e-45363c0ef71e.remotewd.com

Malware Detected on Host

Count: 2 3fa2b6f04b6b5b0473b2f519037992edeb34cb316fc45a75537e41446158a943 52a9056bb703c52f0ff05b4ef0dfc38bfb874993d858898158db5bb8c2d4e7d4

Open Ports Detected

161

Map

Whois Information

inetnum: 202.90.198.0 - 202.90.199.255
netname: BMKG-ID
descr: Badan Meteorologi Klimatologi dan Geofisika
descr: Jl. Angkasa 1 No. 2, kemayoran
descr: Jakarta Pusat, 10610
descr: DKI - Jakarta
country: ID
admin-c: PJK4-AP
tech-c: PJK4-AP
status: ASSIGNED PORTABLE
mnt-by: MNT-APJII-ID
mnt-irt: IRT-BMKG-ID
mnt-routes: MAINT-ID-BMKG
last-modified: 2023-05-26T03:31:15Z
irt: IRT-BMKG-ID
address: Badan Meteorologi Klimatologi dan Geofisika
e-mail: pusjarkom@bmkg.go.id
abuse-mailbox: abuse@bmkg.go.id
admin-c: PJK4-AP
tech-c: PJK4-AP
mnt-by: MAINT-ID-BMKG
last-modified: 2023-05-22T22:24:31Z
person: Pusat Jaringan Komunikasi
address: Badan Meteorologi Klimatologi dan Geofisika
address: Jl. Angkasa 1 No. 2, kemayoran
address: Jakarta Pusat, 10610
address: DKI - Jakarta
country: ID
phone: +624246703 ext 150
e-mail: pusjarkom@bmkg.go.id
nic-hdl: PJK4-AP
mnt-by: MAINT-ID-BMKG
last-modified: 2023-05-31T10:12:33Z
inetnum: 202.90.198.0 - 202.90.199.255
netname: BMKG-ID
descr: Badan Meteorologi Klimatologi dan Geofisika
descr: Jl. Angkasa 1 No. 2, kemayoran
descr: Jakarta Pusat, 10610
descr: DKI - Jakarta
country: ID
admin-c: PJK1-AP
tech-c: PJK1-AP
status: ASSIGNED PORTABLE
mnt-by: MNT-APJII-ID
mnt-irt: IRT-BMKG-ID
mnt-routes: MAINT-ID-BMKG
mnt-lower: MAINT-ID-BMKG
last-modified: 2023-05-19T10:38:08Z
irt: IRT-BMKG-ID
address: Badan Meteorologi Klimatologi dan Geofisika
e-mail: pusjarkom@bmkg.go.id
abuse-mailbox: abuse@bmkg.go.id
admin-c: PJK1-AP
tech-c: PJK1-AP
mnt-by: MAINT-ID-BMKG
last-modified: 2023-05-19T08:20:54Z
person: Pusat Jaringan Komunikasi
address: Badan Meteorologi Klimatologi dan Geofisika
address: Jl. Angkasa 1 No. 2, kemayoran
address: Jakarta Pusat, 10610
address: DKI - Jakarta
country: ID
phone: +624246703 ext 1500
e-mail: pusjarkom@bmkg.go.id
nic-hdl: PJK1-AP
mnt-by: MAINT-ID-BMKG
last-modified: 2023-05-22T09:14:57Z

Links to attack logs

Share on: