202.90.198.2 Threat Intelligence and Host Information

Share on:

May 02, 2023 ipinfopage

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Likely Malicious Host 🟠 60/100

Host and Network Information

Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110 - Brute Force, T1110.004 - Credential Stuffing
Tags: Brute-Force, Bruteforce, Nextray, Port scan, SSH, Telnet, attack, aws, bruteforce, cowrie, cyber security, digital ocean, ioc, login, malicious, phishing, scanner, scanners, ssh, vultr
View other sources: Spamhaus VirusTotal
Country: Indonesia
Network: AS38779 badan meteorologi dan geofisika
Noticed: 50 times
Protcols Attacked: ssh
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Singapore, Spain, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: device-f4fee6f9-a7f6-40fc-9e2c-4ce5bd5944ca.remotewd.com device-0f685237-b73a-470c-8943-7069b8827e44.remotewd.com pdcnas2021.myqnapcloud.com device-eee15121-d6f5-4cf5-ac0e-45363c0ef71e.remotewd.com

Malware Detected on Host

Count: 3 3fa2b6f04b6b5b0473b2f519037992edeb34cb316fc45a75537e41446158a943 52a9056bb703c52f0ff05b4ef0dfc38bfb874993d858898158db5bb8c2d4e7d4 52a9056bb703c52f0ff05b4ef0dfc38bfb874993d858898158db5bb8c2d4e7d4

Open Ports Detected

161 443 8000 8848

Map

Whois Information

inetnum: 202.90.198.0 - 202.90.199.255
netname: BMG-ID
descr: Badan Meteorologi Klimatologi dan Geofisika
descr: Jl. Angkasa 1 No. 2, kemayoran
descr: Jakarta Pusat, 10610
descr: DKI - Jakarta
country: ID
admin-c: HA163-AP
tech-c: HA163-AP
status: ASSIGNED PORTABLE
mnt-by: MNT-APJII-ID
mnt-irt: IRT-IDNIC-ID
mnt-routes: MAINT-ID-BMG
last-modified: 2015-12-01T22:30:25Z
irt: IRT-IDNIC-ID
address: INDONESIA NETWORK INFORMATION CENTER
address: Cyber Building 11th Floor
address: Jl. Kuningan Barat No.8
address: Jakarta Selatan 12710
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: IA55-AP
tech-c: IH123-AP
mnt-by: MNT-APJII-ID
last-modified: 2018-05-31T22:29:03Z
person: Hanif Andi Nugraha
nic-hdl: HA163-AP
e-mail: [email protected]
address: Badan Meteorologi Klimatologi dan Geofisika
address: Jl. Angkasa 1 No. 2, kemayoran
address: Jakarta Pusat, 10610
address: DKI - Jakarta
phone: +62-21-70697069
fax-no: +62-21-70697069
country: ID
mnt-by: MAINT-ID-BMG
last-modified: 2010-09-28T11:44:01Z
inetnum: 202.90.198.0 - 202.90.199.255
netname: BMG-ID
descr: Badan Meteorologi Klimatologi dan Geofisika
descr: Jl. Angkasa 1 No. 2, kemayoran
descr: Jakarta Pusat, 10610
descr: DKI - Jakarta
country: ID
admin-c: HA163-AP
tech-c: HA163-AP
status: ASSIGNED PORTABLE
mnt-by: MNT-APJII-ID
mnt-irt: IRT-IDNIC-ID
mnt-routes: MAINT-ID-BMG
last-modified: 2015-12-01T22:30:25Z
irt: IRT-IDNIC-ID
address: Kuningan Barat Gedung Cyber
address: Cyber Building
address: Jl. Kuningan Barat No.8
address: Jakarta Selatan 12710
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: GH4-AP
tech-c: GH4-AP
mnt-by: MNT-APJII-ID
last-modified: 2021-08-27T03:36:41Z
person: Hanif Andi Nugraha
nic-hdl: HA163-AP
e-mail: [email protected]
address: Badan Meteorologi Klimatologi dan Geofisika
address: Jl. Angkasa 1 No. 2, kemayoran
address: Jakarta Pusat, 10610
address: DKI - Jakarta
phone: +62-21-70697069
fax-no: +62-21-70697069
country: ID
mnt-by: MAINT-ID-BMG
last-modified: 2010-09-28T11:44:01Z

Links to attack logs