IOC Radar
IPMediumSignal 35/100

103.111.136.110

Location
IndonesiaIndonesia
Banjarmasin, KR
ASN
AS136093
Faznet
First Seen
Apr 13, 2023
Last Seen
Apr 6, 2026
Apr 13
First Seen
1157d ago
Apr 6
Last Seen
68d ago
16
Reports
source reports
35%
Confidence
medium
Found in 16 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
35%
Signal Score
35 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

29 techniques

Network Information

CountryIDIndonesia
RegionBanjarmasin, KR
ASNAS136093
OrganizationFaznet

IP Category

⟲
Proxy
Proxy server

Feed Intelligence Summary

16 reports35% confidence
16
Source reports
35%
Confidence score
Category tags
abuseactive scanactive scanningasiabad reputationbotnetbotnet activitybotnet iocsbotnet miraibotnet propagationbrute forcecommand and controlcommunication protocolconnected devicescredential accesscredential harvestingcredential stuffingdata exfiltrationdata store exposureddosddos attacksdenial of servicedevice managementdistributed attacksexploitationexploitation activitygorillabotididentity & access exploitationindicatorindonesiaindustrial iotinitial accessinjection activityinternet of thingsiocsiot analyticsiot applicationsiot botnetiot devicesiot platformsiot securityiot/ics attackipv4irclinuxmalicious softwaremalwaremanualmirai botnetmirai internetnetworknetwork attacksnetwork protocolnetwork scanningnetwork securityoutlawphishingphishing attackprocess injectionprotocol exploitationproxyreconnaissanceresearchedscannerscanning activitysmart devicessocial engineeringssh attackt1021t1021.001t1040t1053.005t1055t1059t1059.004t1071t1071.001t1078t1078.001t1105t1110.002t1190t1203t1486t1496t1497t1497.001t1498.001t1499.002t1499.003t1565t1566.001t1566.002t1566.003t1595.001t1595.002t1595.003tcp protocoltelecommunicationstelnet threatthingsthreat actortor nodetwitterxmrig

Activity Timeline

1 total obs
Apr 6Apr 6

Threat Activity Heatmap

· Peak: 2026-04-06
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreLow Risk
35
SIGNAL
Signal Score
35%
Confidence
16
Reports
First seenApr 13, 2023
Last seenApr 6, 2026
GeolocationID
CountryIndonesia
LocationBanjarmasin, KR
ASNAS136093
OrgFaznet
Coords0.9167, 104.4583
Proxy

VirusTotal

Not checked

WHOIS

description
proxy-proxy_http search result.
raw
inetnum: 103.111.136.0 - 103.111.137.255 netname: FAZNET-ID descr: PT Mitra Lintas Multimedia descr: Surabaya, Indonesia country: ID admin-c: TAR3-AP tech-c: TAR3-AP status: ASSIGNED NON-PORTABLE mnt-by: MAINT-ID-FAZNET mnt-irt: IRT-FAZNET-ID last-modified: 2018-07-09T06:30:12Z source: APNIC irt: IRT-FAZNET-ID address: PT Mitra Lintas Multimedia address: JL. Dukuh Kupang Barat 1 no 180 address: Surabaya, Indonesia e-mail: [email protected] abuse-mailbox: [email protected] admin-c: FD262-AP tech-c: FD262-AP auth: # Filtered mnt-by: MAINT-ID-FAZNET last-modified: 2020-01-09T11:07:59Z source: APNIC person: Tian Adi Rahmawan address: JL. Dukuh Kupang Barat 1 no 180 address: Surabaya, Indonesia country: ID phone: +62-31-5688209 e-mail: [email protected] nic-hdl: TAR3-AP mnt-by: MNT-APJII-ID fax-no: +62-31-5614943 last-modified: 2017-03-15T06:31:05Z source: APNIC route: 103.111.136.0/23 descr: Route object of PT Mitra Lintas Multimedia descr: Internet Service Provider descr: Surabaya� origin: AS136093 mnt-by: MAINT-ID-FAZNET last-modified: 2018-07-09T07:55:29Z source: APNIC inetnum: 103.111.136.0 - 103.111.139.255 netname: IDNIC-KPM-ID descr: CV. Karya Putra Mandiri descr: Jl. Makmur 6 B Lt.2 Ruang 9 descr: Petukangan Selatan, Pesanggrahan Jakarta Selatan admin-c: JJ2223-AP tech-c: JJ2223-AP country: ID mnt-by: MNT-APJII-ID mnt-irt: IRT-KPM-ID mnt-routes: MAINT-ID-KPM status: ALLOCATED PORTABLE last-modified: 2018-03-16T09:18:52Z source: IDNIC irt: IRT-KPM-ID address: CV. Karya Putra Mandiri address: Jl. Makmur 6 B Lt.2 Ruang 9 address: Petukangan Selatan, Pesanggrahan Jakarta Selatan e-mail: [email protected] abuse-mailbox: [email protected] admin-c: JJ2223-AP tech-c: JJ2223-AP auth: # Filtered mnt-by: MAINT-ID-KPM last-modified: 2018-03-16T08:56:15Z source: IDNIC person: Junaidi Junaidi address: Jl. Makmur 6 B Lt.2 Ruang 9 address: Petukangan Selatan, Pesanggrahan Jakarta Selatan country: ID phone: +62-21-46803242 e-mail: [email protected] nic-hdl: JJ2223-AP mnt-by: MNT-APJII-ID last-modified: 2018-03-16T08:43:57Z source: IDNIC
references
https://1275.ru/ioc/gs-25-19131-mirai-botnet-iocs_11023, https://1275.ru/ioc/gs-25-19129-mirai-botnet-iocs_11015, https://1275.ru/ioc/gs-25-19128-mirai-botnet-iocs_11001, https://1275.ru/ioc/gs-25-19127-mirai-botnet-iocs_10989, https://1275.ru/ioc/gs-25-19125-mirai-botnet-iocs_10956, https://1275.ru/ioc/gs-25-19126-mirai-botnet-iocs_10970, https://1275.ru/ioc/gs-25-18122-mirai-botnet-iocs_10913, https://1275.ru/ioc/gs-25-18120-mirai-botnet-iocs_10854, https://1275.ru/ioc/gs-25-18119-mirai-botnet-iocs_10829, https://1275.ru/ioc/gs-25-18118-mirai-botnet-iocs_10825, https://1275.ru/ioc/gs-25-17115-mirai-botnet-iocs-2_10696, https://1275.ru/ioc/gs-25-17115-mirai-botnet-iocs_10682, https://1275.ru/ioc/gs-25-17113-mirai-botnet-iocs_10658, https://1275.ru/ioc/gs-25-17112-mirai-botnet-iocs_10640, https://1275.ru/ioc/gs-25-1490-mirai-botnet-iocs_10200

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 3 years ago · Last seen 2 months ago
Appeared in 16 threat reports