IOC Radar
IPMediumSignal 66/100

103.112.144.29

Location
IndonesiaIndonesia
Sungguminasa, South Sulawesi
First Seen
Feb 23, 2025
Last Seen
Mar 2, 2026
Feb 23
First Seen
476d ago
Mar 2
Last Seen
104d ago
9
Reports
source reports
66%
Confidence
medium
Found in 9 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
66%
Signal Score
66 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

26 techniques

Network Information

CountryIDIndonesia
RegionSungguminasa, South Sulawesi
OrganizationPT Phinisi Media Indonesia

IP Category

⟲
Proxy
Proxy server

Feed Intelligence Summary

9 reports66% confidence
9
Source reports
66%
Confidence score
Category tags
active scanningasiabotnetbotnet iocsbotnet miraibotnet propagationbrute forcecommand and controlcommunication protocolconnected devicescredential accesscredential stuffingdata exfiltrationddosddos attacksdenial of servicedevice managementdistributed attackseuropeexploitationfrancegorillabotindicatorindonesiaindustrial iotinitial accessinternet of thingsiocsiot analyticsiot applicationsiot botnetiot devicesiot platformsiot securityiot/ics attackipv4irclinuxmalicious softwaremalwaremirai botnetmirai internetnetworknetwork attacksnetwork protocolnetwork scanningnetwork securityoutlawprocess injectionprotocol exploitationproxyreconnaissanceresearchedscanning activitysmart devicesssh attackt1021t1021.001t1040t1053.005t1055t1059t1059.004t1071t1071.001t1078t1078.001t1105t1110.002t1190t1203t1486t1496t1497t1497.001t1498.001t1499.002t1499.003t1565t1595.001t1595.002t1595.003tcp protocoltelnet threatthingstwitterxmrig

Activity Timeline

1 total obs
Mar 2Mar 2

Threat Activity Heatmap

· Peak: 2026-03-02
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreMedium Risk
66
SIGNAL
Signal Score
66%
Confidence
9
Reports
First seenFeb 23, 2025
Last seenMar 2, 2026
GeolocationID
CountryIndonesia
LocationSungguminasa, South Sulawesi
OrgPT Phinisi Media Indonesia
Coords-6.1728, 106.8272
Proxy

VirusTotal

Not checked

WHOIS

description
proxy-proxy_http search result.
raw
inetnum: 103.112.144.0 - 103.112.145.255 netname: IDNIC-PHINISI-MEDIA-INDONESIA-ID descr: PT Phinisi Media Indonesia descr: Corporate / Direct Member IDNIC descr: Jl. Tamalate 1 No. 14A descr: Tidung, Rappocini descr: Makassar, 90222, Indonesia admin-c: PH767-AP tech-c: PH767-AP country: ID mnt-by: MNT-APJII-ID mnt-irt: IRT-PHINISI-MEDIA-INDONESIA-ID mnt-routes: MAINT-ID-PHINISI-MEDIA-INDONESIA status: ASSIGNED PORTABLE last-modified: 2024-07-11T02:56:55Z source: APNIC irt: IRT-PHINISI-MEDIA-INDONESIA-ID address: PT Phinisi Media Indonesia address: Jl. Tamalate 1 No. 14A address: Tidung, Rappocini address: Makassar, 90222 e-mail: [email protected] abuse-mailbox: [email protected] admin-c: PH767-AP tech-c: PH767-AP auth: # Filtered mnt-by: MAINT-ID-PHINISI-MEDIA-INDONESIA last-modified: 2024-07-25T04:27:13Z source: APNIC person: PhinisiNet Hostmaster address: Jl. Tamalate 1 No. 14A, Tidung, Rappocini address: Makassar, 90222, Indonesia country: ID phone: +62-81615005645 e-mail: [email protected] nic-hdl: PH767-AP mnt-by: MNT-APJII-ID last-modified: 2024-07-11T02:56:03Z source: APNIC route: 103.112.144.0/24 descr: Route Object of PT Phinisi Media Indonesia descr: Makassar, Indonesia origin: AS137334 mnt-by: MAINT-ID-PHINISI-MEDIA-INDONESIA last-modified: 2018-04-12T06:43:20Z source: APNIC inetnum: 103.112.144.0 - 103.112.145.255 netname: IDNIC-PHINISI-MEDIA-INDONESIA-ID descr: PT Phinisi Media Indonesia descr: INTERNET SERVICE PROVIDER descr: Jl. Tamalate 1 No. 14A descr: Tidung, Rappocini descr: Makassar, 90222, Indonesia admin-c: PH767-AP tech-c: PH767-AP country: ID mnt-by: MNT-APJII-ID mnt-irt: IRT-PHINISI-MEDIA-INDONESIA-ID mnt-routes: MAINT-ID-PHINISI-MEDIA-INDONESIA status: ASSIGNED PORTABLE mnt-lower: MAINT-ID-PHINISI-MEDIA-INDONESIA last-modified: 2024-07-11T08:49:20Z source: IDNIC irt: IRT-PHINISI-MEDIA-INDONESIA-ID address: PT Phinisi Media Indonesia address: Jl. Tamalate 1 No. 14A address: Tidung, Rappocini address: Makassar, 90222 e-mail: [email protected] abuse-mailbox: [email protected] admin-c: PH767-AP tech-c: PH767-AP auth: # Filtered mnt-by: MAINT-ID-PHINISI-MEDIA-INDONESIA last-modified: 2024-07-11T08:49:44Z source: IDNIC person: PhinisiNet Hostmaster address: Jl. Tamalate 1 No. 14A, Tidung, Rappocini address: Makassar, 90222, Indonesia country: ID phone: +62-81615005645 e-mail: [email protected] nic-hdl: PH767-AP mnt-by: MNT-APJII-ID last-modified: 2024-07-11T02:56:21Z source: IDNIC route: 103.112.144.0/24 descr: Route Object of PT Phinisi Media Indonesia descr: Makassar, Indonesia origin: AS137334 mnt-by: MAINT-ID-PHINISI-MEDIA-INDONESIA last-modified: 2018-04-12T06:43:20Z source: IDNIC
references
https://1275.ru/ioc/gs-25-19131-mirai-botnet-iocs_11023, https://1275.ru/ioc/gs-25-19129-mirai-botnet-iocs_11015, https://1275.ru/ioc/gs-25-19128-mirai-botnet-iocs_11001, https://1275.ru/ioc/gs-25-19127-mirai-botnet-iocs_10989, https://1275.ru/ioc/gs-25-19125-mirai-botnet-iocs_10956, https://1275.ru/ioc/gs-25-19126-mirai-botnet-iocs_10970, https://1275.ru/ioc/gs-25-18122-mirai-botnet-iocs_10913, https://1275.ru/ioc/gs-25-18120-mirai-botnet-iocs_10854, https://1275.ru/ioc/gs-25-18119-mirai-botnet-iocs_10829, https://1275.ru/ioc/gs-25-18118-mirai-botnet-iocs_10825, https://1275.ru/ioc/gs-25-17115-mirai-botnet-iocs-2_10696, https://1275.ru/ioc/gs-25-17115-mirai-botnet-iocs_10682, https://1275.ru/ioc/gs-25-17113-mirai-botnet-iocs_10658, https://1275.ru/ioc/gs-25-17112-mirai-botnet-iocs_10640, https://1275.ru/ioc/gs-25-1490-mirai-botnet-iocs_10200

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 3 months ago
Appeared in 9 threat reports