IOC Radar
IPMediumSignal 25/100

103.158.126.65

Location
IndonesiaIndonesia
Bekasi, West Java
ASN
AS38320
PT Jaya Mandiri Interior
First Seen
Jan 23, 2025
Last Seen
May 2, 2026
Jan 23
First Seen
506d ago
May 2
Last Seen
42d ago
11
Reports
source reports
25%
Confidence
medium
Found in 11 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
25%
Signal Score
25 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

26 techniques

Network Information

CountryIDIndonesia
RegionBekasi, West Java
ASNAS38320
OrganizationPT Jaya Mandiri Interior

IP Category

⟲
Proxy
Proxy server
⊕
VPN
VPN exit node

Feed Intelligence Summary

11 reports25% confidence
11
Source reports
25%
Confidence score
Category tags
active scanactive scanningasiabotnetbotnet activitybotnet iocsbotnet miraibotnet propagationbrute forcecommand and controlcommunication protocolconnected devicescredential accesscredential stuffingdata exfiltrationdata store exposureddosddos attacksdenial of servicedevice managementdistributed attacksexploitationexploitation activitygorillabotididentity & access exploitationindicatorindonesiaindustrial iotinitial accessinjection activityinternet of thingsiocsiot analyticsiot applicationsiot botnetiot devicesiot platformsiot securityiot/ics attackipv4irclinuxmalicious softwaremalwaremiraimirai botnetmirai internetnetworknetwork attacksnetwork protocolnetwork scanningnetwork securityoutlawprocess injectionprotocol exploitationproxyreconnaissanceresearchedscanning activitysmart devicesssh attackt1021t1021.001t1040t1053.005t1055t1059t1059.004t1071t1071.001t1078t1078.001t1105t1110.002t1190t1203t1486t1496t1497t1497.001t1498.001t1499.002t1499.003t1565t1595.001t1595.002t1595.003tcp protocoltelnet threatthingsthreat actortwittervpnxmrig

Activity Timeline

1 total obs
May 2May 2

Threat Activity Heatmap

· Peak: 2026-05-02
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreLow Risk
25
SIGNAL
Signal Score
25%
Confidence
11
Reports
First seenJan 23, 2025
Last seenMay 2, 2026
GeolocationID
CountryIndonesia
LocationBekasi, West Java
ASNAS38320
OrgPT Jaya Mandiri Interior
Coords-6.1728, 106.8272
ProxyVPN

VirusTotal

Not checked

WHOIS

raw
inetnum: 103.158.126.0 - 103.158.127.255 netname: IDNIC-JAYAMANDIRIINTERIOR-ID descr: PT Jaya Mandiri Interior descr: Corporate / Direct Member IDNIC descr: PEKON TAMBAHREJO RT. 008 RW. 004 TAMBAKREJO GADING REJO PRINGSEWU descr: LAMPUNG admin-c: AH1161-AP tech-c: AH1161-AP remarks: Send spam & abuse report to: [email protected] country: ID mnt-by: MNT-APJII-ID mnt-irt: IRT-JAYAMANDIRIINTERIOR-ID mnt-routes: MAINT-ID-JAYAMANDIRIINTERIOR status: ASSIGNED PORTABLE last-modified: 2020-11-10T10:10:46Z source: APNIC irt: IRT-JAYAMANDIRIINTERIOR-ID address: PEKON TAMBAHREJO RT. 008 RW. 004 TAMBAKREJO GADING REJO PRINGSEWU LAMPUNG address: LAMPUNG e-mail: [email protected] abuse-mailbox: [email protected] admin-c: AH1161-AP tech-c: AH1161-AP auth: # Filtered mnt-by: MAINT-ID-JAYAMANDIRIINTERIOR last-modified: 2020-11-10T09:28:50Z source: APNIC person: Arief Hidayanto address: PEKON TAMBAHREJO RT. 008 RW. 004 TAMBAKREJO GADING REJO PRINGSEWU address: LAMPUNG country: ID phone: +62-21-80624666 e-mail: [email protected] nic-hdl: AH1161-AP mnt-by: MAINT-ID-JAYAMANDIRIINTERIOR fax-no: +62-21-80624666 last-modified: 2020-11-10T09:33:18Z source: APNIC inetnum: 103.158.126.0 - 103.158.127.255 netname: IDNIC-JAYAMANDIRIINTERIOR-ID descr: PT Jaya Mandiri Interior descr: Corporate / Direct Member IDNIC descr: PEKON TAMBAHREJO RT. 008 RW. 004 TAMBAKREJO GADING REJO PRINGSEWU descr: LAMPUNG admin-c: AH1161-AP tech-c: AH1161-AP remarks: Send spam & abuse report to: [email protected] country: ID mnt-by: MNT-APJII-ID mnt-irt: IRT-JAYAMANDIRIINTERIOR-ID mnt-routes: MAINT-ID-JAYAMANDIRIINTERIOR mnt-lower: MAINT-ID-JAYAMANDIRIINTERIOR status: ASSIGNED PORTABLE last-modified: 2021-11-18T07:08:18Z source: IDNIC irt: IRT-JAYAMANDIRIINTERIOR-ID address: Jl. Pantai Indah Kapuk Ruko Cordoba Blok H No. 77, Jakarta, 14460 address: JAKARTA e-mail: [email protected] e-mail: [email protected] abuse-mailbox: [email protected] admin-c: JM1988-AP tech-c: JM1988-AP auth: # Filtered mnt-by: MAINT-ID-JAYAMANDIRIINTERIOR last-modified: 2021-12-08T04:01:27Z source: IDNIC person: Arief Hidayanto address: Jl. Pantai Indah Kapuk Ruko Cordoba Blok H No. 77, Jakarta, 14460 address: JAKARTA country: ID phone: +62-21-56984383 e-mail: [email protected] e-mail: [email protected] nic-hdl: AH1161-AP mnt-by: MAINT-ID-JAYAMANDIRIINTERIOR fax-no: +62-21-56983484 abuse-mailbox: [email protected] last-modified: 2021-12-08T04:03:07Z source: IDNIC
references
https://1275.ru/ioc/gs-25-19131-mirai-botnet-iocs_11023, https://1275.ru/ioc/gs-25-19129-mirai-botnet-iocs_11015, https://1275.ru/ioc/gs-25-19128-mirai-botnet-iocs_11001, https://1275.ru/ioc/gs-25-19127-mirai-botnet-iocs_10989, https://1275.ru/ioc/gs-25-19125-mirai-botnet-iocs_10956, https://1275.ru/ioc/gs-25-19126-mirai-botnet-iocs_10970, https://1275.ru/ioc/gs-25-18122-mirai-botnet-iocs_10913, https://1275.ru/ioc/gs-25-18120-mirai-botnet-iocs_10854, https://1275.ru/ioc/gs-25-18119-mirai-botnet-iocs_10829, https://1275.ru/ioc/gs-25-18118-mirai-botnet-iocs_10825, https://1275.ru/ioc/gs-25-17115-mirai-botnet-iocs-2_10696, https://1275.ru/ioc/gs-25-17115-mirai-botnet-iocs_10682, https://1275.ru/ioc/gs-25-17113-mirai-botnet-iocs_10658, https://1275.ru/ioc/gs-25-17112-mirai-botnet-iocs_10640, https://1275.ru/ioc/gs-25-1490-mirai-botnet-iocs_10200

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 1 month ago
Appeared in 11 threat reports