IOC Radar
IPMediumSignal 68/100

180.178.94.218

Location
IndonesiaIndonesia
Kartasura, JT
ASN
AS45722
PT Widya Intersat Nusantara
First Seen
Aug 29, 2023
Last Seen
Jun 14, 2026
Aug 29
First Seen
1029d ago
Jun 14
Last Seen
8d ago
19
Reports
source reports
68%
Confidence
medium
11/91
VirusTotal
detections
Found in 19 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
68%
Signal Score
68 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

3 techniques

Network Information

CountryIDIndonesia
RegionKartasura, JT
ASNAS45722
OrganizationPT Widya Intersat Nusantara

Feed Intelligence Summary

19 reports68% confidence
19
Source reports
68%
Confidence score
Category tags
active scanactive scanningaptasiablocklist_allbrute forcebrute-forcebruteforcecowriedionaeaexploitation activityfattftpftp brute-forcehackingidindicatorindonesianetworkp0freconnaissanceresearchedscannersensor-taggedssht1595.001t1595.002t1595.003tannertelnetthreat actortpotweb app attack

Activity Timeline

1 total obs
Jun 14Jun 14

Threat Activity Heatmap

· Peak: 2026-06-14
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
68
SIGNAL
Signal Score
68%
Confidence
19
Reports
First seenAug 29, 2023
Last seenJun 14, 2026
GeolocationID
CountryIndonesia
LocationKartasura, JT
ASNAS45722
OrgPT Widya Intersat Nusantara
Coords-7.5037, 110.7765

VirusTotal

11/ 91vendors flagged
12% detection rateJun 15, 2026

WHOIS

description
Observed on T-Pot within last 24h; sensors=cowrie, fatt, p0f, suricata; threshold?1; private IPs excluded. geo=ID; ports=22; proto=ssh Location=Sydney, Australia.
raw
inetnum: 180.178.92.0 - 180.178.95.255 netname: INTERSATNET-ID descr: PT Widya Intersat Nusantara descr: Internet Service Provider descr: Jl. Mangkuyudan No 44 descr: Yogyakarta 55143 country: ID admin-c: ES244-AP tech-c: SB579-AP status: ALLOCATED PORTABLE remarks: Send spam and abuse reports to [email protected] mnt-by: MNT-APJII-ID mnt-irt: IRT-INTERSATNET-ID mnt-lower: MAINT-ID-INTERSATNET mnt-routes: MAINT-ID-INTERSATNET last-modified: 2017-05-30T08:01:09Z source: APNIC irt: IRT-INTERSATNET-ID address: PT Widya Intersat Nusantara address: Internet Service Provider address: Jl. Mangkuyudan No 44 address: Yogyakarta 55143 e-mail: [email protected] abuse-mailbox: [email protected] admin-c: ES244-AP tech-c: SB579-AP auth: # Filtered mnt-by: MAINT-ID-INTERSATNET last-modified: 2026-03-09T15:38:41Z source: APNIC person: Edie Susatyo nic-hdl: ES244-AP e-mail: [email protected] address: Jl. Mangkuyudan No 44 address: Yogyakarta 55143 address: DI Yogyakarta phone: +62-274-450525 fax-no: +62-274-450707 country: ID mnt-by: MAINT-ID-INTERSATNET last-modified: 2009-09-17T03:39:20Z source: APNIC person: Sulistyanto Budi nic-hdl: SB579-AP e-mail: [email protected] address: Jl. Mangkuyudan No 44 address: Yogyakarta 55143 address: DI Yogyakarta phone: +62-274-450525 fax-no: +62-274-450707 country: ID mnt-by: MAINT-ID-INTERSATNET last-modified: 2009-09-17T03:42:21Z source: APNIC route: 180.178.94.0/24 descr: Route object of PT Widya Intersat Nusantara descr: PT Widya Intersat Nusantara descr: Internet Service Provider descr: Jl. Mangkuyudan No 44 descr: Yogyakarta 55143 origin: AS45722 mnt-by: MAINT-ID-INTERSATNET last-modified: 2019-12-04T08:57:22Z source: APNIC inetnum: 180.178.94.1 - 180.178.94.254 netname: PT_Widya_Intersat_Nusantara_POP_SOLO descr: PT Widya Intersat Nusantara descr: Jl. Duku 1 No.2 , Laweyan descr: Surakarta-57144 country: ID admin-c: ES244-AP tech-c: SB579-AP status: ASSIGNED NON-PORTABLE mnt-by: MAINT-ID-INTERSATNET mnt-irt: IRT-INTERSATNET-ID last-modified: 2017-05-23T12:33:17Z source: IDNIC irt: IRT-INTERSATNET-ID address: PT Widya Intersat Nusantara address: Internet Service Provider address: Jl. Mangkuyudan No 44 address: Yogyakarta 55143 e-mail: [email protected] abuse-mailbox: [email protected] admin-c: ES244-AP tech-c: SB579-AP auth: # Filtered mnt-by: MAINT-ID-INTERSATNET last-modified: 2017-11-27T05:00:21Z source: IDNIC person: Edie Susatyo nic-hdl: ES244-AP e-mail: [email protected] address: Jl. Mangkuyudan No 44 address: Yogyakarta 55143 address: DI Yogyakarta phone: +62-274-450525 fax-no: +62-274-450707 country: ID mnt-by: MAINT-ID-INTERSATNET last-modified: 2009-09-17T03:39:20Z source: IDNIC person: Sulistyanto Budi nic-hdl: SB579-AP e-mail: [email protected] address: Jl. Mangkuyudan No 44 address: Yogyakarta 55143 address: DI Yogyakarta phone: +62-274-450525 fax-no: +62-274-450707 country: ID mnt-by: MAINT-ID-INTERSATNET last-modified: 2009-09-17T03:42:21Z source: IDNIC route: 180.178.92.0/22 descr: Route object of PT Widya Intersat Nusantara descr: ISP descr: Yogyakarta country: ID origin: AS45722 mnt-by: MAINT-ID-INTERSATNET last-modified: 2009-09-29T15:01:35Z source: IDNIC
references
https://blog.edie.io/2020/04/30/diy-ip-threat-feed/, https://github.com/tankmek/threatfeed, https://redpiranha.net

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 years ago · Last seen 8 days ago
Appeared in 19 threat reports