IOC Radar
IPMediumSignal 32/100

89.21.85.28

Location
IndonesiaIndonesia
Cibinong, Brussels Hoofdstedelijk Gewest
ASN
AS141892
PT. INDUSTRI KREATIF DIGITAL
First Seen
Mar 20, 2025
Last Seen
May 30, 2026
Mar 20
First Seen
450d ago
May 30
Last Seen
14d ago
12
Reports
source reports
32%
Confidence
medium
Found in 12 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
32%
Signal Score
32 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

30 techniques

Network Information

CountryIDIndonesia
RegionCibinong, Brussels Hoofdstedelijk Gewest
ASNAS141892
OrganizationPT. INDUSTRI KREATIF DIGITAL

Feed Intelligence Summary

12 reports32% confidence
12
Source reports
32%
Confidence score
Category tags
abuseaccess controlactive scanactive scanningaptasiabad reputationbad web botbebelgiumblacklisted ipblog spambotnetbotnet activitybrute forcebrute force attackbrute-forcecommand and controlcommunication protocolcredential accesscredential harvestingcredential stuffingdata exfiltrationdata manipulationdata store exposuredatabase attackdatabase securitydatabase vulnerabilityddosddos attackdecoy systemdenial of servicedistributed attackseuropeexecutable fileexploitation activityexploited hostfranceftp brute-forcehackinghttphttp scannerididentity & access exploitationindicatorindonesiainjection activityinjection attacksintrusion detectionmalicious ipmalicious softwaremalwaremysqlnetworknetwork attacksnetwork securitypassword attacksphishingphishing attackphpping of deathprocess injectionreconnaissanceresearchedscannerscripting languagesecurity policyserver exploitationsocial engineeringspamsqlsql injectionsql injection attemptsqlissh attackt1040t1055t1059.003t1059.004t1059.007t1068t1071.001t1110.001t1110.002t1110.003t1110.004t1189t1190t1202t1203t1486t1496t1499.001t1499.002t1499.003t1505t1505.002t1565t1566.001t1566.002t1566.003t1588.006t1595.001t1595.002t1595.003targeting databasetcptcp protocolthreat actorthreat intelligencethreat preventionukrainevulnerability scanweb app attackweb application attackweb application exploitationweb application vulnerabilityweb developmentweb exploitationweb securityweb spamweb traffic

Activity Timeline

1 total obs
May 30May 30

Threat Activity Heatmap

· Peak: 2026-05-30
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreLow Risk
32
SIGNAL
Signal Score
32%
Confidence
12
Reports
First seenMar 20, 2025
Last seenMay 30, 2026
GeolocationID
CountryIndonesia
LocationCibinong, Brussels Hoofdstedelijk Gewest
ASNAS141892
OrgPT. INDUSTRI KREATIF DIGITAL
Coords47.8473, 35.2810

VirusTotal

Not checked

WHOIS

raw
inetnum: 89.21.85.0 - 89.21.85.255 netname: IPNETWORK country: EU geofeed: https://geofeed.ipxo.com/geofeed.txt org: ORG-PIKD3-RIPE admin-c: PIKD2-RIPE tech-c: PIKD2-RIPE abuse-c: PIKD2-RIPE status: SUB-ALLOCATED PA remarks: End User Organization mnt-by: netutils-mnt created: 2024-09-12T12:16:49Z last-modified: 2025-02-17T05:01:29Z source: RIPE organisation: ORG-PIKD3-RIPE org-name: PT. INDUSTRI KREATIF DIGITAL org-type: OTHER remarks: End User Organization address: Lingkungan 01 Ciriung Cemerlang, No 106-107. RT. 04/03 address: 16918 address: Bogor country: ID abuse-c: PIKD2-RIPE mnt-ref: IPXO-MNT mnt-ref: netutils-mnt mnt-by: IPXO-MNT mnt-by: netutils-mnt created: 2024-04-27T02:47:28Z last-modified: 2024-12-05T09:22:12Z source: RIPE # Filtered role: PT. INDUSTRI KREATIF DIGITAL address: Lingkungan 01 Ciriung Cemerlang, No 106-107. RT. 04/03 address: 16918 address: Bogor address: ID nic-hdl: PIKD2-RIPE remarks: End User Organization abuse-mailbox: [email protected] mnt-by: netutils-mnt created: 2024-04-27T02:47:28Z last-modified: 2024-12-05T09:42:18Z source: RIPE # Filtered route: 89.21.85.0/24 origin: AS141892 mnt-by: netutils-mnt created: 2025-02-17T05:01:29Z last-modified: 2025-02-17T05:01:29Z source: RIPE

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 14 days ago
Appeared in 12 threat reports