← Back to feed

AS7713 PT Telekomunikasi Indonesia

ASN Active medium
Why this campaign was detected
10 IPs from the same network (PT Telekomunikasi Indonesia, AS7713) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS7713 · PT Telekomunikasi Indonesia
Subnet
—
Country
🇮🇩 ID
Cloud Provider
—
Member Count
10 IPs
Below average
Total Events
5682
Below average by volume
Started / Ended
2026-02-19 00:26 — ongoing
Attack Types
ssh:bruteforce ssh:connection ssh:intrusion ssh:malware telnet:connection
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Execution
Credential Access
Discovery
Command and Control
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
36.64.131.68 credential_harvester 83% 1x OSINT 3828 3 ssh:bruteforcessh:connectionssh:intrusionssh:malware — 2026-10-18 21:17 evidence →
36.67.227.241 credential_harvester 83% 1x OSINT 724 3 ssh:bruteforcessh:connectionssh:intrusionssh:malware — 2026-10-18 20:14 evidence →
36.66.16.233 credential_harvester 77% 1x OSINT 928 3 ssh:bruteforcessh:malware — 2026-10-15 16:15 evidence →
180.249.37.145 scanner 52% 182 4 telnet:connection — 2026-10-17 16:09 evidence →
36.75.27.10 scanner 23% 4 1 ssh:connection — 2026-10-18 03:07 evidence →
180.252.118.160 scanner 20% 2 1 telnet:connection — 2026-10-17 02:31 evidence →
180.254.69.76 scanner 20% 4 1 ssh:connection — 2026-10-16 10:12 evidence →
180.245.29.225 scanner 17% 4 1 ssh:connection — 2026-10-14 18:11 evidence →
36.70.233.177 scanner 16% 2 1 telnet:connection — 2026-10-15 02:53 evidence →
125.161.141.179 scanner 12% 4 1 telnet:connection — 2026-10-12 12:22 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds