← Back to feed

AS38513 PT Aplikanusa Lintasarta

ASN Ended medium
Why this campaign was detected
5 IPs from the same network (PT Aplikanusa Lintasarta, AS38513) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS38513 · PT Aplikanusa Lintasarta
Subnet
Country
🇮🇩 ID
Cloud Provider
Member Count
5 IPs
Below average
Total Events
3873
Below average by volume
Started / Ended
2026-02-28 02:47 — ongoing
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Credential Access
Command and Control
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
103.191.14.243 credential_harvester 71% 1x OSINT 3530 3 ssh:bruteforce 2026-08-30 17:13 evidence →
103.147.159.91 credential_harvester 71% 1x OSINT 1625 3 ssh:bruteforce 2026-09-04 23:21 evidence →
103.125.103.201 credential_harvester 67% 2863 3 ssh:bruteforce 2026-08-18 00:20 evidence →
103.190.214.241 credential_harvester 67% 2336 3 ssh:bruteforce 2026-07-29 04:18 evidence →
103.191.14.210 credential_harvester 56% 1x OSINT 1482 2 ssh:bruteforce 2026-08-24 05:14 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}