118.107.172.223 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 118.107.172.223 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 5/100

Host and Network Information

  • JARM: 3fd3fd20d3fd3fd21c41d41d000000d0255d76e2a23d86aaeea11a763e6393

  • View other sources: Spamhaus VirusTotal

  • Country: South Korea
  • Network:
  • Noticed: 1 times
  • Protocols Attacked: Anonymous Proxy
  • Passive DNS Results: ns1.kshosting.co.kr

Open Ports Detected

10000 10001 10002 10007 10012 10020 10049 10081 10087 10209 10210 10443 10445 10477 1080 11000 11027 111 11112 12001 12111 12345 12902 13333 14024 1433 14401 14402 14404 1444 14875 14894 14900 14905 15006 15040 15502 15588 15672 15673 16068 16086 16101 16401 17000 17001 17184 1723 17770 17773 17777 1800 18000 18005 18007 1801 18010 18029 18032 18033 18035 18081 18082 18083 18084 18086 18087 18088 18098 18109 18111 18112 18181 1883 190 19000 19443 20000 2001 20020 2003 20053 20082 20084 2081 2083 2086 2087 2122 2323 2443 28443 3000 30008 3001 3012 3050 3100 31210 3443 442 443 4432 4433 4434 4435 4436 444 4443 4444 4455 448 4899 5000 50000 50003 5001 5003 5005 50070 5009 5010 5222 5555 5672 6000 6001 6007 6080 62016 6443 65 6503 6603 6688 7000 7001 7013 7018 7022 7070 7090 7443 7603 7777 7778 7900 7999 8000 8001 8009 8010 8015 8019 8026 8060 8061 8070 8081 8083 8085 8086 8087 8089 8090 8092 8094 8097 8098 8099 8100 8107 8108 8112 8182 8184 8188 8190 8200 8315 8401 8422 8443 8448 8449 8500 8502 8544 8566 8601 8623 8787 8800 8813 8830 8844 8848 8849 8880 8883 8884 8888 8889 8891 8911 8989 9000 9001 9002 9003 9004 9009 9011 9037 9042 9051 9060 9064 9068 9070 9080 9092 9094 9095 9098 9100 9101 9112 9113 9114 9120 9121 9143 9144 9151 9152 9155 9157 9158 9159 9160 9161 9174 9175 9178 9183 9184 9188 9189 9191 9199 9200 9223 9226 9230 9243 9249 9252 9256 9291 9295 9315 9333 9345 9353 9376 9398 9443 9456 9488 9501 9505 9510 9530 9600 9611 9633 9658 9663 9704 9710 9800 9803 9804 9810 9869 9872 9876 9888 9908 9922 9926 9929 9930 9943 9944 9992 9999

Map

Whois Information

  • inetnum: 118.107.160.0 - 118.107.175.255
  • netname: CDNETWORKS
  • descr: CDNetworks
  • country: KR
  • admin-c: IM408-AP
  • tech-c: IM408-AP
  • status: ALLOCATED PORTABLE
  • mnt-by: MNT-KRNIC-AP
  • mnt-irt: IRT-KRNIC-KR
  • last-modified: 2025-03-28T01:26:09Z
  • irt: IRT-KRNIC-KR
  • address: 9, Jinheung-gil, Naju-si, Jeollanam-do
  • e-mail: irt@nic.or.kr
  • abuse-mailbox: irt@nic.or.kr
  • admin-c: IM574-AP
  • tech-c: IM574-AP
  • mnt-by: MNT-KRNIC-AP
  • last-modified: 2025-09-04T01:00:01Z
  • person: IP Manager
  • address: Seoul Jung-gu Mareunnae-ro 34
  • country: KR
  • phone: +82-2-3441-0378
  • e-mail: gnoc@cdnetworks.com
  • nic-hdl: IM408-AP
  • mnt-by: MNT-KRNIC-AP
  • last-modified: 2022-07-29T02:00:02Z
  • inetnum: 118.107.160.0 - 118.107.175.255
  • netname: CDNETWORKS-KR
  • descr: CDNetworks
  • country: KR
  • admin-c: YK603-KR
  • tech-c: YK603-KR
  • status: ALLOCATED PORTABLE
  • mnt-by: MNT-KRNIC-AP
  • mnt-irt: IRT-KRNIC-KR
  • changed: hostmaster@nic.or.kr 20240912
  • person: IP Manager
  • address: Seoul Jung-gu Mareunnae-ro 34
  • address: 7F
  • country: KR
  • phone: +82-2-3441-0378
  • e-mail: gnoc@cdnetworks.com
  • nic-hdl: YK603-KR
  • mnt-by: MNT-KRNIC-AP
  • changed: hostmaster@nic.or.kr 20240912

Links to attack logs

anonymous-proxy-ip-list-2023-08-03 ****** anonymous-proxy-ip-list-2023-08-02 ****** ******

Share on: