118.107.172.223 Threat Intelligence and Host Information

Share on:
Aug 03, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 118.107.172.223 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 5/100

Host and Network Information

  • JARM: 3fd3fd20d3fd3fd21c3fd3fd3fd3fd2b66a312d81ed1efa0f55830f7490cb2

  • View other sources: Spamhaus VirusTotal

  • Country: South Korea
  • Network:
  • Noticed: 1 times
  • Protcols Attacked: Anonymous Proxy
  • Passive DNS Results: ns1.kshosting.co.kr

Open Ports Detected

10000 10001 10443 12345 1344 1433 17000 1800 1801 18081 19000 2000 20000 2012 2053 2054 2081 2083 2086 2087 2323 2443 3001 3443 4010 443 4430 444 4443 4445 447 448 4899 5000 50000 5001 50070 5222 5280 5443 5555 6000 6001 6003 6008 6080 6443 7000 7001 7010 7081 7090 7443 7777 8001 8002 8003 8004 8005 8006 8008 8009 8010 8011 8012 8013 8016 8018 8022 8026 8028 8029 8030 8031 8032 8036 8042 8048 8081 8082 8083 8084 8085 8086 8087 8089 8090 8092 8093 8094 8098 8099 8100 8101 8102 8103 8105 8106 8108 8109 8110 8111 8180 8182 8200 8282 8401 8405 8443 8444 8446 8448 8602 8663 8787 8800 8802 8811 8812 8813 8815 8816 8830 8843 8848 8849 8880 8885 8888 8889 8890 8935 8999 9000 9002 9003 9004 9005 9006 9009 9013 9014 9015 9018 9036 9037 9044 9046 9047 9051 9080 9084 9088 9089 9090 9091 9094 9095 9097 9099 91 9100 9102 9103 9105 9111 9151 9160 9189 9191 9211 9212 9214 9215 9220 9251 9295 9299 9311 9389 9443 9444 9445 96 9600 9606 9633 9682 9704 9743 9861 9876 9943 9944 9988 9992 9999

Map

Whois Information

  • inetnum: 118.107.160.0 - 118.107.175.255
  • netname: CDNETWORKS
  • descr: CDNetworks
  • admin-c: IM408-AP
  • tech-c: IM408-AP
  • country: KR
  • status: ALLOCATED PORTABLE
  • mnt-by: MNT-KRNIC-AP
  • mnt-irt: IRT-KRNIC-KR
  • last-modified: 2017-02-01T08:16:51Z
  • irt: IRT-KRNIC-KR
  • address: Jeollanam-do Naju-si Jinheung-gil
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: IM574-AP
  • tech-c: IM574-AP
  • mnt-by: MNT-KRNIC-AP
  • last-modified: 2021-06-15T06:21:49Z
  • person: IP Manager
  • address: Seoul Jung-gu Mareunnae-ro 34
  • country: KR
  • phone: +82-2-3441-0378
  • e-mail: [email protected]
  • nic-hdl: IM408-AP
  • mnt-by: MNT-KRNIC-AP
  • last-modified: 2022-07-29T02:00:02Z
  • inetnum: 118.107.160.0 - 118.107.175.255
  • netname: CDNETWORKS-KR
  • descr: CDNetworks
  • country: KR
  • admin-c: YK603-KR
  • tech-c: YK603-KR
  • status: ALLOCATED PORTABLE
  • mnt-by: MNT-KRNIC-AP
  • mnt-irt: IRT-KRNIC-KR
  • changed: [email protected]
  • person: IP Manager
  • address: Seoul Jung-gu Mareunnae-ro 34
  • address: 7F
  • country: KR
  • phone: +82-2-3441-0378
  • e-mail: [email protected]
  • nic-hdl: YK603-KR
  • mnt-by: MNT-KRNIC-AP
  • changed: [email protected]

Links to attack logs

anonymous-proxy-ip-list-2023-08-02