157.112.189.29 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 157.112.189.29 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 15/100

Host and Network Information

  • JARM: 29d29d15d29d29d00042d42d000000038eaaf490bec8dc33757f165ce01762

  • View other sources: Spamhaus VirusTotal

  • Country: Japan
  • Network:
  • Noticed: 1 times
  • Protocols Attacked: SSH
  • Passive DNS Results: aoranow.ss-dev-prev.com anicom.demospace.works kuuki.demospace.works www.ruigo-jiten.com demospace.website coralworks.net nursingneed.bikantest.com dev-cf.ss-dev-prev.com soyappi.com siawaseclean.com sakuraclinic.demospace.works gritart-writing.com demospace.site think-haus.ss-dev-prev.com column.bikantest.com mdi90.ss-dev-prev.com www.hapinesu-sayama.com wkym.demospace.works www.fitto-mall.com pola-ba.ss-dev-prev.com www.marcobanchelli.com bikantest.com ruigo-jiten.com darwin-nm.ss-dev-prev.com hfm-arc-static.ss-dev-prev.com dev-test.ss-dev-prev.com marubeni-dx.ss-dev-prev.com awamori.demospace.works www.hearty-ink.jp hearty-ink.jp archive.supersuper.jp chuo-wp.demospace.works academeia.ss-dev-prev.com hfm-arc-wp.ss-dev-prev.com jls-old-static.ss-dev-prev.com personalimportguide.com blog.bunshinsupply.jp marcobanchelli.com brand-media-labo.online www.demospace.works fitto-mall.com dogfight-racing.co.jp yoshida-electric.com brand-good-labo.com www.goodthings-labo.com goodthings-labo.com www.sekirara-woman.com sekirara-woman.com kotobasta.com www.kotobasta.com conlab.ss-dev-prev.com moh1985.demospace.works yamachiya.demospace.page www.entamevid.com irumaloca.jp www.irumaloca.jp www.futakotamagawa-saryo.com futakotamagawa-saryo.com www.iruma-pta.jp iruma-pta.jp demospace.works mvj.ss-dev-prev.com newwork.ss-dev-prev.com tmso.demospace.works benzema9.xsrv.jp fieldsuite-hakuba.riginal.jp masaboshi.demospace.page www.bansei-pack.com bansei-pack.com parkestate.w-devs.net www.kabasawa.co.jp swe.ss-dev-prev.com matchingfesta.demospace.page gonzaemon.demospace.page idear.ss-dev-prev.com dev-conlad.ss-dev-prev.com conlad.supersuper.jp rakurakuken.demospace.page wicom.demospace.page hps.ss-dev-prev.com web.supersuper.jp acogroup.w-devs.net entamevid.com unittane.demospace.page www.gritart.co.jp gritart.co.jp corona.ss-dev-prev.com dev-conceptlab.ss-dev-prev.com takawa.w-devs.net you-me-class.w-devs.net cl.ss-dev-prev.com muza.demospace.page sy-teaser-old.ss-dev-prev.com best-note.xyz ss-old.ss-dev-prev.com w-juken.w-devs.net 39shinnichi.w-devs.net www.kazuko-dream.com kazuko-dream.com marusan.demospace.page izumi-parktown.w-devs.net you-raku.w-devs.net seiburealsol.w-devs.net ruroken-stage.com www.ruroken-stage.com golflounge.demospace.page tmso.demospace.page jls.ss-dev-prev.com funabashilang.demospace.page akitsuki.demospace.page jogatom.w-devs.net tokyulifia.w-devs.net jr-shikoku.w-devs.net asset.bluelagune.jp nb.ss-dev-prev.com ja-saikatsu.w-devs.net kurando-wp.demospace.page hokushinshouji.w-devs.net mbcfudousan.w-devs.net metro-dev.w-devs.net bluebox.w-devs.net 81-1736.w-devs.net www.iruma-city-sayamacha.com chintai-kanri.w-devs.net urban-ho.w-devs.net bluelagune.jp www.bluelagune.jp officenetwork.w-devs.net sar.w-devs.net tobu-re-parking.w-devs.net taiheido.w-devs.net stc-wp.demospace.page hjt.w-devs.net kaeruparking.w-devs.net pd.demospace.page eazycooktube.com www.eazycooktube.com 2style.demospace.page jrwd.w-devs.net techno-brain.demospace.page nb-fkt.ss-dev-prev.com www.kiwi-sherbet.online devb.ss-dev-prev.com www.bihatudou-suzuki.com www.nagahama-yeg.net taiseisangyo.w-devs.net kiwi-sherbet.online epa.ss-dev-prev.com clinickiosk.demospace.page tokyomountain-tours.demospace.page tp.w-devs.net www.mango-sorbet.xyz hinord.demospace.link www.ecok.jp ecok.jp dh-parking.w-devs.net ols.ss-dev-prev.com nb-grey.ss-dev-prev.com staging.spring-net.co.jp tsurumakisc.demospace.page sicmarking.demospace.page blancell.demospace.page sfida.demospace.page bihatudou-suzuki.com kanna.ss-dev-prev.com ukd.w-devs.net pubfun.demospace.page tsi.demospace.page kurando.demospace.page www.banana-chocolate.com www.ichigo-caramel.net fpu2022.demospace.page mitsubachi-wp.demospace.page uchiwawa.com www.uchiwawa.com parfit.demospace.page kanna-old.ss-dev-prev.com kanna-old.supersuper.jp keio.w-devs.net storyis-maruman.ss-dev-prev.com kaso2-ch.com www.kaso2-ch.com bio.ss-dev-prev.com lc.ss-dev-prev.com assist.w-devs.net yatomijidousya.jp www.yatomijidousya.jp operacity.demospace.page mitsubachi.demospace.page sw.ss-dev-prev.com tmt.demospace.page tsi.demospace.link jillstuart.demospace.page mm.ss-dev-prev.com matsuso.demospace.page ichigo-caramel.net www.sabakan-mania.com mango-sorbet.xyz banana-chocolate.com www.peach-cider.xyz peach-cider.xyz www.apple-cinnamon.xyz apple-cinnamon.xyz cherry-ice.xyz www.cherry-ice.xyz grape-brulee.xyz www.grape-brulee.xyz www.lemon-cream.xyz lemon-cream.xyz orange-tart.site www.orange-tart.site pineapple-cake.xyz www.pineapple-cake.xyz hono-bono.xyz www.hono-bono.xyz shop.riginal.jp ss.ss-dev-prev.com nano.demospace.page onecruise-old.ss-dev-prev.com www.kato-ayuko.net audioad.demospace.page nahato.ss-dev-prev.com asagaya31.demospace.page prima.demospace.page funabashi.demospace.page nemotomiki.demospace.link old.ss-dev-prev.com cgf.w-devs.net tes.ss-dev-prev.com zack.xsrv.jp nahato2.ss-dev-prev.com stc.demospace.page kbz.demospace.page saijoukensetsu.demospace.page www.themovingyellowpages.com nemotomiki.demospace.page horidigi-brand.ss-dev-prev.com rootnurse.demospace.page www.takahagihoikuen.com kahoku.demospace.page www.web-no-tobira.net zetta.nano-f.com aptest.w-devs.net marugon.demospace.page themovingyellowpages.com www.pomme-ambree.net pomme-ambree.net www.onlinegame-casino.com asset.blueark.jp nttdata.demospace.page tixplus.demospace.page mpn.demospace.page sainte-pure.ss-dev-prev.com sabakan-mania.com marugon-wp.demospace.page demo.stran.shop kobe-c-wp.demospace.page candy-lion.xsrv.jp bp-space.xyz www.bp-space.xyz backup-room.xyz www.backup-room.xyz sun.w-devs.net kobe.demospace.page takahagigolfcenter.com soyat-design.com www.soyat-design.com gooooolf.com sansekkei.co.jp mpnportal.demospace.page sy-teaser.ss-dev-prev.com cotton-trend.xyz www.cotton-trend.xyz doronumax.com www.doronumax.com www.iruma-taiko-session.com iruma-taiko-session.com blueark.jp www.blueark.jp sagarafarm.com kumasaka-jimusyo.com spring-sale.jp spring-net.info yatomi.xyz www.50karano.com 50karano.com www.planetaroom.jp atlanticalink.info shakuten.com nagahama-yeg.net bontain.co.jp kabasawa.co.jp mens-town.com sps-elp.com www.stran.shop enhikari.naoblogpcgame.com yamabe.co.jp alominera.demospace.page ap.w-devs.net yjweb.jp www.yjweb.jp nanofa.jp www.96thstreetsteakburgers.com asagaya37.demospace.page asagaya39.demospace.page takahagihoikuen.com writingoffice-sb9.com www.travelart.co.jp travelart.co.jp yk-kaikei.com idrinc.xyz supersuper.xyz tattooyuustudio.jp nakano-re.com calpis-ec04.ld-crew.com ham-t.com www.ham-t.com stran.shop web-no-tobira.net telfortell.jp www.telfortell.jp shop.feelgood21.net hochouki-osaka.com izumi-vet.com onecruise.ss-dev-prev.com www.ss-dev-prev.com ss-dev-prev.com activebousai-wp.demospace.page www.hochouki-kinki.com hochouki-kinki.com mstyd.com garo-game.com yamatomirai.demospace.page webseminar.demospace.page www.310story.com 310story.com www.foiredelanvaux.com foiredelanvaux.com asagaya40.demospace.page asagaya38.demospace.page asagaya36.demospace.page nano-f.com kusufx.com ksc-kwansei.com asagaya34.demospace.page asagaya35.demospace.page asagaya33.demospace.page asagaya32.demospace.page famid.net www.no-moto.jp asagaya30.demospace.page asagaya29.demospace.page asagaya28.demospace.page asagaya27.demospace.page asagaya26.demospace.page asagaya24.demospace.page mba-wp.demospace.page asagaya25.demospace.page asagaya23.demospace.page asagaya22.demospace.page asagaya21.demospace.page asagaya19.demospace.page u-nit.co.jp nakano.demospace.page asagaya18.demospace.page asagaya17.demospace.page asagaya16.demospace.page child.wing116.com matome99.xsrv.jp mcf-fukushi.co.jp www.mcf-fukushi.co.jp asagaya15.demospace.page asagaya14.demospace.page asagaya13.demospace.page asagaya11.demospace.page asagaya12.demospace.page hammocs-wp.demospace.page fpu.demospace.page takuhai-cleaning-kazoku.com www.takuhai-cleaning-kazoku.com sub-lp01.mystik.jp asagaya10.demospace.page asagaya9.demospace.page asagaya7.demospace.page yamatovillage.demospace.page asagaya6.demospace.page shop.bunshinsupply.jp dfeel.demospace.page asagaya3.demospace.page asagaya2.demospace.page hirakata.demospace.page planetaroom.jp isshin.w-devs.net asset.hoozue.jp soup.demospace.page sukkiri.feelgood21.net ohtori-arch-wp.demospace.page www.bontain.co.jp pushtest.blancell.jp pushtest.demospace.page 96thstreetsteakburgers.com www.j-delivery.com j-delivery.com kuu.ld-crew.com paradise-fsc.com yamaha-robotics2021-phase3.demospace.page ssvi.demospace.page hammocs.demospace.page www.organic21.net sanda-hochouki.com www.sanda-hochouki.com yutax.jp www.yutax.jp saitama-city-hsp.demospace.page wing116.com www.wing116.com andby.demospace.page shanti.w-devs.net vexon.demospace.page ecolifefair.demospace.page asagaya.demospace.page eventsaiji.w-devs.net planetaroom.w-devs.net lacoppe.jp www.andou-k.co.jp andou-k.co.jp www.careercan.tokyo careercan.tokyo www.supersuper.jp supersuper.jp kato-ayuko.jp www.kato-ayuko.jp www.coffleno.com coffleno.com nanami.w-devs.net www.kamijou.net rurikamiyaweb.demospace.page www.dddzoom.com dddzoom.com hiromukiriya-wp.demospace.page lasershowware-wp.demospace.page yourmark.jp www.yourmark.jp www.ziel-project.jp ziel-project.jp hana1512.spring-net.co.jp lapla-wp.demospace.page www.garo-game.com mudef.w-devs.net artericca.demospace.page www.housien.net housien.net seisaku.ts-engineering.jp readman-wp.demospace.page behigher-wp.demospace.page shangrila.demospace.page no-moto.co.jp www.dogfoodreviwrank.com www.ts-soysoy.com ts-soysoy.com lapla.demospace.page condominium.spring-net.work ctdoll.w-devs.net maruiso.demospace.page www.no-moto.co.jp no-moto.jp www.tokorozawairumaprint.com asset.spring-net.work test.j-delivery.com acoustics2012hk.org gamingpcchaya.jp www.gamingpcchaya.jp www.itoshintai.com icontinent-wp.demospace.page ts-engineering.jp www.ts-engineering.jp phoenix.demospace.page logimeter-wp.demospace.page eccube.demospace.link spring-net.co.jp www.spring-net.co.jp ntt.w-devs.net www.kg-sps.jp icontinent.demospace.page venturenet.w-devs.net logimeter.demospace.page www.tensyoku-muzu.com matsuso.demospace.link cciaviles.com www.cciaviles.com kurinomi.site www.kurinomi.site asset.spring-net.co.jp tokorozawairumaprint.com polaris-coating.com jpca-wp.demospace.link dogfight-racing.com www.dogfight-racing.com www.dh-diner.com cosmebi.demospace.page

Malware Detected on Host

Count: 1 06b789e838ab91d5277c9db321c04c4c766183e10880ed7c7286895ec5e743ae

Open Ports Detected

10022

CVEs Detected

CVE-2007-2768 CVE-2008-3844 CVE-2016-20012 CVE-2017-15906 CVE-2018-15473 CVE-2018-15919 CVE-2018-20685 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408 CVE-2023-48795 CVE-2023-51385 CVE-2023-51767 CVE-2025-26465 CVE-2025-32728

Map

Whois Information

  • NetRange: 157.101.0.0 - 157.119.187.255
  • CIDR: 157.112.0.0/14, 157.119.160.0/20, 157.119.184.0/22, 157.119.0.0/17, 157.119.128.0/19, 157.104.0.0/13, 157.119.176.0/21, 157.102.0.0/15, 157.116.0.0/15, 157.101.0.0/16, 157.118.0.0/16
  • NetName: APNIC-ERX-157-101-0-0
  • NetHandle: NET-157-101-0-0-1
  • Parent: NET157 (NET-157-0-0-0-0)
  • NetType: Early Registrations, Transferred to APNIC
  • OriginAS:
  • Organization: Asia Pacific Network Information Centre (APNIC)
  • RegDate: 2004-04-07
  • Updated: 2020-03-03
  • Comment: This IP address range is not registered in the ARIN database.
  • Comment: This range was transferred to the APNIC Whois Database as
  • Comment: part of the ERX (Early Registration Transfer) project.
  • Comment: For details, refer to the APNIC Whois Database via
  • Comment:
  • Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
  • Comment: for the Asia Pacific region. APNIC does not operate networks
  • Comment: using this IP address range and is not able to investigate
  • Comment: spam or abuse reports relating to these addresses. For more
  • Ref: https://rdap.arin.net/registry/ip/157.101.0.0
  • OrgName: Asia Pacific Network Information Centre
  • OrgId: APNIC
  • Address: PO Box 3646
  • City: South Brisbane
  • StateProv: QLD
  • PostalCode: 4101
  • Country: AU
  • RegDate:
  • Updated: 2012-01-24
  • Ref: https://rdap.arin.net/registry/entity/APNIC
  • OrgTechHandle: AWC12-ARIN
  • OrgTechName: APNIC Whois Contact
  • OrgTechPhone: +61 7 3858 3188
  • OrgTechEmail: search-apnic-not-arin@apnic.net
  • OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
  • OrgAbuseHandle: AWC12-ARIN
  • OrgAbuseName: APNIC Whois Contact
  • OrgAbusePhone: +61 7 3858 3188
  • OrgAbuseEmail: search-apnic-not-arin@apnic.net
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
  • inetnum: 157.112.176.0 - 157.112.191.255
  • netname: BETINC
  • descr: XSERVER Inc.
  • descr: GRAND FRONT OSAKA TOWER A 32F,4-20,
  • descr: Ofukacho,Kita-ku,Osaka-city
  • country: JP
  • admin-c: JNIC1-AP
  • tech-c: JNIC1-AP
  • status: ALLOCATED PORTABLE
  • mnt-irt: IRT-JPNIC-JP
  • mnt-by: MAINT-JPNIC
  • mnt-lower: MAINT-JPNIC
  • mnt-routes: MAINT-JPNIC
  • last-modified: 2020-11-05T07:28:04Z
  • irt: IRT-JPNIC-JP
  • address: Uchikanda OS Bldg 4F, 2-12-6 Uchi-Kanda
  • address: Chiyoda-ku, Tokyo 101-0047, japan
  • e-mail: hostmaster@nic.ad.jp
  • abuse-mailbox: hostmaster@nic.ad.jp
  • phone: +81-3-5297-2311
  • fax-no: +81-3-5297-2312
  • admin-c: JNIC1-AP
  • tech-c: JNIC1-AP
  • mnt-by: MAINT-JPNIC
  • last-modified: 2025-04-10T11:04:13Z
  • role: Japan Network Information Center
  • address: Uchikanda OS Bldg 4F, 2-12-6 Uchi-Kanda
  • address: Chiyoda-ku, Tokyo 101-0047, Japan
  • country: JP
  • phone: +81-3-5297-2311
  • fax-no: +81-3-5297-2312
  • e-mail: hostmaster@nic.ad.jp
  • admin-c: JI13-AP
  • tech-c: JE53-AP
  • nic-hdl: JNIC1-AP
  • mnt-by: MAINT-JPNIC
  • last-modified: 2022-01-05T03:04:02Z
  • inetnum: 157.112.189.0 - 157.112.189.255
  • netname: XSERVER7
  • descr: XSERVER Inc.
  • country: JP
  • admin-c: NK3681JP
  • tech-c: NK3681JP
  • last-modified: 2014-09-23T02:53:05Z

Links to attack logs

****** ****** ******

Share on: