173.249.29.172 Threat Intelligence and Host Information

Sep 12, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 173.249.29.172 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 7/100

Host and Network Information

  • JARM: 2ad2ad0002ad2ad00042d42d00000023f2ae7180b8a0816654f2296c007d93

  • View other sources: Spamhaus VirusTotal

  • Country: Germany
  • Network:
  • Noticed: times
  • Protocols Attacked: SSH
  • Passive DNS Results: smtp.reventaitos.com autoconfig.reventaitos.com imap.reventaitos.com autoconfig.pdmseguros.com smtp.pdmseguros.com imap.pdmseguros.com smtp.unikahome.com imap.unikahome.com autoconfig.unikahome.com autoconfig.subidaalafuentedelareina.es imap.subidaalafuentedelareina.es smtp.subidaalafuentedelareina.es imap.analisisclinicosrv.com autoconfig.analisisclinicosrv.com smtp.analisisclinicosrv.com smtp.soerconstruccion.com autoconfig.soerconstruccion.com imap.soerconstruccion.com autoconfig.siberiano.es smtp.siberiano.es imap.siberiano.es imap.restaurantelucena.com autoconfig.restaurantelucena.com smtp.restaurantelucena.com autoconfig.sergiomillet.com imap.sergiomillet.com smtp.sergiomillet.com imap.rafaestrela.com autoconfig.rafaestrela.com smtp.rafaestrela.com imap.pizzeria-pompei.com smtp.pizzeria-pompei.com autoconfig.pizzeria-pompei.com autoconfig.mnmodajoven.com smtp.mnmodajoven.com imap.mnmodajoven.com smtp.madreciencia.com imap.madreciencia.com autoconfig.madreciencia.com autoconfig.lqe.es smtp.lqe.es imap.lqe.es autoconfig.losencajesdebolillos.com imap.losencajesdebolillos.com smtp.losencajesdebolillos.com autoconfig.clarasanchopsicologia.com imap.clarasanchopsicologia.com smtp.clarasanchopsicologia.com imap.bonanzasupermarket.com autoconfig.bonanzasupermarket.com smtp.bonanzasupermarket.com autoconfig.kodeline.com imap.kodeline.com smtp.kodeline.com autoconfig.audiovisualhall.com imap.audiovisualhall.com smtp.audiovisualhall.com mailbox.khost.me vps-mailbox.khost.me derk.fcprimeau.net zipdrool.fcprimeau.net lappedmuth.fcprimeau.net teelcuf.fcprimeau.net lisfap.fcprimeau.net fusdow.fcprimeau.net cracphyc.fcprimeau.net crypchast.fcprimeau.net rimtude.fcprimeau.net squiraled.fcprimeau.net gileceil.fcprimeau.net lamchoos.fcprimeau.net irgel.fcprimeau.net uidtad.fcprimeau.net wakarm.fcprimeau.net jezfin.fcprimeau.net kledbran.fcprimeau.net curstwine.fcprimeau.net lumsex.fcprimeau.net krograt.fcprimeau.net idimyd.fcprimeau.net bideoff.fcprimeau.net zagspit.fcprimeau.net cormah.fcprimeau.net coknud.fcprimeau.net pauroom.fcprimeau.net blazehel.fcprimeau.net gempriv.fcprimeau.net jefdub.fcprimeau.net keddrich.fcprimeau.net heartclown.fcprimeau.net crusetite.fcprimeau.net ratewei.fcprimeau.net koitdrous.fcprimeau.net ns27.acikdepo.com ns28.acikdepo.com nistced.fcprimeau.net azcad.fcprimeau.net uacawk.fcprimeau.net scencrime.fcprimeau.net bootych.fcprimeau.net cartesier.fcprimeau.net revel.fcprimeau.net eclipse.fcprimeau.net badass.fcprimeau.net embedded.fcprimeau.net want.fcprimeau.net mash.fcprimeau.net district.fcprimeau.net rapid.fcprimeau.net deep.fcprimeau.net cluster.fcprimeau.net verity.fcprimeau.net

Malware Detected on Host

Count: 2 5a5ae2fc35f8db2373f08fb74c793aaa0510362c1475c8de849356716c653f58 9ba756240914c6834ce3a153d678f18f78e51ff3bdf0acd8aec985a2ee60bed3

Open Ports Detected

143 22 25 443 465 587 80 993 995

Whois Information

Links to attack logs

****** ****** ******

Share on: