182.18.138.129 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 182.18.138.129 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 5/100

Host and Network Information

  • JARM: 2ad2ad16d00000022c2ad2ad2ad2ad46ff59a659b30fd8aeaa6755c67691b4

  • View other sources: Spamhaus VirusTotal

  • Country: India
  • Network:
  • Noticed: 1 times
  • Protocols Attacked: SSH
  • Passive DNS Results: www.garibvikas.com dashboard.paymantra.in bbps.paymantra.in paymantra.in dashboard.jengapay.com mudraguru.in api.mudraguru.in bbps.mudraguru.in aeps.mudraguru.in dashboard.mudraguru.in www.jengapay.com jengacards.com dbv1.jengapay.com corporate.rentbharo.com merchant.paybeema.com portal.epayportal.in dashboard.bsgoverseas.com bsgoverseas.com uat.levinpay.com dashboard.levinpay.com payin.levinpay.com levinpay.com api.jengapay.com jengapay.com www.mobipact.com bbps.digiindiamarketing.com fintech.digiindiamarketing.com palsecurities.com api.qwikpe.com dbv1.qwikpe.com qwikpe.com easyfarming.in paykiraya.com portal.rentbharo.com portal.paykiraya.com rentbharo.com dbv2.mobipact.com dashboard.paybeema.com paybeema.com kiwipe.com epayportal.in developers.mobipact.com uat.mobipact.com cogomedia.com api.banknyou.com dashboard.banknyou.com banknyou.com www.banknyou.com api.smppl.net dashboard.smppl.net www.ducatpayments.com ducatpayments.com bbps.bulkbazaar.in gateway.esybill.in bbps.esybill.in fintech.esybill.in api.bulkbazaar.in dashboard.bulkbazaar.in bulkbazaar.in dashboard.mobipact.com mobipact.com api.mobipact.com aeps.mobipact.com erp.garibvikas.com garibvikas.com bbps.mobipact.com ns1.softbulls.com ns2.softbulls.com

Malware Detected on Host

Count: 1 3c69f99f8201877c4896234c2460302eab8ce48a48068327fb9c961f9c8b0a8e

Open Ports Detected

21 3306 443 444 53 80 8443 8880

Map

Whois Information

  • inetnum: 182.18.138.1 - 182.18.138.255
  • netname: CtrlS_VPS
  • descr: IP pool for CtrlS
  • country: IN
  • admin-c: PSR1-AP
  • tech-c: II45-AP
  • status: ASSIGNED NON-PORTABLE
  • mnt-by: MAINT-IN-IPAPELABS
  • mnt-routes: MAINT-IN-IRINN
  • mnt-irt: IRT-PEL-IN
  • last-modified: 2025-08-11T22:57:20Z
  • irt: IRT-PEL-IN
  • address: Pioneer Elabs Ltd.
  • address:
  • address: Saifabad, hyderabad - 500004
  • address: Andra Pradesh, India
  • e-mail: abuse@ctrls.in
  • abuse-mailbox: abuse@ctrls.in
  • admin-c: PSR1-AP
  • tech-c: II45-AP
  • mnt-by: MAINT-IN-IPAPELABS
  • last-modified: 2025-09-05T00:12:03Z
  • person: IP Administrator IP Administrator Pioneer Elabs
  • nic-hdl: II45-AP
  • e-mail: ip.admin@pioneerelabs.com
  • address: Ground Floor, Pioneer Towers, Plot No.16,
  • address: APIIC Software Units Layout,
  • address: Madhapur,
  • address: Hyderabad - 500081
  • phone: +91-404-2030700
  • fax-no: +91-402-3116055
  • country: IN
  • mnt-by: MAINT-IN-IPAPELABS
  • last-modified: 2012-11-30T05:10:56Z
  • person: Pinnapureddy Sridhar Reddy
  • address: CtrlS Datacenters Ltd.
  • address: 7th Floor, Pioneer Towers,
  • address: Plot No.16, APIIC Software Units Layout,
  • address: Madhapur,
  • address: Hyderabad - 500081
  • country: IN
  • phone: +91-40-42030700
  • fax-no: +91-40-23116055
  • e-mail: admin@ctrls.in
  • nic-hdl: PSR1-AP
  • mnt-by: MAINT-IN-IPAPELABS
  • last-modified: 2023-09-04T07:30:41Z
  • route: 182.18.138.0/24
  • descr: CtrlS
  • origin: AS18229
  • mnt-by: MAINT-IN-IPAPELABS
  • last-modified: 2013-01-07T01:54:14Z

Links to attack logs

****** ****** ******

Share on: