186.249.236.29 Threat Intelligence and Host Information

May 18, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 186.249.236.29 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Known Malicious Host 🔴 75/100

Host and Network Information

Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110.004 - Credential Stuffing, T1110 - Brute Force
Tags: blacklist, brute force, bruteforce, Bruteforce, Brute-Force, cowrie, cyber security, ioc, malicious, Malicious IP, Nextray, phishing, scan, scanners, ssh, SSH, tcp, vultr
View other sources: Spamhaus VirusTotal
Contained within other IP sets: b3b0, blocklist_de, blocklist_de_ssh, greensnow, haley_ssh

Country: Brazil
Network:
Noticed: 50 times
Protocols Attacked: ssh
Countries Attacked: Australia, Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Passive DNS Results: grimorio.atendeai.com

Open Ports Detected

10050 161 2000 20202 2701 7601 7657 7776 7777 7799 800 8122 8291 9054 9055 9056 9063 9116 9118 9216 9217 9226 9301 9333 9527 9530 9981

Map

Whois Information

inetnum: 186.249.236.24/29
aut-num: AS21574
abuse-c: ACTLT99
owner: Almarc Engenharia Ltda
ownerid: 05.681.436/0001-07
responsible: Leandro Gon�alves Parreiras
country: BR
owner-c: LGP155
tech-c: LGP155
created: 20240606
changed: 20240606
inetnum-up: 186.249.224.0/20
nic-hdl-br: LGP155
person: Leandro Gon�alves Parreiras
e-mail: leandro.parreiras@gmail.com
country: BR
created: 20051102
changed: 20230425
nic-hdl-br: ACTLT99
person: Abuse Century Telecom Ltda
e-mail: abuse@century.net.br
country: BR
created: 20200610
changed: 20200610

Links to attack logs

Share on: