197.221.12.169 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 197.221.12.169 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 5/100

Host and Network Information

• View other sources: Spamhaus VirusTotal

• Country: South Africa
• Network:
• Noticed: 1 times
• Protocols Attacked: SSH
• Passive DNS Results: imap.thevale.co.za imap.portstfrancis.co.za imap.m.chemdry.co.za imap.kyalamiaccommodation.co.za imap.enviroplant.co.za imap.rockitcargo.co.za pop.accommodationjbay.co.za smtp.accommodationjbay.co.za www.accommodationjbay.co.za accommodationjbay.co.za smtp.inhousestfrancis.co.za pop.inhousestfrancis.co.za www.inhousestfrancis.co.za inhousestfrancis.co.za www.mandyville.co.za smtp.mandyville.co.za mandyville.co.za pop.mandyville.co.za smtp.flysaa.co.za flysaa.co.za www.flysaa.co.za pop.flysaa.co.za southafricaretreats.co.za smtp.southafricaretreats.co.za pop.southafricaretreats.co.za www.southafricaretreats.co.za smtp.anubiscremations.co.za www.anubiscremations.co.za anubiscremations.co.za pop.anubiscremations.co.za smtp.thechannel.co.za www.thechannel.co.za thechannel.co.za pop.thechannel.co.za www.bridgems.co.za smtp.bridgems.co.za pop.bridgems.co.za bridgems.co.za smtp.irisgomez.co.za pop.irisgomez.co.za www.irisgomez.co.za irisgomez.co.za pop.baychillis.co.za www.baychillis.co.za baychillis.co.za smtp.baychillis.co.za smtp.eccu.co.za eccu.co.za www.eccu.co.za pop.eccu.co.za smtp.perthaccommodation.co.za perthaccommodation.co.za www.perthaccommodation.co.za pop.perthaccommodation.co.za smtp.zimbabweaccommodation.co.za pop.zimbabweaccommodation.co.za zimbabweaccommodation.co.za www.zimbabweaccommodation.co.za smtp.malawiaccommodation.co.za pop.malawiaccommodation.co.za malawiaccommodation.co.za www.malawiaccommodation.co.za www.stfrancissport.co.za smtp.stfrancissport.co.za pop.stfrancissport.co.za stfrancissport.co.za kwa-i-langa.com www.datascopeuniversity.com smtp.datascopeuniversity.com pop.datascopeuniversity.com datascopeuniversity.com pop.sfbmedical.co.za www.sfbmedical.co.za smtp.sfbmedical.co.za sfbmedical.co.za pop.retrothestore.co.za smtp.retrothestore.co.za retrothestore.co.za www.retrothestore.co.za pop.renewsol.co.za smtp.renewsol.co.za www.renewsol.co.za renewsol.co.za vasvat.co.za pop.vasvat.co.za www.vasvat.co.za smtp.vasvat.co.za pop.enerobes.com smtp.enerobes.com oysterkaya.co.za www.oysterkaya.co.za pop.oysterkaya.co.za smtp.oysterkaya.co.za riverkaya.co.za pop.riverkaya.co.za www.riverkaya.co.za smtp.riverkaya.co.za zamdoula.love www.zamdoula.love smtp.zamdoula.love pop.zamdoula.love pop.doonsideaccommodation.co.za doonsideaccommodation.co.za www.doonsideaccommodation.co.za smtp.doonsideaccommodation.co.za www.namibiaaccommodation.co.za pop.namibiaaccommodation.co.za smtp.namibiaaccommodation.co.za namibiaaccommodation.co.za pop.newyorkaccommodation.co.za smtp.newyorkaccommodation.co.za newyorkaccommodation.co.za www.newyorkaccommodation.co.za pop.portstjohnsaccommodation.co.za smtp.portstjohnsaccommodation.co.za www.portstjohnsaccommodation.co.za portstjohnsaccommodation.co.za smtp.rustenburgaccommodation.co.za rustenburgaccommodation.co.za www.rustenburgaccommodation.co.za pop.rustenburgaccommodation.co.za smtp.aliwalnorthaccommodation.co.za pop.aliwalnorthaccommodation.co.za aliwalnorthaccommodation.co.za www.aliwalnorthaccommodation.co.za smtp.wellness-retreats.co.za www.wellness-retreats.co.za wellness-retreats.co.za pop.wellness-retreats.co.za smtp.retreatssouthafrica.co.za www.retreatssouthafrica.co.za pop.retreatssouthafrica.co.za retreatssouthafrica.co.za pop.donnebandey.com www.donnebandey.com smtp.donnebandey.com sutherlandaccommodation.co.za pop.sutherlandaccommodation.co.za www.sutherlandaccommodation.co.za smtp.sutherlandaccommodation.co.za smtp.potchefstroomaccommodation.co.za pop.potchefstroomaccommodation.co.za www.potchefstroomaccommodation.co.za potchefstroomaccommodation.co.za smtp.uvcsa.co.za pop.uvcsa.co.za uvcsa.co.za www.uvcsa.co.za pop.sachapark.com smtp.sachapark.com smtp.m.fluidsa.co.za pop.m.fluidsa.co.za m.fluidsa.co.za www.m.fluidsa.co.za smtp.thequays-sfb.co.za pop.thequays-sfb.co.za pop.illume8.com www.illume8.com smtp.illume8.com illume8.com pop.zamboula.love smtp.zamboula.love zamboula.love www.zamboula.love www.agent.donnebandey.co.za smtp.agent.donnebandey.co.za pop.agent.donnebandey.co.za agent.donnebandey.co.za smtp.donnebandey.co.za pop.donnebandey.co.za www.donnebandey.co.za donnebandey.co.za datascopewms.com www.datascopewms.com stfrancisbayflooring.co.za www.stfrancisbayflooring.co.za pop.stfrancisbayflooring.co.za smtp.stfrancisbayflooring.co.za stfrancisbaycanals.com pop.stfrancisbaycanals.com smtp.stfrancisbaycanals.com www.stfrancisbaycanals.com pop.sexloveandtheboardroom.co.za smtp.sexloveandtheboardroom.co.za www.sexloveandtheboardroom.co.za sexloveandtheboardroom.co.za smtp.synergysolar.co.za synergysolar.co.za pop.synergysolar.co.za www.synergysolar.co.za smtp.tokoloshesafaris.info www.tokoloshesafaris.info pop.tokoloshesafaris.info pop.datascopesupport.com www.datascopesupport.com smtp.datascopesupport.com pop.growupshop.co.za www.growupshop.co.za smtp.growupshop.co.za growupshop.co.za pop.drakensbergaccommodation.co.za smtp.drakensbergaccommodation.co.za www.drakensbergaccommodation.co.za drakensbergaccommodation.co.za donnebandey.com simonstownaccommodation.co.za smtp.simonstownaccommodation.co.za pop.simonstownaccommodation.co.za www.simonstownaccommodation.co.za pop.welcome-home.co.za smtp.welcome-home.co.za www.welcome-home.co.za welcome-home.co.za pop.bloubergaccommodation.co.za smtp.bloubergaccommodation.co.za www.bloubergaccommodation.co.za bloubergaccommodation.co.za www.funkytown.co.za funkytown.co.za pop.funkytown.co.za smtp.funkytown.co.za smtp.marinamartinique.co.za marinamartinique.co.za pop.marinamartinique.co.za www.marinamartinique.co.za smtp.casamano.co.za pop.casamano.co.za casamano.co.za www.casamano.co.za www.datascopewms.co.za smtp.datascopewms.co.za pop.datascopewms.co.za datascopewms.co.za uvcsa.com smtp.uvcsa.com pop.uvcsa.com www.uvcsa.com tokoloshesafaris.info datascope.co.za smtp.datascope.co.za www.datascope.co.za pop.datascope.co.za datascopesupport.com smtp.casamalcampo.com pop.casamalcampo.com casamalcampo.com www.casamalcampo.com pop.datascopedsp.com www.datascopedsp.com smtp.datascopedsp.com datascopedsp.com pop.port-stfrancis.co.za www.port-stfrancis.co.za port-stfrancis.co.za smtp.port-stfrancis.co.za pop.kougabusinessforum.co.za smtp.kougabusinessforum.co.za www.kougabusinessforum.co.za kougabusinessforum.co.za kougabusinessforum.com www.kougabusinessforum.com smtp.kougabusinessforum.com pop.kougabusinessforum.com pop.jbaynews.co.za jbaynews.co.za smtp.jbaynews.co.za www.jbaynews.co.za pop.vastvat.co.za smtp.vastvat.co.za www.vastvat.co.za vastvat.co.za pop.carocreative.co.za smtp.carocreative.co.za carocreative.co.za www.carocreative.co.za pop.wineonwater.co.za smtp.wineonwater.co.za www.wineonwater.co.za wineonwater.co.za pop.adamandevecasting.co.za www.adamandevecasting.co.za adamandevecasting.co.za smtp.adamandevecasting.co.za pop.thevale.co.za smtp.thevale.co.za thevale.co.za www.thevale.co.za smtp.stfrancisbayarchitecture.co.za www.stfrancisbayarchitecture.co.za stfrancisbayarchitecture.co.za pop.stfrancisbayarchitecture.co.za smtp.katalys.co.za katalys.co.za pop.katalys.co.za www.katalys.co.za pop.dna788.dnaonline.co.za smtp.dna788.dnaonline.co.za www.dna788.dnaonline.co.za dna788.dnaonline.co.za www.dna612.dnaonline.co.za pop.dna612.dnaonline.co.za dna612.dnaonline.co.za smtp.dna612.dnaonline.co.za dna813.dnaonline.co.za smtp.dna813.dnaonline.co.za www.dna813.dnaonline.co.za pop.dna813.dnaonline.co.za www.dna530.dnaonline.co.za dna530.dnaonline.co.za pop.dna530.dnaonline.co.za smtp.dna530.dnaonline.co.za smtp.dna487.dnaonline.co.za pop.dna487.dnaonline.co.za www.dna487.dnaonline.co.za dna487.dnaonline.co.za pop.dna371.dnaonline.co.za dna371.dnaonline.co.za smtp.dna371.dnaonline.co.za www.dna371.dnaonline.co.za pop.dna288.dnaonline.co.za smtp.dna288.dnaonline.co.za www.dna288.dnaonline.co.za dna288.dnaonline.co.za smtp.dna138.dnaonline.co.za www.dna138.dnaonline.co.za pop.dna138.dnaonline.co.za dna138.dnaonline.co.za pop.iimgltdthailand.com iimgltdthailand.com smtp.iimgltdthailand.com www.iimgltdthailand.com enerobes.com www.enerobes.com www.thequays-sfb.co.za thequays-sfb.co.za www.workoutandwine.co.za workoutandwine.co.za smtp.rencokouga.co.za pop.rencokouga.co.za rencokouga.co.za www.rencokouga.co.za stfrancisbaymassage.co.za www.stfrancisbaymassage.co.za smtp.stfrancisbaymassage.co.za pop.stfrancisbaymassage.co.za pop.crossthelineinteriors.co.za www.crossthelineinteriors.co.za crossthelineinteriors.co.za smtp.crossthelineinteriors.co.za pop.jbaysurffest.co.za jbaysurffest.co.za smtp.jbaysurffest.co.za www.jbaysurffest.co.za pop.jbaysurffest.com jbaysurffest.com smtp.jbaysurffest.com www.jbaysurffest.com www.hibberdeneaccommodation.co.za pop.hibberdeneaccommodation.co.za smtp.hibberdeneaccommodation.co.za hibberdeneaccommodation.co.za www.cwmalan.co.za cwmalan.co.za www.elicahighschool.co.za smtp.elicahighschool.co.za elicahighschool.co.za pop.elicahighschool.co.za smtp.uvmedico.co.za uvmedico.co.za www.uvmedico.co.za pop.uvmedico.co.za www.uvmedicoafrica.co.za uvmedicoafrica.co.za pop.uvmedicoafrica.co.za smtp.uvmedicoafrica.co.za pop.stfrancisanimalrescue.org smtp.stfrancisanimalrescue.org stfrancisanimalrescue.org www.stfrancisanimalrescue.org pop.news.stfrancistoday.com smtp.news.stfrancistoday.com news.stfrancistoday.com www.news.stfrancistoday.com smtp.stfrancistoday.com stfrancistoday.com www.stfrancistoday.com pop.stfrancistoday.com smtp.bizafricasolutions.co.za www.bizafricasolutions.co.za bizafricasolutions.co.za pop.bizafricasolutions.co.za pop.stfrancispropertyowners.co.za smtp.stfrancispropertyowners.co.za smtp.uvmedicoafrica.com pop.uvmedicoafrica.com www.uvmedicoafrica.com uvmedicoafrica.com www.4handholistic.com pop.4handholistic.com smtp.4handholistic.com pop.abeconsultants.co.za smtp.abeconsultants.co.za www.abeconsultants.co.za abeconsultants.co.za pop.dna717.dnaonline.co.za smtp.dna717.dnaonline.co.za www.stluciaaccommodation.co.za pop.stluciaaccommodation.co.za stluciaaccommodation.co.za smtp.stluciaaccommodation.co.za smtp.darlingaccommodation.co.za pop.darlingaccommodation.co.za darlingaccommodation.co.za www.darlingaccommodation.co.za smtp.overbergcarpetcleaners.co.za pop.overbergcarpetcleaners.co.za smtp.westcoastcarpetcleaners.co.za pop.westcoastcarpetcleaners.co.za pop.boksburgcarpetcleaners.co.za smtp.boksburgcarpetcleaners.co.za smtp.margatecarpetcleaners.co.za pop.margatecarpetcleaners.co.za 4handholistic.com www.abemedical.co.za abemedical.co.za smtp.deoudemanbakkery.co.za deoudemanbakkery.co.za pop.deoudemanbakkery.co.za www.deoudemanbakkery.co.za smtp.jdiworks.co.za pop.jdiworks.co.za jdiworks.co.za www.jdiworks.co.za pop.healthwisejbay.co.za healthwisejbay.co.za www.healthwisejbay.co.za smtp.healthwisejbay.co.za pop.canalguesthouse.com www.canalguesthouse.com canalguesthouse.com smtp.canalguesthouse.com smtp.lydenburgaccommodation.co.za www.lydenburgaccommodation.co.za lydenburgaccommodation.co.za pop.lydenburgaccommodation.co.za smtp.mcgregoraccommodation.co.za www.mcgregoraccommodation.co.za pop.mcgregoraccommodation.co.za mcgregoraccommodation.co.za pop.saltrockaccommodation.co.za smtp.saltrockaccommodation.co.za www.saltrockaccommodation.co.za smtp.chemdryrichardsbay.co.za pop.chemdryrichardsbay.co.za pop.chemdrytygerberg.co.za smtp.chemdrytygerberg.co.za smtp.members.marinamartiniquehoa.co.za pop.members.marinamartiniquehoa.co.za smtp.sodwanabayaccommodation.co.za pop.sodwanabayaccommodation.co.za smtp.bayviewboating.co.za pop.bayviewboating.co.za smtp.bluewhaletax.co.za pop.bluewhaletax.co.za pop.pietermaritzburgcarpetcleaners.co.za smtp.pietermaritzburgcarpetcleaners.co.za pop.m.pilanesbergaccommodation.co.za smtp.m.pilanesbergaccommodation.co.za pop.fourwayscarpetcleaners.co.za smtp.fourwayscarpetcleaners.co.za pop.chemdrybloemfontein.co.za smtp.chemdrybloemfontein.co.za pop.bornhunt.co.za smtp.bornhunt.co.za pop.chemdrykemptonpark.co.za smtp.chemdrykemptonpark.co.za pop.toffeeapparel.co.za www.toffeeapparel.co.za smtp.toffeeapparel.co.za toffeeapparel.co.za cargocorp.co.za smtp.cargocorp.co.za www.cargocorp.co.za pop.cargocorp.co.za bluview.co.za www.bluview.co.za smtp.reports.chemdry.co.za reports.chemdry.co.za pop.reports.chemdry.co.za www.reports.chemdry.co.za smtp.4uvisas.co.za pop.4uvisas.co.za pop.baycoveinn.co.za smtp.baycoveinn.co.za www.baycoveinn.co.za baycoveinn.co.za harkervilleaccommodation.co.za smtp.harkervilleaccommodation.co.za www.harkervilleaccommodation.co.za pop.harkervilleaccommodation.co.za

Malware Detected on Host

Count: 1 7dc3529ca659c142a9924c422b6002de8d75de3efee11aa6500ef03b39f1c6c9

Open Ports Detected

21 22 2222 443 80

Map

Whois Information

• inetnum: 197.221.12.0 - 197.221.15.255
• netname: xneelo-managed-ssl-cpt3
• descr: xneeloner Managed/SSL subnet
• country: ZA
• admin-c: HIA1-AFRINIC
• tech-c: HIA1-AFRINIC
• status: ASSIGNED PA
• mnt-by: HA-ZA
• parent: 197.221.0.0 - 197.221.63.255
• role: Hetzner IP Admin
• address: Belvedere Office Park, Unit F
• address: Bella Rosa Street
• address: Durbanville
• address: 7550
• address: Cape Town
• address: South Africa
• phone: tel:+27-21-970-2000
• fax-no: tel:+27-21-970-2001
• org: ORG-HC1-AFRINIC
• admin-c: WK-AFRINIC
• admin-c: HVA1-AFRINIC
• admin-c: AF45-AFRINIC
• tech-c: WK-AFRINIC
• tech-c: HVA1-AFRINIC
• tech-c: AF45-AFRINIC
• nic-hdl: HIA1-AFRINIC
• mnt-by: HA-ZA
• route: 197.221.0.0/18
• descr: xneelo-CPT-BLK
• origin: AS37153
• mnt-by: HA-ZA

Links to attack logs

****** ****** ******