202.79.172.29 Threat Intelligence and Host Information

Share on:

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Potentially Malicious Host 🟡 37/100

Host and Network Information

  • Tags: Nextray, as135377ucloud, australia, brazil, cambodia, canada, china, cowrie, cyber security, fail2ban, france, germany, group, india, ioc, italy, japan, kazakhstan, korea, malicious, mexico, phishing, poland, sensor2, singapore, site2, spain, ssh, ssh bruteforce, taiwan, tsec
  • View other sources: Spamhaus VirusTotal

  • Country: Singapore
  • Network: AS64050 bgpnet global asn
  • Noticed: 15 times
  • Protcols Attacked: SSH
  • Countries Attacked: Australia, Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: e169izsmchat.9prbb5.com.cn f093garechat.8z30ta.com dgg03.s8e0t0.com dgg01.s8e0t0.com dgg06.s8e0t0.com dgg04.s8e0t0.com dgg05.s8e0t0.com b147x8u.wzxun9h.com f093garechat.l6dwmo.biz 9ce068pvchat.7chuangdzsw.com c111gfds.alrq9b.xyz c111gfds.a61mfi.com h003ifdschat.wttin62c.xyz f092heinchat.csulln7p.cn f095cdechat.fx1x6k.cc f09167xchat.r6l3v5wp.com.cn loe1082mchatsoap.51krtm.com lfe138rjchat.fx1x6k.com.cn c110axion.m4j1lx.com f093garechat.fx1x6k.cc f092heinchat.fx1x6k.cc b9778.com yminght.com djcf188.com www.bcdd518.com

Open Ports Detected

2181 3306 5985 61613 61616 81 8888

Map

Whois Information

  • inetnum: 202.79.168.0 - 202.79.175.255
  • netname: CTG79-168-KR
  • descr: CTG Server Ltd.
  • country: KR
  • admin-c: RCPL3-AP
  • tech-c: RCPL3-AP
  • abuse-c: AC2487-AP
  • status: ALLOCATED NON-PORTABLE
  • mnt-by: MAINT-RCPL-SG
  • mnt-irt: IRT-CTG-HK
  • last-modified: 2022-03-30T17:10:01Z
  • irt: IRT-CTG-HK
  • address: 202 ,2/F Kam Sang BLDG 257,Des Voeux RD Central Hong Kong
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: RCPL3-AP
  • tech-c: RCPL3-AP
  • mnt-by: MAINT-RCPL-SG
  • last-modified: 2022-10-18T07:21:10Z
  • role: ABUSE CTGHK
  • address: 202 ,2/F Kam Sang BLDG 257,Des Voeux RD Central Hong Kong
  • country: ZZ
  • phone: +000000000
  • e-mail: [email protected]
  • admin-c: RCPL3-AP
  • tech-c: RCPL3-AP
  • nic-hdl: AC2487-AP
  • abuse-mailbox: [email protected]
  • mnt-by: APNIC-ABUSE
  • last-modified: 2022-10-18T07:21:36Z
  • role: RACKIP CONSULTANCY PTE LTD administrator
  • address: 399 Chai Wan Road, Chai Wan, Hong Kong
  • country: SG
  • phone: +603-7806-1316
  • fax-no: +603-7806-1316
  • e-mail: [email protected]
  • admin-c: RCPL3-AP
  • tech-c: RCPL3-AP
  • nic-hdl: RCPL3-AP
  • mnt-by: MAINT-RCPL-SG
  • last-modified: 2021-08-30T06:13:42Z
  • route: 202.79.172.0/24
  • origin: AS64050
  • descr: RACKIP CONSULTANCY PTE. LTD.
  • mnt-by: MAINT-RCPL-SG
  • last-modified: 2020-05-20T05:25:51Z

Links to attack logs

bruteforce-ip-list-2020-04-19 bruteforce-ip-list-2020-04-18