61.29.96.146 Threat Intelligence and Host Information

Apr 28, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 61.29.96.146 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 50/100

Host and Network Information

Mitre ATT&CK IDs: T1498 - Network Denial of Service
Tags: attack ddos, botnet, Cyclops, ddos, Gamardeon, HermeticWiper, IsaacWiper, list ips, PartyTicket, proxy, russia, russian, ukraine, WhisperGate
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_net_ua, sslproxies_30d, sslproxies_7d

Country: Australia
Network:
Noticed: 10 times
Protocols Attacked: Anonymous Proxy
Countries Attacked: Russian Federation

Malware Detected on Host

Count: 6 c0c630adeeffeb7f68c0e7da370676dc30645559aed6bb9c1a1553197aebfd6f 61d237f5ac80c9b785c312579310d028fbd725d3c34a8f2740cded84139b53d8 f4c0e951ac66b09816f04c3e256ef94a78f8d1285448bb7c64d1f396f99e1201 751d03476f91b324fe70a33c76debd1d5e267cf69d4a54650ed7ee74b997d1ae cabea99fe725f2d39534d11574390a09a5d1ad1f60b0d320de5807d497d4ecbf c4b22c19290a6aedf877700f21d5d169a7b41513b15791db05e3642e495ed7f9

Map

Whois Information

inetnum: 61.29.96.144 - 61.29.96.147
netname: AAPTLimited
descr: AAPT Limited
country: AU
admin-c: ANO2-AP
tech-c: ANO2-AP
abuse-c: AA1416-AP
status: ASSIGNED NON-PORTABLE
mnt-by: MAINT-AU-AAPT
mnt-irt: IRT-AAPT-AU
last-modified: 2021-05-19T13:20:48Z
irt: IRT-AAPT-AU
address: AAPT Limited
address: 30 Ross St
address: Glebe NSW 2037
phone: +61282644660
e-mail: ipnoc@aapt.com.au
abuse-mailbox: abuse1@aapt.com.au
admin-c: ANO2-AP
tech-c: ANO2-AP
notify: routing.shared@aapt.com.au
mnt-by: MAINT-AU-AAPT
last-modified: 2025-04-10T02:47:36Z
role: ABUSE AAPTAU
country: ZZ
address: AAPT Limited
address: 30 Ross St
address: Glebe NSW 2037
phone: +61282644660
e-mail: ipnoc@aapt.com.au
admin-c: ANO2-AP
tech-c: ANO2-AP
nic-hdl: AA1416-AP
abuse-mailbox: abuse1@aapt.com.au
mnt-by: APNIC-ABUSE
last-modified: 2025-03-17T03:08:29Z
role: AAPT Network Operations
address: AAPT Limited
address: 30 Ross St
address: Glebe NSW 2037
country: AU
phone: +61282644660
e-mail: routing@aapt.com.au
admin-c: ANO1-AP
tech-c: ANO1-AP
nic-hdl: ANO2-AP
mnt-by: MAINT-AU-AAPT
last-modified: 2021-08-02T23:49:25Z

Links to attack logs

Share on: