IPMediumSignal 91/100
110.44.116.57
Location
NepalKathmandu, Bagmati Province
ASN
AS45650
Vianet Communications Pvt. Ltd
First Seen
Apr 20, 2024
Last Seen
Feb 4, 2026
Found in 7 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
91%
Signal Score
91 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryNepal
NepalRegionKathmandu, Bagmati Province
ASNAS45650
OrganizationVianet Communications Pvt. Ltd
Feed Intelligence Summary
7 reports91% confidence
7
Source reports
91%
Confidence score
Category tags
active scanningadbhoney honeypotasiaattackauthentication attemptbotnetbrute forcebrute force attackbrute_forcecommand and controlcommunication protocolcompromised credentialscowrie activitycowrie honeypotcredential accesscredential harvestingcredential stuffingdata exfiltrationdata exfiltration attemptsdatabase securitydecoy systemdionaea honeypotdionaea malware analysisdistributed attackselasticpot honeypotelasticsearch monitoringexploitation attemptexploitation attemptsftpftp_bruteforceheralding activityheralding attack patternheralding projecthttp scannerhttp_scanhttps_scanindicatorinfrastructure acquisitionreconnaissancelateral movementmailoney honeypotmalicious activitymalicious softwaremalwaremalware behaviourmalware capturemalware deployment attemptsmanualnepalnetworknetwork probenetwork scanningnetwork securitynetwork service scanningnorth americanppassword attacksphishingphishing attackphishing trappossible botnet activityprocess injectionprotocol exploitationpython script activityreconnaissanceremote accessresearchedresource hijackingscannerscanning activitysentrypeer botnetsftp access attemptsftp attacksip brute forcesocial engineeringspamssh attackssh monitoringssh_bruteforcet1018t1021t1021.004t1040t1041t1046t1047t1055t1059t1059.004t1071.001t1078t1078.004t1110t1110.001t1110.002t1110.003t1110.004t1133t1190t1204.002t1486t1496t1499.001t1499.002t1499.003t1565t1566.001t1566.002t1566.003t1566.004t1583t1587.001t1589.002t1590.001t1595t1595.001t1595.002t1595.003tannertelecommunicationstelnet threattelnet_bruteforcethreat actorthreat intelligenceunauthorized access attemptunauthorized login attemptsunited statesvoipvoip attackweb traffic
Activity Timeline
Feb 4Feb 4
Threat Activity Heatmap
· Peak: 2026-02-04LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreHigh Risk
91
SIGNAL
Signal Score
91%
Confidence
7
Reports
First seenApr 20, 2024
Last seenFeb 4, 2026
GeolocationNP
CountryNepal
LocationKathmandu, Bagmati Province
ASNAS45650
OrgVianet Communications Pvt. Ltd
Coords28.0000, 84.0000
VirusTotal
Not checked
WHOIS
- description
- 2025-06-10T06:34:05.017Z Honeypot : Heralding : Source: 110.44.116.57 : Username/Password: PROXyUSER/123456 Port: 1080 Message: 2025-06-10 06:34:05.017976,b6046477-621a-44e2-983f-6351aa060181,ec8067a6-2128-45ac-8069-b6dbce8ef596,110.44.116.57,41820,99.18.26.19,1080,socks5,PROXyUSER,123456,
- raw
- inetnum: 110.44.112.0 - 110.44.127.255 netname: VIANET-NP descr: VIA NET COMMUNICATION LTD country: NP org: ORG-VCPL1-AP admin-c: VNCL1-AP tech-c: VNCL1-AP abuse-c: AV420-AP status: ALLOCATED PORTABLE remarks: Used for voip remarks: -------------------------------------------------------- remarks: To report network abuse, please contact mnt-irt remarks: For troubleshooting, please contact tech-c and admin-c remarks: Report invalid contact via www.apnic.net/invalidcontact remarks: -------------------------------------------------------- mnt-by: APNIC-HM mnt-lower: MAINT-VIANET-NP mnt-routes: MAINT-VIANET-NP mnt-irt: IRT-VIANET-NP last-modified: 2024-12-10T03:47:07Z source: APNIC irt: IRT-VIANET-NP address: Jawalakhel Lalitpur Nepal e-mail: [email protected] abuse-mailbox: [email protected] admin-c: OM531-AP tech-c: OM531-AP auth: # Filtered remarks: [email protected] was validated on 2025-05-23 mnt-by: MAINT-VIANET-NP last-modified: 2025-05-23T06:08:08Z source: APNIC organisation: ORG-VCPL1-AP org-name: VIA NET COMMUNICATION PUBLIC LIMITED org-type: LIR country: NP address: Jawalakhel phone: +977-01-5970444 fax-no: +97715537318 e-mail: [email protected] mnt-ref: APNIC-HM mnt-by: APNIC-HM last-modified: 2024-12-10T12:55:18Z source: APNIC role: ABUSE VIANETNP country: ZZ address: Jawalakhel Lalitpur Nepal phone: +000000000 e-mail: [email protected] admin-c: OM531-AP tech-c: OM531-AP nic-hdl: AV420-AP remarks: Generated from irt object IRT-VIANET-NP remarks: [email protected] was validated on 2025-05-23 abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2025-05-23T06:08:31Z source: APNIC role: VIA NET COMMUNICATION LTD ADMIN address: Jawalakhel, Lalitpur country: NP phone: +977-1-5546410 e-mail: [email protected] admin-c: VNCL1-AP tech-c: VNCL1-AP nic-hdl: VNCL1-AP notify: [email protected] mnt-by: MAINT-VIANET-NP last-modified: 2024-12-10T03:46:38Z source: APNIC route: 110.44.116.0/24 descr: Vianet Communications Pvt. Ltd, Nepal origin: AS45650 mnt-by: MAINT-VIANET-NP last-modified: 2020-01-31T07:29:00Z source: APNIC
- references
- https://github.com/telekom-security/tpotce
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 2 years ago · Last seen 4 months ago
Appeared in 7 threat reports