IPMediumSignal 28/100
110.44.121.165
Location
NepalKathmandu, P3
ASN
AS45650
Vianet Communications Pvt. Ltd
First Seen
Feb 1, 2024
Last Seen
Apr 7, 2026
Found in 7 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
28%
Signal Score
28 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryNepal
NepalRegionKathmandu, P3
ASNAS45650
OrganizationVianet Communications Pvt. Ltd
Feed Intelligence Summary
7 reports28% confidence
7
Source reports
28%
Confidence score
Category tags
active scanactive scanningadbhoney honeypotasiaattackaustraliaauthentication attemptsbotnetbotnet activitybrute forcebrute force attackbrute force attacksbrute force attemptcisco devicecommand and controlcommunication protocolcompromised credentialsconpot honeypotcowrie honeypotcowrie interactionscredential accesscredential harvestingcredential stuffingdata exfiltrationdata store exposuredatabase attackdatabase attacksdatabase exploitation attemptdatabase securityddosdecoy systemdevice managementdionaea honeypotdionaea interactionsdionaea malware analysisdistributed attackselasticpot honeypotelasticsearch monitoringenterprise networkingexploitexploit attemptsexploitation activityexternal threatfattftpftp brute forceftp brute-forceheralding attack patternhoneytrap honeypothttp brute forcehttp scannerics securityidentity & access exploitationindicatorindustrial control systemsinitial accessinjection activityintrusion detectioniociot attacksiot device targetingiot securityiot/ics attackipphoney honeypotipv4lamplateral movementmailoney honeypotmalicious activitymalicious softwaremalwaremalware behaviourmalware capturemalware distributionnepalnetworknetwork enumerationnetwork infrastructurenetwork intrusionnetwork intrusion attemptsnetwork scanningnetwork securitynpoceaniap0fpassword attacksphishingphishing attackphishing trapprocess injectionprotocol exploitationpython script activityreconnaissanceredis honeypotremote accessremote loginremote servicesresearchedresource hijackingscannerscripting attackssensor-taggedsentrypeer botnetserver exploitationsftp attacksip brute forcesip scanningsmtp brute forcesocial engineeringspamsql injectionssh attackssh brute-forcessh monitoringt-pott1021t1021.001t1021.004t1040t1041t1046t1055t1059t1059.003t1059.007t1071.001t1078t1110t1110.001t1110.002t1110.003t1110.004t1190t1203t1204.002t1486t1496t1499.001t1499.002t1499.003t1505.002t1565t1566.001t1566.002t1566.003t1566.004t1588.004t1595t1595.001t1595.002t1595.003tannertargeting databasetelecommunicationstelnet threatthreat actorthreat detectionthreat intelligencetor nodetpotvnc protocolvoipvoip attackweb application attacksweb attackweb exploitationweb traffic
Activity Timeline
Apr 7Apr 7
Threat Activity Heatmap
· Peak: 2026-04-07LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Intelligence SummaryAI Generated
This Indicator of Compromise (IOC), an IPv4 address `110.44.121.165`, carries a significant risk score of 27.62, highlighting its potential malicious nature and warranting immediate attention. Its identification in various threat intelligence feeds, including honeypot data and SSH/Telnet attacker IP lists, strongly suggests its involvement in active reconnaissance, brute-force attempts, or other hostile network activities. An unaddressed interaction with this IP could lead to unauthorized access…
Threat ScoreLow Risk
28
SIGNAL
Signal Score
28%
Confidence
7
Reports
First seenFeb 1, 2024
Last seenApr 7, 2026
GeolocationNP
CountryNepal
LocationKathmandu, P3
ASNAS45650
OrgVianet Communications Pvt. Ltd
Coords27.7142, 85.3145
VirusTotal
Not checked
WHOIS
- description
- 2025-04-28T16:48:32.020Z Honeypot : Heralding : Source: 110.44.121.165 : Username/Password: aDMin1/123123 Port: 1080 Message: 2025-04-28 16:48:32.020082,5a741899-8244-40e8-b43b-3693527f1904,11a4d52a-5544-4239-9adc-a74605c05b92,110.44.121.165,54019,99.18.26.18,1080,socks5,aDMin1,123123,
- raw
- inetnum: 110.44.112.0 - 110.44.127.255 netname: VIANET-NP descr: VIA NET COMMUNICATION LTD country: NP org: ORG-VCPL1-AP admin-c: VNCL1-AP tech-c: VNCL1-AP abuse-c: AV420-AP status: ALLOCATED PORTABLE remarks: Used for voip remarks: -------------------------------------------------------- remarks: To report network abuse, please contact mnt-irt remarks: For troubleshooting, please contact tech-c and admin-c remarks: Report invalid contact via www.apnic.net/invalidcontact remarks: -------------------------------------------------------- mnt-by: APNIC-HM mnt-lower: MAINT-VIANET-NP mnt-routes: MAINT-VIANET-NP mnt-irt: IRT-VIANET-NP last-modified: 2024-12-10T03:47:07Z source: APNIC irt: IRT-VIANET-NP address: Jawalakhel Lalitpur Nepal e-mail: [email protected] abuse-mailbox: [email protected] admin-c: OM531-AP tech-c: OM531-AP auth: # Filtered remarks: [email protected] was validated on 2025-05-23 mnt-by: MAINT-VIANET-NP last-modified: 2025-09-04T05:35:28Z source: APNIC organisation: ORG-VCPL1-AP org-name: VIA NET COMMUNICATION PUBLIC LIMITED org-type: LIR country: NP address: Jawalakhel phone: +977-01-5970444 fax-no: +97715537318 e-mail: [email protected] mnt-ref: APNIC-HM mnt-by: APNIC-HM last-modified: 2024-12-10T12:55:18Z source: APNIC role: ABUSE VIANETNP country: ZZ address: Jawalakhel Lalitpur Nepal phone: +000000000 e-mail: [email protected] admin-c: OM531-AP tech-c: OM531-AP nic-hdl: AV420-AP remarks: Generated from irt object IRT-VIANET-NP remarks: [email protected] was validated on 2025-05-23 abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2025-05-23T06:08:31Z source: APNIC role: VIA NET COMMUNICATION LTD ADMIN address: Jawalakhel, Lalitpur country: NP phone: +977-1-5546410 e-mail: [email protected] admin-c: VNCL1-AP tech-c: VNCL1-AP nic-hdl: VNCL1-AP notify: [email protected] mnt-by: MAINT-VIANET-NP last-modified: 2024-12-10T03:46:38Z source: APNIC route: 110.44.121.0/24 descr: Vianet Communications Pvt. Ltd, Nepal origin: AS45650 mnt-by: MAINT-VIANET-NP last-modified: 2020-01-31T07:30:05Z source: APNIC
- references
- https://github.com/telekom-security/tpotce
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 2 years ago · Last seen 2 months ago
Appeared in 7 threat reports