IPMediumSignal 46/100
179.61.240.181
Location
New ZealandAuckland, AUK
ASN
AS45671
Servers Australia Pty. Ltd
First Seen
Aug 12, 2024
Last Seen
Feb 23, 2026
Found in 10 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
46%
Signal Score
46 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryNew Zealand
New ZealandRegionAuckland, AUK
ASNAS45671
OrganizationServers Australia Pty. Ltd
IP Category
⊕
VPN
VPN exit node
Feed Intelligence Summary
10 reports46% confidence
10
Source reports
46%
Confidence score
Category tags
active scanningantispamattackbotnetbrute forcebrute force attackbrute force attemptbrute force attemptscommand and controlcredential accesscredential stuffingdata encryptiondata exfiltrationdatabase attackdenial of servicedionaea honeypotdistributed attackseuropefinlandfranceftpftp brute forcegermanyhackinghoneynet connecthoneytrap honeypothttp brute forcehttp scanninghttps scanninginformation technologyit infrastructurelamplamp stack attacklateral movementlog4jlogin attemptmalicious activitymalicious network activitymalicious softwaremalwaremalware behaviourmalware capturenetworknetwork enumerationnetwork intrusionnetwork protocolnetwork scanningnetwork securitynew zealandnorth americanzoceaniapassword attackpassword attackspolandpossible botnet activityprocess injectionprotocol exploitationproxyreconnaissanceremote accessremote servicesresearchedscannerscanning activityscripting attackssmb brute forcesmtp brute forcesoftware developmentspamssh attackt1021t1021.001t1021.002t1021.003t1021.004t1021.005t1040t1046t1055t1059t1059.001t1059.003t1059.004t1059.007t1068t1071.001t1076t1077t1078t1110t1110.001t1110.002t1110.003t1110.004t1133t1189t1190t1203t1204t1204.002t1486t1496t1499.001t1499.002t1499.003t1563t1565t1592t1595t1595.001t1595.002t1595.003tcp scantelnet threatthreat actorthreat detectionthreat intelligenceudp scanunauthorized access attemptunited statesvpnweb application attackweb attackweb exploitation
Activity Timeline
Feb 23Feb 23
Threat Activity Heatmap
· Peak: 2026-02-23LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreMedium Risk
46
SIGNAL
Signal Score
46%
Confidence
10
Reports
First seenAug 12, 2024
Last seenFeb 23, 2026
GeolocationNZ
CountryNew Zealand
LocationAuckland, AUK
ASNAS45671
OrgServers Australia Pty. Ltd
Coords-36.8506, 174.7679
VPN
VirusTotal
Not checked
WHOIS
- description
- 2025-07-01T00:04:56.000Z Honeypot : Honeytrap : Source: 179.61.240.181 : Port: 8030 Message: {'protocol': 'tcp', 'payload': {'data_hex': '12010026000000000000000000000000000000000000000000000000010000ff', 'md5_hash': '55683442429061f89dfcc787c7faa7dd', 'sha512_hash': 'e13754b28815cd4511f1139b93a660b2303aae2c50c89fa6cdf3f1ae53eead5dd3aacc3ca60dbd32a1d3ca650124b442bff64a29f710577e28283af5637e7761', 'length': 32}}
- raw
- inetnum: 179.0.0.0 - 179.255.255.255 netname: IANA-NETBLOCK-179 descr: This network range is not allocated to APNIC. descr: descr: If your whois search has returned this message, then you have descr: searched the APNIC whois database for an address that is descr: allocated by another Regional Internet Registry (RIR). descr: descr: Please search the other RIRs at whois.arin.net or whois.ripe.net descr: for more information about that range. country: AU admin-c: IANA1-AP tech-c: IANA1-AP remarks: For general info on spam complaints email [email protected]. remarks: For general info on hacking & abuse complaints email [email protected]. mnt-by: MAINT-APNIC-AP mnt-lower: MAINT-APNIC-AP status: ALLOCATED PORTABLE last-modified: 2008-09-04T06:51:29Z source: APNIC role: Internet Assigned Numbers Authority address: see http://www.iana.org. admin-c: IANA1-AP tech-c: IANA1-AP nic-hdl: IANA1-AP remarks: For more information on IANA services remarks: go to IANA web site at http://www.iana.org. mnt-by: MAINT-APNIC-AP last-modified: 2018-06-22T22:34:30Z source: APNIC
- references
- https://github.com/telekom-security/tpotce
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 3 months ago
Appeared in 10 threat reports