2.177.127.42
Classification: Malicious
2.177.127.42 is a malicious IP address in Tehran, IR. 4 sightings from Barracuda and Rapid7 Open Data (Mail Spammer, NTP Open Resolver), last seen 2026-10-17.
Current activity
- Known attacker — Seen launching attacks over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2019-04-15 19:39:55 | 2026-10-17 19:37:29 | attacker malicious-activity | |
| NTP Open Resolver | Rapid7 Open Data | 2019-03-04 05:36:01 | 2019-03-04 05:36:01 |
Tags
ntp reflection amplification open resolver monlistWhois information
- AS name
- AS58224 Telecommunication Company of Tehran tct
- AS registry
- ripencc
- AS date
- 2010-10-18 00:00:00
- AS CIDR
- 2.177.0.0/16
- Registrant
- Telecommunication Company of Tehran tct
- City
- Tehran
- Postal code
- 1145933187
- Country
- IR — Iran, Islamic Republic of 🇮🇷
- First indexed
- 2019-03-04 05:36:01
- Last updated
- 2026-10-17 19:37:29
Malicious IPs in the same CIDR
2.177.250.32 2.177.155.30 2.177.234.21 2.177.129.20 2.177.214.94 2.177.250.95 2.177.195.38 2.177.127.42 2.177.181.95 2.177.116.81 2.177.245.33 2.177.172.23 2.177.93.25