203.205.49.2

Classification: Malicious

203.205.49.2 is a malicious IP address in Hanoi, VN. 48 sightings from 3 threat sources (VPN geonode, Proxy), last seen 2026-11-06. Seen in 4 countries.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Open proxy — Provides anonymization that can hide an attacker.

Where it has been seen

Observed by Maltiverse Threat Observatory sensors in AR, BR, CH and SA, across education and technology networks.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
VPN geonode Maltiverse Threat Observatory 2026-09-19 09:42:59 2026-11-06 09:43:04 anonymization country_code:ar country_code:br country_code:ch country_code:sa industry:education-and-nonprofits industry:technology-and-telecommunications malicious-activity
Proxy IPWhois.io 2026-09-20 00:30:22 2026-09-20 00:30:22 anonymization proxy
Mail Spammer Barracuda 2026-09-20 00:30:22 2026-09-20 00:30:22 attacker malicious-activity

Tags

port:10019 port:10156 port:10110 port:10000 port:10009 port:10076 port:10027 port:10091 port:10030 port:10039 port:10005 port:10124 port:10002 port:10017 port:10014 port:10163 port:10111 port:10001 port:10120 port:10013 port:10023 port:10029 port:10010 port:10007 port:10008 port:10011 port:10004 port:10003 port:10006 port:10128 port:10038

Whois information

AS name
AS45903 CMC Telecom Infrastructure Company
Registrant
CMC Telecom Infrastructure Company
City
Hanoi
Country
VN — Viet Nam 🇻🇳
First indexed
2026-09-20 00:30:22
Last updated
2026-11-07 05:35:35