175.45.178.0/24

==========

4/12/20 – 2 hosts online

==========
175.45.178.129

Port 22: Open
SSH-1.99-Cisco-1.25

175.45.178.140

Port 3389: Open

==========

3/28/20 – 1 host online

==========

175.45.178.129

22/tcp open ssh Cisco SSH 1.25 (protocol 1.99)
23/tcp open telnet Cisco IOS telnetd

 

==========

7/20/19 – 39 hosts online

==========

————————————————————
Please wait, scanning remote host 175.45.178.72
————————————————————
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:24.144597

————————————————————
Please wait, scanning remote host 175.45.178.73
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Port 123: Open
Port 8888: Open
Port 5900: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:04.538701

————————————————————
Please wait, scanning remote host 175.45.178.74
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Scanning Completed in: 0:00:22.174140
175.45.178.75
————————————————————
Please wait, scanning remote host 175.45.178.88
————————————————————
Port 123: Open
Port 8888: Open
Port 5900: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:10.411687

————————————————————
Please wait, scanning remote host 175.45.178.89
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Scanning Completed in: 0:00:22.155196

————————————————————
Please wait, scanning remote host 175.45.178.91
————————————————————
Port 5900: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Scanning Completed in: 0:00:21.629967

————————————————————
Please wait, scanning remote host 175.45.178.92
————————————————————
Port 123: Open
Port 8888: Open
Port 5900: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Scanning Completed in: 0:00:13.005653

————————————————————
Please wait, scanning remote host 175.45.178.93
————————————————————
Port 80: Open
Port 123: Open
Port 8888: Open
Port 5900: Open
Port 5800: Open
Scanning Completed in: 0:00:21.290611

————————————————————
Please wait, scanning remote host 175.45.178.96
————————————————————
Port 80: Open
Port 443: Open
Port 123: Open
Port 8888: Open
Port 5900: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:07.920539

————————————————————
Please wait, scanning remote host 175.45.178.97
————————————————————
Port 8080: Open
Port 80: Open
Scanning Completed in: 0:00:24.246140

————————————————————
Please wait, scanning remote host 175.45.178.116
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Port 123: Open
Port 8888: Open
Port 5900: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:04.510218

————————————————————
Please wait, scanning remote host 175.45.178.117
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Scanning Completed in: 0:00:22.163512

————————————————————
Please wait, scanning remote host 175.45.178.119
————————————————————
Port 80: Open
Port 443: Open
Port 123: Open
Port 8888: Open
Port 5900: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:12.413410

————————————————————
Please wait, scanning remote host 175.45.178.120
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Port 123: Open
Port 8888: Open
Port 5900: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:04.508842

————————————————————
Please wait, scanning remote host 175.45.178.121
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Port 123: Open
Port 8888: Open
Port 5900: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:04.507006

————————————————————
Please wait, scanning remote host 175.45.178.122
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Port 123: Open
Port 8888: Open
Port 5900: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:04.514210

————————————————————
Please wait, scanning remote host 175.45.178.123
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Port 123: Open
Port 8888: Open
Port 5900: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:04.501999

————————————————————
Please wait, scanning remote host 175.45.178.124
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Port 123: Open
Port 8888: Open
Port 5900: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:04.505099

————————————————————
Please wait, scanning remote host 175.45.178.125
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Scanning Completed in: 0:00:22.157732

————————————————————
Please wait, scanning remote host 175.45.178.131
————————————————————
Port 80: Open
Port 443: Open
Scanning Completed in: 0:00:24.714336

————————————————————
Please wait, scanning remote host 175.45.178.178
————————————————————
Port 5900: Open
Port 5800: Open
Port 111: Open
Scanning Completed in: 0:00:07.495778

————————————————————
Please wait, scanning remote host 175.45.178.219
————————————————————
Port 123: Open
Port 8888: Open
Port 5900: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:10.402875

————————————————————
Please wait, scanning remote host 175.45.178.220
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Port 5900: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:08.996948

————————————————————
Please wait, scanning remote host 175.45.178.221
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Scanning Completed in: 0:00:22.160165
175.45.178.222

————————————————————
Please wait, scanning remote host 175.45.178.223
————————————————————
Port 8888: Open
Port 5900: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:15.727290

————————————————————
Please wait, scanning remote host 175.45.178.224
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Port 123: Open
Port 8888: Open
Port 5900: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:04.528761

————————————————————
Please wait, scanning remote host 175.45.178.225
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Scanning Completed in: 0:00:22.160902

————————————————————
Please wait, scanning remote host 175.45.178.226
————————————————————
Port 123: Open
Port 8888: Open
Port 5900: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Scanning Completed in: 0:00:21.756595

————————————————————
Please wait, scanning remote host 175.45.178.227
————————————————————
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:18.228467

————————————————————
Please wait, scanning remote host 175.45.178.228
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Port 123: Open
Port 8888: Open
Port 5900: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:04.510150

————————————————————
Please wait, scanning remote host 175.45.178.229
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:11.418520

————————————————————
Please wait, scanning remote host 175.45.178.230
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Scanning Completed in: 0:00:22.176155

————————————————————
Please wait, scanning remote host 175.45.178.232
————————————————————
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:18.233084

————————————————————
Please wait, scanning remote host 175.45.178.233
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Port 123: Open
Port 8888: Open
Port 5900: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:04.513501

————————————————————
Please wait, scanning remote host 175.45.178.234
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Scanning Completed in: 0:00:22.158111

————————————————————
Please wait, scanning remote host 175.45.178.235
————————————————————
Port 23: Open
Port 7200: Open
Scanning Completed in: 0:00:26.249282

————————————————————
Please wait, scanning remote host 175.45.178.236
————————————————————
Port 80: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Port 23: Open
Port 7200: Open
Port 4949: Open
Scanning Completed in: 0:00:15.776054

————————————————————
Please wait, scanning remote host 175.45.178.237
————————————————————
Port 8080: Open
Port 80: Open
Port 443: Open
Port 123: Open
Port 8888: Open
Port 5900: Open
Port 5800: Open
Port 111: Open
Port 22: Open
Port 23: Open
Scanning Completed in: 0:00:09.996545

 

  • 175.45.178.188
  • 175.45.178.185
  • 175.45.178.180
  • 175.45.178.181
  • 175.45.178.187
  • 175.45.178.179
  • 175.45.178.186
  • 175.45.178.182
  • 175.45.178.184
  • 175.45.178.183

Default Apache Red Hat Page

Open ports for each host:

PORT     STATE    SERVICE
22/tcp   open     ssh
80/tcp   open     http
135/tcp  filtered msrpc
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
593/tcp  filtered http-rpc-epmap
3306/tcp open     mysql
4444/tcp filtered krb524
6000/tcp open     X11

The banner reported for them as well shows as Red Hat, as opposed to Red Star Linux, which show up in some of the other hosts scanned: Apache/2.2.15 (Red Hat)

175.45.178.142

  1. OS Identifications: Cisco 831 switch or 1760 router (IOS 12.4)
  2. SSH Banner: SSH-1.99-Cisco-1.25

175.45.178.178

is is one that I always keep coming back to whenever it appears online. It looks like it is a North Korean security tool of some kind. The only information that I’ve been able to gather is in the following:

# wget –no-check-certificate https://175.45.178.178
–2015-07-05 01:10:06–  https://175.45.178.178/
Connecting to 175.45.178.178:443… connected.
WARNING: cannot verify 175.45.178.178’s certificate, issued by “/C=XX/ST=XX/L=XX/O=NeoTech/OU=Secure Team/CN=NetRadar/emailAddress=nsd@neotech.com”:
Self-signed certificate encountered.
WARNING: certificate common name “NetRadar” doesn’t match requested host name “175.45.178.178”.
HTTP request sent, awaiting response… 200 OK

securitysite_nk

175.45.178.102

URL: http://www.chosunexpo.com/expo_en/

Website of a software development company founded in 2002. Focuses on mobile and web apps, games, and applications.

 

175.45.178.131

This is another one that is a little strange. Ports 80 and 443 are open, but it only seems like they are open during the late hours. Also found that port 10000 is open.

Leave a comment