103.21.58.16 Threat Intelligence and Host Information

May 04, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 103.21.58.16 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 52/100

Host and Network Information

  • Mitre ATT&CK IDs: T1021.001 - Remote Desktop Protocol, T1110 - Brute Force, T1184 - SSH Hijacking, T1192 - Spearphishing Link, T1194 - Spearphishing via Service, T1442 - Fake Developer Accounts, T1454 - Malicious SMS Message, T1566 - Phishing, T1583.001 - Domains, T1583.006 - Web Services, T1585.001 - Social Media Accounts, T1586 - Compromise Accounts, T1591.002 - Business Relationships

  • Tags: anydesk, as15169 as16509, as19871 as22612, as9002, business email compromise, c2, caas, fraud, hosting, identifying, parked domains, scams, ssh hijacking, typosquatting

  • JARM: 29d29d15d29d29d00042d42d0000009435214b849738c4ebab4534b5d158dd

  • View other sources: Spamhaus VirusTotal

Malware Detected on Host

Count: 8 3847bdecc3ff8d209ac4b8cc5a7e3d9650fa30cc2d3d728d37a359f38c951533 07119d5662adfa02f89fd38a9d6dcf00cc43d6f15b69b04aa3c36f83cbe1cab6 d015007262a063f29c24275bbb887ed6f2b298e52fd011f944152c7246da6705 495467db13f9a313568a92668f90dbdf81b27d44833285a7b8cc5f1584ae79b6 fdd736e40a5a51e56c45b86aa2f8ce729c6afea4cd9f8528427f7398e0663ae5 2b2fb8b5c169939ee588ef65ef69981b198a01c4be580b0e44d3b8ea165a6bf9 cff26a5cc6691200707057f69948d1425e7a1c7d97a8dc396e0829d6836cc3eb 83591361c770d4326f89bcb022cc86258244e2d8d820e7e6a03a7ff037237e85

Map

Whois Information

  • inetnum: 103.21.58.0 - 103.21.58.255
  • netname: PDRSOLUTIONSFZC-AP
  • descr: P.D.R Solutions FZC
  • country: IN
  • geoloc: 19.1140343 72.8921789
  • admin-c: PSFA1-AP
  • tech-c: PSFA1-AP
  • abuse-c: AI346-AP
  • status: ALLOCATED NON-PORTABLE
  • mnt-by: MAINT-IN-AP
  • mnt-irt: IRT-IN-GPX
  • last-modified: 2021-01-06T13:12:21Z
  • irt: IRT-IN-GPX
  • address: GPX India. Unit A-001 Boomerang Chandivali Farm Road Andheri East, Mumbai 400072, India
  • e-mail: ipadmin@publicdomainregistry.com
  • abuse-mailbox: abuse@publicdomainregistry.com
  • admin-c: PSFA1-AP
  • tech-c: PSFA1-AP
  • mnt-by: MAINT-IN-AP
  • last-modified: 2025-04-30T13:05:47Z
  • role: ABUSE INGPX
  • country: ZZ
  • address: GPX India. Unit A-001 Boomerang Chandivali Farm Road Andheri East, Mumbai 400072, India
  • phone: +000000000
  • e-mail: ipadmin@publicdomainregistry.com
  • admin-c: PSFA1-AP
  • tech-c: PSFA1-AP
  • nic-hdl: AI346-AP
  • abuse-mailbox: abuse@publicdomainregistry.com
  • mnt-by: APNIC-ABUSE
  • last-modified: 2025-04-30T13:05:47Z
  • role: PDR Solutions FZC administrator
  • address: P.D.R Solutions FZC,, F-20, Business Center 1,, Business Park, RAK Free Trade Zone, Ras Al Khaimah
  • country: AE
  • phone: +14152300648
  • fax-no: +14152300648
  • e-mail: abuse@publicdomainregistry.com
  • admin-c: PSFA1-AP
  • tech-c: PSFA1-AP
  • nic-hdl: PSFA1-AP
  • mnt-by: MAINT-PDRSOLUTIONSFZC-AP
  • last-modified: 2017-03-08T17:17:21Z

Links to attack logs

****** ****** ******

Share on: