103.21.59.15 Threat Intelligence and Host Information

May 04, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 103.21.59.15 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 61/100

Host and Network Information

  • Mitre ATT&CK IDs: T1021.001 - Remote Desktop Protocol, T1110 - Brute Force, T1184 - SSH Hijacking, T1192 - Spearphishing Link, T1194 - Spearphishing via Service, T1442 - Fake Developer Accounts, T1454 - Malicious SMS Message, T1566 - Phishing, T1583.001 - Domains, T1583.006 - Web Services, T1585.001 - Social Media Accounts, T1586 - Compromise Accounts, T1591.002 - Business Relationships

  • Tags: anydesk, as15169 as16509, as19871 as22612, as9002, business email compromise, c2, caas, fraud, hosting, identifying, parked domains, scams, ssh hijacking, typosquatting

  • JARM: 29d29d15d29d29d00042d42d0000009435214b849738c4ebab4534b5d158dd

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: hphosts_emd, hphosts_fsa

Malware Detected on Host

Count: 10 c9b480a38247f4ca3df822310b446249ed6de50f5a56bac099dbffd5687abf2e 11871d0f99f4a458a131c1c1f88b09484d86feffabfe6a528778fed5e49a1a37 43625f5a7093211741120faf4c4c82d9457e820f8e9c379748ce1dc8fe5fec7a 91e74559b77adc78f8696d7668e9df6abeeade2ee536c1bf0f8dff6f7d9f7736 ac6a40cc61baccdcd01e0907c6fbc11f2fb787f75e82dd533f4bc142eb7ee289 7765091dd6b7df91b5443df474bda9e7f0192b6291a413842879f0a192f7be91 2eb56d46618b75f2cd45197602d9c8e8c2fe63fd61fe25780d11f5e13a45959f 8d15f9ddb59ef7e733d33a0ff57af7336b01c7f0dd0274ae593f4046f81002f6 b01dbf61dbf78835e7515751b162aaf46f802c398d6b783ee80568a747cae514 2fe801e6876ffdaab51920b15cd9765a30e2b92b1c7aa41028e780f8ac58fc2e

Map

Whois Information

  • inetnum: 103.21.59.0 - 103.21.59.255
  • netname: PDRSOLUTIONSFZC-AP
  • descr: P.D.R Solutions FZC
  • country: IN
  • geoloc: 19.1140343 72.8921789
  • admin-c: PSFA1-AP
  • tech-c: PSFA1-AP
  • abuse-c: AI346-AP
  • status: ALLOCATED NON-PORTABLE
  • mnt-by: MAINT-IN-AP
  • mnt-irt: IRT-IN-GPX
  • last-modified: 2021-01-06T13:12:21Z
  • irt: IRT-IN-GPX
  • address: GPX India. Unit A-001 Boomerang Chandivali Farm Road Andheri East, Mumbai 400072, India
  • e-mail: ipadmin@publicdomainregistry.com
  • abuse-mailbox: abuse@publicdomainregistry.com
  • admin-c: PSFA1-AP
  • tech-c: PSFA1-AP
  • mnt-by: MAINT-IN-AP
  • last-modified: 2025-04-30T13:05:47Z
  • role: ABUSE INGPX
  • country: ZZ
  • address: GPX India. Unit A-001 Boomerang Chandivali Farm Road Andheri East, Mumbai 400072, India
  • phone: +000000000
  • e-mail: ipadmin@publicdomainregistry.com
  • admin-c: PSFA1-AP
  • tech-c: PSFA1-AP
  • nic-hdl: AI346-AP
  • abuse-mailbox: abuse@publicdomainregistry.com
  • mnt-by: APNIC-ABUSE
  • last-modified: 2025-04-30T13:05:47Z
  • role: PDR Solutions FZC administrator
  • address: P.D.R Solutions FZC,, F-20, Business Center 1,, Business Park, RAK Free Trade Zone, Ras Al Khaimah
  • country: AE
  • phone: +14152300648
  • fax-no: +14152300648
  • e-mail: abuse@publicdomainregistry.com
  • admin-c: PSFA1-AP
  • tech-c: PSFA1-AP
  • nic-hdl: PSFA1-AP
  • mnt-by: MAINT-PDRSOLUTIONSFZC-AP
  • last-modified: 2017-03-08T17:17:21Z

Links to attack logs

****** ****** ******

Share on: