104.152.168.25 Threat Intelligence and Host Information

May 11, 2025 ipinfopage

General

IP Address
104.152.168.25
IPv4 Address
Location
🇨🇦 Canada
CA
Network
AS63068
CROCWEB
Threat Score
60/100
High Risk
aaaaaaaanxdomainacceptacceptencodingaddedactive
Attack Intelligence
MITRE ATT&CK Techniques
T1003 - OS Credential Dumping, T1031 - Modify Existing Service, T1045 - Software Packing, T1053 - Scheduled Task/Job, T1055 - Process Injection, T1056 - Input Capture, T1060 - Registry Run Keys / Startup Folder, T1071 - Application Layer Protocol, T1082 - System Information Discovery, T1096 - NTFS File Attributes, T1105 - Ingress Tool Transfer, T1110 - Brute Force, T1112 - Modify Registry, T1119 - Automated Collection, T1129 - Shared Modules, T1143 - Hidden Window
Open Ports Detected
21
Geographic Location
Country
Canada
City
Unknown
Region
Unknown
Coordinates
43.6319, -79.3716
Network Information
ASN
AS63068
Organization
CROCWEB
Network
AS63068 CROCWEB
WHOIS Information
NetRange
104.152.168.0 - 104.152.171.255
CIDR
104.152.168.0/22
NetName
CROCWEB
NetHandle
NET-104-152-168-0-1
Parent
NET104 (NET-104-0-0-0-0)
NetType
Direct Allocation
OriginAS
AS63068
Organization
CrocWeb (MA-306)
RegDate
2014-05-13
Updated
2014-07-21
Ref
https://rdap.arin.net/registry/entity/MA-306
OrgName
CrocWeb
OrgId
MA-306
City
Cornwall
StateProv
ON
PostalCode
K6H 7L2
Country
CA
OrgAbuseHandle
NOC31898-ARIN
OrgAbuseName
Network Operations Center
OrgAbusePhone
+1-888-804-2762
OrgAbuseEmail
abuse@hostwhitelabel.com
OrgAbuseRef
https://rdap.arin.net/registry/entity/NOC31898-ARIN
OrgTechHandle
NOC31898-ARIN
OrgTechName
Network Operations Center

Malware Detected on Host

Count: 1 49c73ef48c81a2ccdd61ba0094fd807473f263946caa9f25be4c44e84f72bd43

CVEs Detected

CVE-2015-9251 CVE-2019-11358 CVE-2020-11022 CVE-2020-11023

Disclaimer
This page contains threat intelligence information for the IPv4 address 104.152.168.25 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.