104.21.5.136 Threat Intelligence and Host Information

Oct 07, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 104.21.5.136 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 35/100

Host and Network Information

  • Tags: cyber security, ioc, malicious, Nextray, phishing

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: coinbl_hosts_browser, coinbl_hosts

  • Country:
  • Network: AS13335 cloudflare
  • Noticed: 1 times
  • Protcols Attacked: SSH
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 18 d80ebc9153a055c15a616bd2c555c76cdaa0f69e302676d619edca6c957d2849 3a6f76e8b81217a250b89fe331b2298dab5d58e9fd8f0f71a5d8d2c3ff5eacc5 120d7ef376454fef4b398d84c8798924b8052e9045a8fc6a6ded73070774afde 6cb808501ba2fa8738fe3899dd8114e2402f6b18b363c055601d417ad7693be5 2035f044232be1da59fdc4b43a721faf14e2091b4655c799f3cb67a644069597 3b2ddf48b3fd12f2bb56b19070c83a0b082903da86c3f5477ea4c7d374f93556 e38fb5927d31bd995b57bd8cdd7ecbdca3bc717d11ba9e5d17cdd1c04fbda472 de5cb159429d3332cb3982c2f8fd4354942e756b73fb0f8b05d47c3b7306091e 9b7c9b230e6ebdb3a92ef55e153d76a3186555560cb26be387604f02b214050e fa2f1a22d27739391f3dc286fa1a257899e1e07427eb3417d257dd83f35670bf

Open Ports Detected

2082 2083 2086 2087 443 80 8080 8443 8880

Map

Whois Information

Share on: