111.118.215.154 Threat Intelligence and Host Information

May 19, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 111.118.215.154 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Known Malicious Host 🔴 72/100

Host and Network Information

  • Mitre ATT&CK IDs: T1021.001 - Remote Desktop Protocol, T1110 - Brute Force, T1184 - SSH Hijacking, T1192 - Spearphishing Link, T1194 - Spearphishing via Service, T1442 - Fake Developer Accounts, T1454 - Malicious SMS Message, T1566 - Phishing, T1583.001 - Domains, T1583.006 - Web Services, T1585.001 - Social Media Accounts, T1586 - Compromise Accounts, T1591.002 - Business Relationships

  • Tags: anydesk, as15169 as16509, as19871 as22612, as9002, business email compromise, c2, caas, fraud, hosting, identifying, parked domains, scams, ssh hijacking, typosquatting

  • JARM: 29d29d15d29d29d00042d42d0000009435214b849738c4ebab4534b5d158dd

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: hphosts_emd, hphosts_fsa, hphosts_psh

Malware Detected on Host

Count: 7 0b0d047241954bfc378676023ba1139ddae2f9db90f69c9e151e9c6dbe2bd72e be557a7baeda90bb7310d4e4b35e56d8795594bab6e0292201e6dbfc88e8319b 19f91528a7981aa7f89114b0fce713e9978f91776bea9909fd5e78acc04fb943 014be61b5bccfa563789a1442e8882ad4f0fee5b67ec5a696085db9c0dde921e f4aa4514f89b080d7606c5874f46382ef9da827cc3fe90f88bd83bd8f98dd976 5ec0eaef7fe71f5369005c9c0b7fe52e9b455bd7edab27adf33c43efb0e120e8 7b4f5724640d43c369e689c8f2717032e81c7c18ddcbf38234d067648d2282d1

Open Ports Detected

110 2083 2086 2087 2095 21 22 2222 26 3306 443 465 53 587 80 993 995

CVEs Detected

CVE-2007-2768 CVE-2008-3844 CVE-2016-10735 CVE-2016-20012 CVE-2017-15906 CVE-2018-14040 CVE-2018-14042 CVE-2018-15473 CVE-2018-15919 CVE-2018-20676 CVE-2018-20677 CVE-2018-20685 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2019-8331 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408 CVE-2023-48795 CVE-2023-51385 CVE-2023-51767 CVE-2024-6484 CVE-2025-26465

Map

Whois Information

  • inetnum: 111.118.215.1 - 111.118.215.255
  • netname: HG-GPX-Pool
  • descr: Hostgator GPX India
  • country: IN
  • admin-c: HIND1-AP
  • tech-c: HIND1-AP
  • abuse-c: AH1192-AP
  • status: ALLOCATED NON-PORTABLE
  • mnt-by: MAINT-IN-HGGPX
  • mnt-irt: IRT-HGINDIA-GPX
  • last-modified: 2021-01-06T13:12:30Z
  • irt: IRT-HGINDIA-GPX
  • address: GPX India. Unit A-001
  • address: Boomerang Chandivali Farm Road Andheri East
  • address: Mumbai 400072
  • address: India
  • e-mail: net-eng-team@newfold.com
  • abuse-mailbox: abuse@publicdomainregistry.com
  • admin-c: HIND1-AP
  • tech-c: HIND1-AP
  • mnt-by: MAINT-IN-HGGPX
  • last-modified: 2025-05-11T07:51:29Z
  • role: ABUSE HGINDIAGPX
  • country: ZZ
  • address: GPX India. Unit A-001
  • address: Boomerang Chandivali Farm Road Andheri East
  • address: Mumbai 400072
  • address: India
  • phone: +000000000
  • e-mail: net-eng-team@newfold.com
  • admin-c: HIND1-AP
  • tech-c: HIND1-AP
  • nic-hdl: AH1192-AP
  • abuse-mailbox: abuse@publicdomainregistry.com
  • mnt-by: APNIC-ABUSE
  • last-modified: 2025-05-11T07:51:45Z
  • role: Hostgator India - Network Division
  • address: Near Kings Park Layout, Maryhill, Mangalore 575 015, Karnataka, India
  • country: IN
  • phone: +14152300648
  • e-mail: abuse@hostgator.in
  • admin-c: HIND1-AP
  • tech-c: HIND1-AP
  • nic-hdl: HIND1-AP
  • mnt-by: MAINT-HGINDIA-AP
  • last-modified: 2017-03-09T09:57:33Z
  • route: 111.118.212.0/22
  • descr: Hostgator India Route
  • origin: AS18229
  • country: IN
  • notify: netadmin@hostgator.in
  • mnt-by: MAINT-HGINDIA-AP
  • last-modified: 2011-02-01T04:16:29Z

Links to attack logs

****** ****** ******

Share on: