178.128.255.150 Threat Intelligence and Host Information

May 05, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 178.128.255.150 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 36/100

Host and Network Information

  • Country: Netherlands
  • Network:
  • Noticed: 3 times
  • Protocols Attacked: ssh
  • Countries Attacked: Poland, Sweden
  • Passive DNS Results: srv.buysellads.com stats.buysellads.com

Malware Detected on Host

Count: 4 8e29d99e9e2d8a35b76aa4cfeaba5c45b0c7aca035cbe29c6250ff369928e6bb 54af1a51563c787861ffaf59e2a299e450d808599000127414c16170acbce212 a3f88fa3c9c2f9f363cceb0afbc8fced928ecc65d97eb4ad5fbe2340c17d877c 7c812cff04f6356c46e22ca0918d0e141aa4498ecc2cebe4ba2f35f02652cdc9

Open Ports Detected

10001 10036 10134 102 11000 1200 1311 1414 1741 1830 2003 22 2220 2222 2233 225 26 3001 3307 3310 3333 3542 3838 4023 4242 427 443 4437 4840 4911 5005 502 5234 5915 6308 7100 8000 8021 8035 808 809 811 8117 8137 8237 8319 8418 8430 8440 8503 8524 8709 8812 9000 9102 9111 9112 9333 9400 9510

Map

Links to attack logs

digitaloceantoronto-ssh-bruteforce-ip-list-2025-05-05

Share on: