192.158.15.201 Threat Intelligence and Host Information

May 20, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 192.158.15.201 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Known Malicious Host 🔴 77/100

Host and Network Information

Mitre ATT&CK IDs: T1498 - Network Denial of Service, T1499.002 - Service Exhaustion Flood, T1499 - Endpoint Denial of Service
Tags: cc.py, cyber security, DDoS, DDOS, HEAD Floods, ioc, Killnet, KillNet, malicious, Nextray, phishing, portscan, proxy, T1498, T1499
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_net_ua, lashback_ubl, sblam, socks_proxy_1d, socks_proxy_30d, socks_proxy_7d, sslproxies_1d, sslproxies_30d, sslproxies_7d, stopforumspam_180d, stopforumspam_30d, stopforumspam_365d, stopforumspam_90d, stopforumspam

Country: Canada
Network:
Noticed: 50 times
Protocols Attacked: Anonymous Proxy
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Sweden, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 2 5ee96cce83902ae9cb52fafac4479412f4d12bfc9b699cb81763f140e7b979a8 a8ec12a12486df617d26547e2a0c36f89dcf21b36875c9519ea1d59c5ddc8a21

Open Ports Detected

1701 1723 2000 22 53 8291

CVEs Detected

CVE-2018-5951 CVE-2019-15055 CVE-2019-16160 CVE-2019-3976 CVE-2019-3977 CVE-2019-3978 CVE-2019-3979 CVE-2020-11881 CVE-2020-20021 CVE-2020-20217 CVE-2020-20220 CVE-2020-20225 CVE-2020-20230 CVE-2020-20231 CVE-2020-20247 CVE-2020-20249 CVE-2020-20250 CVE-2020-20252 CVE-2020-20253 CVE-2020-20254 CVE-2020-20262 CVE-2020-20264 CVE-2020-20265 CVE-2020-20266 CVE-2020-20267 CVE-2021-3014 CVE-2021-36613 CVE-2021-36614 CVE-2022-36522 CVE-2022-45313 CVE-2022-45315 CVE-2023-30799 CVE-2023-30800

Map

Whois Information

NetRange: 192.158.12.0 - 192.158.15.255
CIDR: 192.158.12.0/22
NetName: SPD082012
NetHandle: NET-192-158-12-0-1
Parent: NET192 (NET-192-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS40028
Organization: 1651884 Ontario Inc. (SPDNE)
RegDate: 2012-08-30
Updated: 2012-08-31
Ref: https://rdap.arin.net/registry/ip/192.158.12.0
OrgName: 1651884 Ontario Inc.
OrgId: SPDNE
Address: 6013 - 25 Crouse Rd
City: TORONTO
StateProv: ON
PostalCode: M1R 5P8
Country: CA
RegDate: 2006-06-05
Updated: 2024-11-25
Ref: https://rdap.arin.net/registry/entity/SPDNE
OrgAbuseHandle: SUPPO190-ARIN
OrgAbuseName: SPDNETWORK SUPPORT
OrgAbusePhone: +1-212-960-3388
OrgAbuseEmail: SUPPORT@spdnetwork.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/SUPPO190-ARIN
OrgTechHandle: SUPPO190-ARIN
OrgTechName: SPDNETWORK SUPPORT
OrgTechPhone: +1-212-960-3388
OrgTechEmail: SUPPORT@spdnetwork.net
OrgTechRef: https://rdap.arin.net/registry/entity/SUPPO190-ARIN
RAbuseHandle: ABUSE1233-ARIN
RAbuseName: Abuse
RAbusePhone: +1-212-960-3388
RAbuseEmail: ABUSE@spdnetwork.net
RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1233-ARIN
NetRange: 192.158.15.192 - 192.158.15.255
CIDR: 192.158.15.192/26
NetName: SPD-192-158-15-192-26
NetHandle: NET-192-158-15-192-1
Parent: SPD082012 (NET-192-158-12-0-1)
NetType: Reassigned
OriginAS: AS40028
Customer: UNIXCHOSTING.COM (C03339885)
RegDate: 2013-03-11
Updated: 2013-03-11
Ref: https://rdap.arin.net/registry/ip/192.158.15.192
CustName: UNIXCHOSTING.COM
Address: 10 Four Seasons Pl
City: Toronto
StateProv: ON
PostalCode: M9B-6H7
Country: CA
RegDate: 2013-03-11
Updated: 2013-03-11
Ref: https://rdap.arin.net/registry/entity/C03339885
OrgAbuseHandle: SUPPO190-ARIN
OrgAbuseName: SPDNETWORK SUPPORT
OrgAbusePhone: +1-212-960-3388
OrgAbuseEmail: SUPPORT@spdnetwork.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/SUPPO190-ARIN
OrgTechHandle: SUPPO190-ARIN
OrgTechName: SPDNETWORK SUPPORT
OrgTechPhone: +1-212-960-3388
OrgTechEmail: SUPPORT@spdnetwork.net
OrgTechRef: https://rdap.arin.net/registry/entity/SUPPO190-ARIN
RAbuseHandle: ABUSE1233-ARIN
RAbuseName: Abuse
RAbusePhone: +1-212-960-3388
RAbuseEmail: ABUSE@spdnetwork.net
RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1233-ARIN

Links to attack logs

Share on: