197.246.10.151 Threat Intelligence and Host Information

May 21, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 197.246.10.151 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 60/100

Host and Network Information

Mitre ATT&CK IDs: T1498 - Network Denial of Service, T1499.002 - Service Exhaustion Flood, T1499 - Endpoint Denial of Service
Tags: cc.py, DDoS, DDOS, HEAD Floods, Killnet, KillNet, proxy, T1498, T1499
View other sources: Spamhaus VirusTotal

Country: Egypt
Network:
Noticed: 23 times
Protocols Attacked: Anonymous Proxy

Malware Detected on Host

Count: 3 2ad8b9bd18f607f61392d8d6a79837013328644915e090901eeb09b6c460d616 f80e18d517a86447e48d7da2815768f9c04c6023049d117ae1efb2dbc564ce7b 51017691125fd08babd8214d776230675ea60827197a53d6d421cce61fb27a84

Open Ports Detected

2000 22 23 53 8291

CVEs Detected

CVE-2018-1156 CVE-2018-1157 CVE-2018-1158 CVE-2018-1159 CVE-2018-14847 CVE-2018-5951 CVE-2018-7445 CVE-2019-13074 CVE-2019-13954 CVE-2019-13955 CVE-2019-15055 CVE-2019-16160 CVE-2019-3924 CVE-2019-3943 CVE-2019-3976 CVE-2019-3977 CVE-2019-3978 CVE-2019-3979 CVE-2019-3981 CVE-2020-10364 CVE-2020-20021 CVE-2020-20217 CVE-2020-20220 CVE-2020-20230 CVE-2020-20247 CVE-2020-20249 CVE-2020-20250 CVE-2020-20252 CVE-2020-20253 CVE-2020-20254 CVE-2020-20262 CVE-2020-20264 CVE-2020-20265 CVE-2020-20266 CVE-2020-20267 CVE-2021-3014 CVE-2021-36613 CVE-2021-36614 CVE-2022-36522 CVE-2022-45313 CVE-2022-45315

Map

Whois Information

inetnum: 197.246.0.0 - 197.246.15.255
netname: Broadband_Static
descr: For any abuse, kindly contact abuse@noor.net
country: EG
admin-c: NATI2-AFRINIC
admin-c: NATI1-AFRINIC
admin-c: MK46-AFRINIC
tech-c: NATI2-AFRINIC
tech-c: NATI1-AFRINIC
tech-c: MK46-AFRINIC
status: ASSIGNED PA
mnt-by: NOOR-MNT
parent: 197.246.0.0 - 197.246.255.255
person: Mohamed Kamal
address: City Stars Capital 5 A4,
address: Omar Ibn ElKhattab st, Heliopolis
address: Cairo
address: EG
address: Cairo
address: Egypt
phone: tel:+20-3-3334999
nic-hdl: MK46-AFRINIC
mnt-by: GENERATED-YWHWTMOENQFCK14MZRSBR2NGAF3OFMCK-MNT
person: NOOR Advanced Technologies IP Admin1
address: City Stars Complex
phone: tel:+20-2-3334999
nic-hdl: NATI1-AFRINIC
abuse-mailbox: abuse@noor.net
mnt-by: GENERATED-VSN1NIMDYDRCP9AFTSLLH5TRCBCX80ME-MNT
person: NOOR Advanced Technologies IP Admin2
address: City Stars Capital 5 A4 Omar Ibn El Khattab Street, Heliopolis, Cairo, Egypt
phone: tel:+20-2-3334999
nic-hdl: NATI2-AFRINIC
abuse-mailbox: abuse@noor.net
mnt-by: GENERATED-NLUXL1M7D2JYUPIKHTQAKKNOBPIBXDZU-MNT
route: 197.246.0.0/16
descr: NOOR_as20928
origin: AS20928
mnt-by: noor-mnt

Links to attack logs

Share on: