204.11.58.151 Threat Intelligence and Host Information

Apr 17, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 204.11.58.151 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Known Malicious Host 🔴 85/100

Host and Network Information

  • Mitre ATT&CK IDs: T1021.001 - Remote Desktop Protocol, T1110 - Brute Force, T1184 - SSH Hijacking, T1192 - Spearphishing Link, T1194 - Spearphishing via Service, T1442 - Fake Developer Accounts, T1454 - Malicious SMS Message, T1566 - Phishing, T1583.001 - Domains, T1583.006 - Web Services, T1585.001 - Social Media Accounts, T1586 - Compromise Accounts, T1591.002 - Business Relationships

  • Tags: anydesk, as15169 as16509, as19871 as22612, as9002, business email compromise, c2, caas, cyber security, fraud, hosting, identifying, ioc, malicious, Nextray, parked domains, phishing, scams, ssh hijacking, typosquatting

  • JARM: 29d29d15d29d29d00042d42d0000009435214b849738c4ebab4534b5d158dd

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: cruzit_web_attacks, hphosts_emd, hphosts_fsa, hphosts_psh

Malware Detected on Host

Count: 26 0dbfee82bb3e0e799b79755844f29eddeef59c1ade6ee6d400b17c489c986113 24f03a9ff4ebf96af0d669a1196babb2fe0f0e88611a5b2ddd37d5c35043cbad b6be68a751e9f74470e9187ad0fd1ac3bfad81a6cb8a2ae2f3f309d96f66c89d 0ecd810b10f5fd65bf366b307e748389e93a605f7bcdfd52e10d0712482ee822 35adda5689f175c4b2baf056cc22f5f9ceda5bcd2eef4ab08f90f9e23444e39b 9405bf04b0b9cd243e07a71b5067f61091ab7cdb7043aa1aff1e0893c980374e 0890a274d627cc8c934c39450e124654ed4a0e6b587426a60d8816fff995d8ed 5a44ba86082d327e33a09cb5836a42a2e36c7c2c8ccd5d954f99860776259685 46c38664e96e0cf6f27ac6f6068fa1803dfc5abefbd197c3584cc87d09a4bf3f f39138a961141994f02362a23ef34136088633b7310ff3d4668c15bc143ead1e

Open Ports Detected

110 143 2083 2086 2087 2095 21 22 2222 26 3306 443 465 53 587 80 993 995

CVEs Detected

CVE-2007-2768 CVE-2008-3844 CVE-2015-9251 CVE-2016-10735 CVE-2016-20012 CVE-2017-15906 CVE-2018-14040 CVE-2018-14042 CVE-2018-15473 CVE-2018-15919 CVE-2018-20676 CVE-2018-20677 CVE-2018-20685 CVE-2019-11358 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2019-8331 CVE-2020-11022 CVE-2020-11023 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408 CVE-2023-48795 CVE-2023-51385 CVE-2023-51767 CVE-2025-26465

Map

Whois Information

Links to attack logs

****** ****** ******

Share on: