206.189.58.146 Threat Intelligence and Host Information

Apr 20, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 206.189.58.146 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 45/100

Host and Network Information

  • Mitre ATT&CK IDs: T1110 - Brute Force

  • Tags: Bruteforce, cyber security, ioc, malicious, Nextray, phishing, Scanner, scanning, smtp, ssh, tcp, Webattack

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: haley_ssh

  • Country: Germany
  • Network:
  • Noticed: 50 times
  • Protocols Attacked: ssh
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: land89.xyz muga11.com gord76.com madal22.xyz qard28.xyz dest65.xyz gorud077.xyz ruh5.xyz jabha.xyz taks86.xyz tarm2.xyz mul77.xyz saba20.xyz dept55.xyz law55.xyz green21.xyz loans18.xyz kasr30.xyz relig604.xyz loan18.co asd57.xyz soad30.com afhd16.com tree90.com oma47.com tasa92.com moq15.com takser08.com enjas20.com tans30.com sde58.com moqaw.com altam13.com dahan2.com world225.com ads358.com muh33.com ruh80.com shatr30.com hal98.com tanseqs.com lar34.info prof-marketing.com shahdlaw.com legalksa.com calim.claim-sekarang.my.id jamal1.my.id bokepgg.ayo-claim-sekarang.my.id grup.whatsapp.dewasa.ayo-claim-sekarang.my.id siapanamanya010.my.id www.mitickontol.duckdns.org mitickontol.duckdns.org www.yourqrcode.gq yourqrcode.gq kuchlbauer-abensberg.de vtcorte.icu

Open Ports Detected

22 80 8080 8443 9988

CVEs Detected

CVE-2018-16843 CVE-2018-16844 CVE-2018-16845 CVE-2019-20372 CVE-2019-9511 CVE-2019-9513 CVE-2019-9516 CVE-2021-23017 CVE-2021-3618 CVE-2023-44487

Map

Whois Information

Links to attack logs

****** awsau-ssh-bruteforce-ip-list-2022-04-12 ****** ******

Share on: