213.176.48.151 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 213.176.48.151 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 35/100

Host and Network Information

• Tags: cyber security, ioc, malicious, Nextray, phishing

• View other sources: Spamhaus VirusTotal

• Country: United States
• Network:
• Noticed: 29 times
• Protocols Attacked: mssql
• Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Open Ports Detected

10001 10010 10027 1028 17776 18005 18029 1958 20001 20010 20018 20020 20060 20080 20082 20090 20106 20121 20182 20200 20500 20800 20880 21002 21083 21084 21230 21233 21234 21243 21244 21245 21246 21249 21250 21252 21254 21255 21256 21257 21263 21269 21270 21277 21278 21285 21287 21295 21305 21306 21307 21308 21310 21312 21313 21315 21317 21320 21321 21322 21323 21325 21328 21381 21400 21500 22000 22082 22206 22345 22403 22556 22609 22703 22705 23023 23084 23424 24082 24442 25001 25004 25006 25007 25008 25082 25084 25105 27015 27017 27105 27571 28015 28017 29798 29840 29842 30113 30452 30479 30894 32303 35554 35560 3952 5595 6002 6003 80

Map

Links to attack logs

****** nmap-scanning-list-2020-11-14 awsuk-mssql-bruteforce-ip-list-2020-08-20 nmap-scanning-list-2020-11-03 mssql-bruteforce-ip-list-2020-11-14 ****** ******