51.158.172.165 Threat Intelligence and Host Information

Share on:

General

This page contains threat intelligence information for the IPv4 address 51.158.172.165 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 30/100

Host and Network Information

  • Mitre ATT&CK IDs: T1498 - Network Denial of Service
  • Tags: Cyclops, DDOS, Gamardeon, HermeticWiper, IsaacWiper, KillNet, PartyTicket, WhisperGate, attack ddos, botnet, ddos, list ips, russia, russian, ukraine
  • View other sources: Spamhaus VirusTotal

  • Country: France
  • Network: AS12876 online s.a.s.
  • Noticed: 1 times
  • Protcols Attacked: Anonymous Proxy
  • Countries Attacked: Russian Federation

Malware Detected on Host

Count: 6 2b98307d56583ad042300896596d04b263bdeed83a7a5e0be83b440e46772cf5 d8b981ed255f5dc135bc631161bda76f07c8e3464e7ed560a814a1a237b7f379 90f54d86e24bbfbf4ba63a5976a77cd49a78dcd176d894e2d82a7c8c92e95efc 942edb59841d2ed087b77906165bd5d71c7812121e355093a6217ab53d8a261b b623c4c6ccd520c407a65cbdd039c91c697e7e13f5db90ddf654bc3771884668 f80d72b134d93fcf6e83b06c461e5b02764fa3f769319c4af8b580dfe657ca58

Map

Whois Information

  • inetnum: 51.158.128.0 - 51.158.255.255
  • netname: SCALEWAY-AMS
  • descr: Scaleway - Amsterdam, Netherlands
  • status: LEGACY
  • country: NL
  • org: ORG-ONLI1-RIPE
  • admin-c: MM42047-RIPE
  • tech-c: MM42047-RIPE
  • mnt-by: ONLINE-NET-MNT
  • created: 2019-05-06T11:58:01Z
  • last-modified: 2022-05-04T17:24:57Z
  • organisation: ORG-ONLI1-RIPE
  • mnt-ref: MNT-TISCALIFR-B2B
  • org-name: Scaleway
  • org-type: OTHER
  • address: 8 rue de la ville l’eveque 75008 PARIS
  • abuse-c: AR32851-RIPE
  • mnt-ref: ONLINE-NET-MNT
  • mnt-by: ONLINE-NET-MNT
  • created: 2015-07-10T15:20:41Z
  • last-modified: 2022-05-03T15:39:01Z
  • person: Mickael Marchand
  • address: 8 rue de la ville l’eveque 75008 PARIS
  • phone: +33173502000
  • nic-hdl: MM42047-RIPE
  • mnt-by: MMA-MNT
  • created: 2015-07-10T15:02:32Z
  • last-modified: 2016-02-23T12:43:25Z
  • route: 51.158.128.0/17
  • descr: SCALEWAY
  • descr: Amsterdam, Netherlands
  • origin: AS12876
  • mnt-by: MNT-TISCALIFR
  • mnt-by: ONLINE-NET-MNT
  • created: 2019-10-03T15:09:09Z
  • last-modified: 2022-05-03T10:05:58Z

Links to attack logs

anonymous-proxy-ip-list-2023-05-25 roxy-ip-list-2023-05-03 anonymous-proxy-ip-list-2023-05-19 anonymous-proxy-ip-list-2023-05-27 anonymous-proxy-ip-list-2023-05-29 anonymous-proxy-ip-list-2023-05-17 anonymous-proxy-ip-list-2023-05-20 anonymous-proxy-ip-list-2023-05-26 anonymous-proxy-ip-list-2023-05-18 anonymous-proxy-ip-list-2023-05-24 anonymous-proxy-ip-list-2023-05-21 roxy-ip-list-2023-05-05 anonymous-proxy-ip-list-2023-05-22 anonymous-proxy-ip-list-2023-05-23