IPMediumSignal 45/100
51.91.74.44
Location
United StatesRoubaix, Hauts-de-France
ASN
AS16276
OVH
First Seen
Jul 2, 2024
Last Seen
Apr 5, 2025
Found in 7 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
45%
Signal Score
45 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryUnited States
United StatesRegionRoubaix, Hauts-de-France
ASNAS16276
OrganizationOVH
Feed Intelligence Summary
7 reports45% confidence
7
Source reports
45%
Confidence score
Category tags
abuseaccessaccess controlactionactive scanningadbadbhoney honeypotapiattackbotnetbrute forcebrute force attackcisco devicecisco exploitation attemptcitrix exploitation attemptscitrix securitycommand and controlcommand executioncommentcommunication protocolconnectcowriecowrie activitycowrie honeypotcredential accesscredential harvestingcredential stuffingdata encryptiondata exfiltrationdatabase securityddosdecoy systemdevice managementdionaea activitydionaea honeypotdistributed attacksenterprise networkingenterprise securityexploitexploitationexternal scanextortionfin scanftp brute forcegithubgroupsgthoneytrap honeypothttphttp brute forcehttp probehttpshttps probehunterimagesindicatorinfoinformation gatheringinitial accessinternal scanlamplamp attacklamp exploitation attemptslinuxmailoney activitymailoney honeypotmalicious activitymalicious softwaremalwaremalware behaviourmalware capturemysql brute forcenetworknetwork discoverynetwork infrastructurenetwork intrusion attemptsnetwork port scanningnetwork probingnetwork reconnaissancenetwork scanningnetwork securitynull scanpassword attackpassword attacksphishingphishing attackphishing trappingpngpossible malware distributionpotential vulnerability probingprocess injectionprotocol exploitationpythonransomwarereconnaissanceredis honeypotredishoneypotremote accessremote servicesresearchedresource hijackingscannerscriptscripting attackssecurity policysentrypeer botnetserverserver exploitationservice discoveryservice enumerationservice exploitationsftpsftp activitysftp attacksipsip brute forceslugsmtp brute forcesocial engineeringsql injection attemptsshssh attackssh monitoringstealth scansurface websyn scansystem disruptiont1016t1018t1021t1021.001t1021.002t1021.006t1040t1041t1046t1053t1055t1059t1059.004t1059.005t1059.007t1068t1071t1071.001t1076t1078t1083t1110t1110.001t1110.002t1110.003t1110.004t1133t1189t1190t1203t1204.002t1486t1490t1496t1497t1499.001t1499.002t1499.003t1505.004t1550t1563t1565t1566t1566.001t1566.002t1566.003t1566.004t1588t1589t1595t1595.001t1595.002t1595.003tannertanner activitytcptcp scantelecommunicationstelnet threatthreatthreat actorthreat detectionthreat intelligencethreat preventionudp port scanudp scanunited statesvalidatorvoipvoip attackweb attackweb exploitationxmas scan
Activity Timeline
Apr 5Apr 5
Threat Activity Heatmap
LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreMedium Risk
45
SIGNAL
Signal Score
45%
Confidence
7
Reports
First seenJul 2, 2024
Last seenApr 5, 2025
GeolocationUS
CountryUnited States
LocationRoubaix, Hauts-de-France
ASNAS16276
OrgOVH
Coords50.6924, 3.2011
VirusTotal
Not checked
WHOIS
- description
- [11] Honeypot: Redishoneypot : 51.91.74.44:6379 :Malicious Activity: info :
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 2 years ago · Last seen 1 year ago
Appeared in 7 threat reports