104.238.111.107 Threat Intelligence and Host Information

Apr 27, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 104.238.111.107 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 55/100

Host and Network Information

Mitre ATT&CK IDs: T1046 - Network Service Scanning, T1498 - Network Denial of Service, T1499.002 - Service Exhaustion Flood, T1499 - Endpoint Denial of Service
Tags: abuseipdb, cc.py, DDoS, HEAD Floods, Killnet, T1498, T1499
View other sources: Spamhaus VirusTotal
Contained within other IP sets: socks_proxy_30d

Country: United States
Network:
Noticed: 6 times
Protocols Attacked: Anonymous Proxy
Passive DNS Results: socialbostonsports.org www.vologaming.com www.volocityfoundation.org www.volocityseattle.com www.playmilehigh.com www.volocitydc.com www.chucktownsocial.com www.sfsocialsportsclub.com www.volocity.org vologaming.com nycsocial.com cpcontacts.freshsquirrel.com whm.freshsquirrel.com cpcalendars.freshsquirrel.com gd.freshsquirrel.com volosports.com www.socialbostonsports.com socialbostonsports.com dev.nycsocial.com volocityseattle.com love.nycsocial.com chucktownsocial.com training.volocitydc.com volocitydc.com demo.playmilehigh.com playmilehigh.com outdoors.nycsocial.com equalplay.nycsocial.com demo.nycsocial.com gamestaff.nycsocial.com beach.nycsocial.com sfsocialsportsclub.com volocity.org volocityfoundation.org

Malware Detected on Host

Count: 3 ab9cd59d789e6c7841b9d28689743e700d492b5fae1606f184889cc7e6acadcc c962220f649ced285cce63d4fc3e9fddd5e7aca54526d4099533a558cdb6ae93 01806718027eedd14d532f9c10657b9f9db5f7425cdf7dea267a5182e9a9f588

Map

Whois Information

NetRange: 104.238.64.0 - 104.238.127.255
CIDR: 104.238.64.0/18
NetName: GO-DADDY-COM-LLC
NetHandle: NET-104-238-64-0-1
Parent: NET104 (NET-104-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS26496
Organization: GoDaddy.com, LLC (GODAD)
RegDate: 2014-11-13
Updated: 2014-11-13
Ref: https://rdap.arin.net/registry/ip/104.238.64.0
OrgName: GoDaddy.com, LLC
OrgId: GODAD
Address: 2155 E GoDaddy Way
City: Tempe
StateProv: AZ
PostalCode: 85284
Country: US
RegDate: 2007-06-01
Updated: 2024-11-25
Comment: Please send abuse complaints to abuse@godaddy.com
Ref: https://rdap.arin.net/registry/entity/GODAD
OrgTechHandle: NOC124-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-480-505-8809
OrgTechEmail: noc@godaddy.com
OrgTechRef: https://rdap.arin.net/registry/entity/NOC124-ARIN
OrgNOCHandle: NOC124-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-480-505-8809
OrgNOCEmail: noc@godaddy.com
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC124-ARIN
OrgAbuseHandle: ABUSE51-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-480-624-2505
OrgAbuseEmail: abuse@godaddy.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE51-ARIN

Links to attack logs

Share on: