141.101.120.54 Threat Intelligence and Host Information
Share on:General
This page contains threat intelligence information for the IPv4 address 141.101.120.54 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.
Possibly Malicious Host 🟢 10/100
Host and Network Information
-
JARM: 27d3ed3ed0003ed1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c
-
View other sources: Spamhaus VirusTotal
- Country:
- Network: AS13335 cloudflare
- Noticed: 1 times
- Protcols Attacked: Anonymous Proxy
- Passive DNS Results: cadillac.digital www.kinkacademy.com kinkacademy.com demo32.gigastream.xyz www.partyallstar.com partyallstar.com delay.server4-mac.com join.wifebucket.com clubmpv.com www.clubmpv.com rm.server4-mac.com www.giantesskatelyn.com giantesskatelyn.com cdn.biggercity.com api.biggercity.com api5.biggercity.com cdn5.biggercity.com www.biggercity.com m.biggercity.com mobile.biggercity.com ui.biggercity.com futemax.fm fsx.com www.fsx.com dev.fsx.com demo36.gigastream.xyz 2.sawavodss.tk 3.sawavodss.tk 1.sawavodss.tk unlimited4.me dragonfuture-cdn1.gigastream.xyz www.wifebucket.com wifebucket.com www.theporn.com theporn.com tptv.pw auth.songwhip.com api.cloud9.to whatismyip.com oktw.one gigastream.xyz www.whatismyip.com www.animefever.tv cdn02n.net-tv.xyz server1.elgenero.com cloud9.to staging.songwhip.com mobilee.aflam4you.tv mo.aflam4you.tv m.aflam4you.tv mobile.aflam4you.tv www.aflam4you.tv telegram.songwhip.com analytics.songwhip.com songwhip.com mkklcdnbuv1.com aflam4you.tv distintas.net osman.gigastream.xyz elgenero.com mainstream.gigastream.xyz www.broadcasthe.net cdn2.broadcasthe.net static.broadcasthe.net img.broadcasthe.net cdn.broadcasthe.net bu2.mkklcdnbuv1.com broadcasthe.net proxy.apiplay.co studio.broadcasthe.net www.apiplay.co apiplay.co animefever.tv hls-panel.gigastream.xyz hls-cdn.gigastream.xyz xml.gigastream.xyz raostv.com www.bustedmugshots.com bustedmugshots.com stick-nodes.fileplanet.com platypus.fileplanet.com www.topfreedns.pw www.alivenotdead.com download.fileplanet.com nptunnel.com blog.nptunnel.com trial.nptunnel.com www.nptunnel.com de.files.fm ru.files.fm files.fm beet.the-eye.eu parazite.the-eye.eu the-eye.eu xydh123.xyz ywdh1.xyz paddygardenstore.art adv.dd799aa.com down.dd799aa.com static.nhentai.net www.nhentai.net sentry.nhentai.net t.nhentai.net nhentai.net aut.iniuria.us pw.stormgn.com iniuria.us www.iniuria.us
Malware Detected on Host
Count: 200 6b5b288eeeac38bcc8bf2f464a2e5ed49fa32ac56cf685229dede385b8c3b038 5012509bf138ba24dbcf102dc492e6b57fd1e1f057a66f0f2771d8af79a6aa63 f1e1df2ed0cd45f5e4bd3f6624acb8530f19bc1d281be270823b47a3750f7994 050473547f257fbeb058759021ddf454ad96b229e03935d319320f5197daaf52 631321aa9b66122b10faf6f706dd57fa415fd36d9a989f08da24fd0aa92c81ba ce13746c8f646d91409f9c2068263809eb5d72d9a9ba52bf7b283c7fa1b52064 f427b27fa70deba8112511cd214851aad390e88b1fd48c5864f3ffc93803db6a 82b16e41b915d2b3b5f30a6afc368546bb3d44fe59bf1f22c64db78436433218 f52cc79511d947b2003805fd9b77b2151934c9c6b96556082ecbca390de28da6 6fbee31ce028861a2380366b868789549694b6c01dc2a04fc861cd65fe80c4d9
Open Ports Detected
2052 2082 2086 2087 2095 2096 443 8880
Map
Whois Information
- NetRange: 141.0.0.0 - 141.255.255.255
- CIDR: 141.0.0.0/8
- NetName: RIPE-ERX-141
- NetHandle: NET-141-0-0-0-0
- Parent: ()
- NetType: Early Registrations, Maintained by RIPE NCC
- OriginAS:
- Organization: RIPE Network Coordination Centre (RIPE)
- RegDate: 1993-05-01
- Updated: 2009-05-18
- Comment: These addresses have been further assigned to users in
- Comment: the RIPE NCC region. Contact information can be found in
- Ref: https://rdap.arin.net/registry/ip/141.0.0.0
- OrgName: RIPE Network Coordination Centre
- OrgId: RIPE
- Address: P.O. Box 10096
- City: Amsterdam
- StateProv:
- PostalCode: 1001EB
- Country: NL
- RegDate:
- Updated: 2013-07-29
- Ref: https://rdap.arin.net/registry/entity/RIPE
- OrgTechHandle: RNO29-ARIN
- OrgTechName: RIPE NCC Operations
- OrgTechPhone: +31 20 535 4444
- OrgTechEmail: [email protected]
- OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
- OrgAbuseHandle: ABUSE3850-ARIN
- OrgAbuseName: Abuse Contact
- OrgAbusePhone: +31205354444
- OrgAbuseEmail: [email protected]
- OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
- inetnum: 141.101.120.0 - 141.101.123.255
- netname: CLOUDFLARE-EU
- descr: CloudFlare CDN network
- country: EU
- admin-c: CAC80-RIPE
- tech-c: CTC6-RIPE
- status: ASSIGNED PA
- mnt-by: MNT-CLOUDFLARE
- mnt-lower: MNT-CLOUDFLARE
- mnt-routes: MNT-CLOUDFLARE
- created: 2012-08-10T05:03:42Z
- last-modified: 2012-08-10T05:50:05Z
- person: Cloudflare Abuse Contact
- address: Viktualienmarkt Rosental 7 80331 Munchen, DE
- phone: +49 89 2555 2276
- nic-hdl: CAC80-RIPE
- mnt-by: MNT-CLOUDFLARE
- created: 2012-06-01T23:27:49Z
- last-modified: 2022-04-21T01:07:44Z
- person: Cloudflare Technical Contact
- address: Viktualienmarkt Rosental 7 80331 Munchen, DE
- phone: +49 89 2555 2276
- nic-hdl: CTC6-RIPE
- mnt-by: MNT-CLOUDFLARE
- created: 2012-06-01T23:35:57Z
- last-modified: 2022-04-21T01:07:28Z
- route: 141.101.120.0/22
- origin: AS13335
- mnt-by: MNT-CLOUDFLARE
- created: 2020-06-11T23:57:11Z
- last-modified: 2020-06-11T23:57:11Z