148.72.22.219 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 148.72.22.219 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 15/100

Host and Network Information

• View other sources: Spamhaus VirusTotal

• Country: United States
• Network: AS26496 godaddy.com llc
• Noticed: 1 times
• Protcols Attacked: Anonymous Proxy
• Passive DNS Results: hinokifoundation.org dons.com hdlmi.com mikey-d.com daytona.hdlmi.com www.truenorthjerky.com truenorthjerky.com chelseaschools.org www.ghoulash.com ghoulash.com g.annarboracademy.org ypsi.org www.ypsi.org www.lapeercountryclub.com www.chathamhills.org www.hollandsearch.com www.betsythebookworm.com betsythebookworm.com mf.abqpride.com julesmpatrick.com www.julesmpatrick.com hollandsearch.com siestahills.org www.siestahills.org usedhobartmixers.com www.usedhobartmixers.com www.facet58frenchbulldogs.com facet58frenchbulldogs.com www.swelch.com www.ypsiautoheritage.org www.ypsilantihistoricalsociety.org www.daypsi.com daypsi.com www.serbinmachining.com www.dtcdc.com dtcdc.com www.weednread.com weednread.com chathamhills.org swelch.com ypsiautoheritage.org www.allsortscards.com allsortscards.com facet58.com www.facet58.com www.ladiesliteraryclub.org ladiesliteraryclub.org www.rwelch.com rwelch.com www.atozencards.com atozencards.com friendsofthelibraryofriorancho.org www.friendsofthelibraryofriorancho.org zmiclellan.com www.zmiclellan.com rickcupp.com www.rickcupp.com www.dwelch.com dwelch.com newmexicohomebrokers.com www.newmexicohomebrokers.com www.olaftn.com olaftn.com whm.solarypsi.org solarypsi.org www.solarypsi.org ypsilantihistoricalsociety.org alkfusion.org www.alkfusion.org wchconsortium.org www.wchconsortium.org www.lacuevahsfootball.com lacuevahsfootball.com abqfence.com www.abqfence.com serbinmachining.com steve.solarypsi.org admin.solarypsi.org ypsicommchoir.org www.ypsicommchoir.org www.unitya2.com unitya2.com www.zowiee.com zowiee.com gurule.com www.gurule.com bfixedit.com e.ypsistandard.com hairbyclaudiaabq.com www.hairbyclaudiaabq.com csfuqua.com www.csfuqua.com www.pusj.org www.doveeffects.com doveeffects.com www.geographicinvestigations.com geographicinvestigations.com daytona.hdl.com www.yhf.org yhf.org pusj.org childresslawfirm.com www.childresslawfirm.com bowecho.com www.bowecho.com ajleo.com www.ajleo.com lapeercountryclub.com www.servantsofcharity.org servantsofcharity.org www.folrr.org folrr.org buildingplace.net www.buildingplace.net www.coronadoauto.com coronadoauto.com www.politicalgraveyard.com politicalgraveyard.com www.saveoldbuildings.com saveoldbuildings.com www.chats.com chats.com htnetwork.org www.htnetwork.org msihelicopters.com www.msihelicopters.com nmvelo.com www.nmvelo.com www.mitchellfloorsanding.com mitchellfloorsanding.com jentzenlaw.com www.jentzenlaw.com www.chelseacoop.org chelseacoop.org hummingbirdbillingcenter.com www.hummingbirdbillingcenter.com chesek.com www.chesek.com www.ypsiseniorcenter.org ypsiseniorcenter.org mikesooch.com www.mikesooch.com friendsoflibrariesandliteracy.org www.friendsoflibrariesandliteracy.org follrr.org www.follrr.org bushelball.com www.bushelball.com www.mike-d.com mike-d.com www.mollyhaven.com mollyhaven.com www.frogandstone.com frogandstone.com robertlfox.com www.robertlfox.com www.pfunn.com pfunn.com donrandazzo.com www.andeannation.com andeannation.com jandbtrailers.com www.jandbtrailers.com 3strandelectric.net www.3strandelectric.net mcicomm.com www.mcicomm.com stevedaut.com www.stevedaut.com naturephotoworks.com www.naturephotoworks.com www.naturepointe.com naturepointe.com www.agencyfortheprofessions.com agencyfortheprofessions.com carolcassell.com www.carolcassell.com www.azautonm.com azautonm.com ip-148-72-22-219.ip.secureserver.net jeura.com jedu.jeura.com mauads.com

Open Ports Detected

110 111 143 2082 2083 2086 2087 21 22 3306 443 465 53 587 80 993 995

CVEs Detected

CVE-2016-20012 CVE-2017-15906 CVE-2018-15473 CVE-2018-15919 CVE-2018-20685 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408

Map

Whois Information

• NetRange: 148.72.0.0 - 148.72.255.255
• CIDR: 148.72.0.0/16
• NetName: GO-DADDY-COM-LLC
• NetHandle: NET-148-72-0-0-1
• Parent: NET148 (NET-148-0-0-0-0)
• NetType: Direct Allocation
• OriginAS:
• Organization: GoDaddy.com, LLC (GODAD)
• RegDate: 2015-10-26
• Updated: 2015-10-26
• Ref: https://rdap.arin.net/registry/ip/148.72.0.0
• OrgName: GoDaddy.com, LLC
• OrgId: GODAD
• Address: 2155 E GoDaddy Way
• City: Tempe
• StateProv: AZ
• PostalCode: 85284
• Country: US
• RegDate: 2007-06-01
• Updated: 2023-12-19
• Comment: Please send abuse complaints to [email protected]
• Ref: https://rdap.arin.net/registry/entity/GODAD
• OrgTechHandle: NOC124-ARIN
• OrgTechName: Network Operations Center
• OrgTechPhone: +1-480-505-8809
• OrgTechEmail: [email protected]
• OrgTechRef: https://rdap.arin.net/registry/entity/NOC124-ARIN
• OrgAbuseHandle: ABUSE51-ARIN
• OrgAbuseName: Abuse Department
• OrgAbusePhone: +1-480-624-2505
• OrgAbuseEmail: [email protected]
• OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE51-ARIN
• OrgNOCHandle: NOC124-ARIN
• OrgNOCName: Network Operations Center
• OrgNOCPhone: +1-480-505-8809
• OrgNOCEmail: [email protected]
• OrgNOCRef: https://rdap.arin.net/registry/entity/NOC124-ARIN

Links to attack logs

anonymous-proxy-ip-list-2023-12-24