154.213.197.91 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 154.213.197.91 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 5/100

Host and Network Information

• View other sources: Spamhaus VirusTotal

• Country: Hong Kong
• Network: AS35916 multacom corporation
• Noticed: 1 times
• Protocols Attacked: Anonymous Proxy
• Passive DNS Results: www.1i0k.icu 1i0k.icu www.7q2j.icu 7q2j.icu www.7y1g.icu 7y1g.icu www.9d2i.icu 9d2i.icu www.9q0s.icu 9q0s.icu www.2t2s.icu 2t2s.icu www.4w2z.icu 4w2z.icu www.9i1q.icu 9i1q.icu www.8k0a.icu www.8e1l.icu 8k0a.icu 8e1l.icu www.1r1l.icu 1r1l.icu www.2l1v.icu 2l1v.icu www.7i0f.icu 7i0f.icu www.5f2w.icu 5f2w.icu www.2q0s.icu 2q0s.icu www.9e1n.icu 9e1n.icu www.9k1y.icu www.1o0j.icu 9k1y.icu 1o0j.icu www.5h1s.icu 5h1s.icu www.8x2a.icu 8x2a.icu www.4v0j.icu 4v0j.icu www.8c1f.icu 8c1f.icu www.0b0m.icu 0b0m.icu www.4v0q.icu 4v0q.icu www.5p2y.icu 5p2y.icu www.0j1w.icu 0j1w.icu www.5w1o.icu 5w1o.icu www.3l0i.icu 3l0i.icu www.6o1n.icu 6o1n.icu www.3q2i.icu 3q2i.icu www.5x1a.icu 5x1a.icu www.3y0w.icu 3y0w.icu www.0q0e.icu 0q0e.icu www.4b2l.icu 4b2l.icu

Open Ports Detected

1080 1337 3128

Map

Whois Information

• inetnum: 154.213.197.0 - 154.213.197.255
• netname: ThreexK_Tech_GmbH
• descr: 3xK Tech GmbH
• country: FR
• admin-c: CIS1-AFRINIC
• tech-c: CIS1-AFRINIC
• status: ASSIGNED PA
• mnt-by: CIL1-MNT
• mnt-by: LARUS-SERVICE-MNT
• parent: 154.192.0.0 - 154.223.255.255
• person: Cloud Innovation Support
• address: Ebene
• address: MU
• address: Mahe
• address: Seychelles
• phone: tel:+248-4-610-795
• nic-hdl: CIS1-AFRINIC
• abuse-mailbox: abuse@cloudinnovation.org
• mnt-by: CIL1-MNT
• route: 154.213.197.0/24
• descr: 3xK Tech GmbH
• origin: AS200373
• mnt-by: LARUS-SERVICE-MNT

Links to attack logs

anonymous-proxy-ip-list-2024-11-16