155.94.163.37 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 155.94.163.37 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 7/100

Host and Network Information

• View other sources: Spamhaus VirusTotal

• Country: United States
• Network:
• Noticed: 1 times
• Protocols Attacked: Anonymous Proxy
• Passive DNS Results: hukoomi-govgiz.com bellflight-govis.com hukoomi-govgif.com hukoomi-govgir.com post-djl.top sza-postal.top hsa-postal.top jrx-postal.top gwz-postal.top paz-postal.top hukoomi-govzid.com alc1-postal.top aicz-postal.top aiez-postal.top lowz-postal.top lazy-postal.top aies-postal.top ksez-postal.top aliv-postal.top ailr-postal.top ailu-postal.top ail2-postal.top ailt-postal.top ailo-postal.top aili-postal.top ails-postal.top ailq-postal.top aila-postal.top aild-postal.top hukoomi-govgis.com bellflight-goviz.com hukoomi-govgie.com mx-pst.cyou tecsg-bin9.top iez-granthornton.top hukoomi-huo.top hukoomi-yze.top hukoomi-pgo.top hukoomi-dxo.top hukoomi-bjo.top hukoomi-peo.top hukoomi-ueo.top hukoomi-keo.top hukoomi-szo.top hukoomi-iez.top hukoomi-rzo.top hukoomi-gvt.top hukoomi-ye1.top hukoomi-sko.top hukoomi-seo.top hukoomi-ggo.top hukoomi-gzo.top hukoomi-gko.top hukoomi-gom.top hukoomi-goq.top hukoomi-gor.top hukoomi-go1.top hukoomi-goj.top hukoomi-goc.top hukoomi-goz.top hukoomi-goi.top hukoomi-go7.top hukoomi-gok.top hukoomi-goe.top hukoomi-geo.top hukoomi-gol.top hukoomi-gob.top krfvh.cn hkjjkz.cn ohgnup.cn www.vnc8.com pr.naiyouyun.ga

Malware Detected on Host

Count: 2 66d4ced669a5afb95440a47d515290d01b3b1a3dbf9b23620d0fdb5def184395 8933a3293b6d7e0c3c188af0b039e7afcc60b50306d4dcd9088b94fb7c4a02c0

Open Ports Detected

3389 5357

Map

Whois Information

• NetRange: 155.94.128.0 - 155.94.233.255
• CIDR: 155.94.192.0/19, 155.94.224.0/21, 155.94.128.0/18, 155.94.232.0/23
• NetName: HOSTP-7
• NetHandle: NET-155-94-128-0-1
• Parent: NET155 (NET-155-0-0-0-0)
• NetType: Direct Allocation
• OriginAS:
• Organization: HostPapa (HOSTP-7)
• RegDate: 2025-01-30
• Updated: 2025-01-30
• Ref: https://rdap.arin.net/registry/ip/155.94.128.0
• OrgName: HostPapa
• OrgId: HOSTP-7
• Address: 325 Delaware Avenue
• Address: Suite 300
• City: Buffalo
• StateProv: NY
• PostalCode: 14202
• Country: US
• RegDate: 2016-06-06
• Updated: 2025-10-05
• Ref: https://rdap.arin.net/registry/entity/HOSTP-7
• OrgTechHandle: NETTE9-ARIN
• OrgTechName: NETTECH
• OrgTechPhone: +1-905-315-3455
• OrgTechEmail: net-tech-global@hostpapa.com
• OrgTechRef: https://rdap.arin.net/registry/entity/NETTE9-ARIN
• OrgAbuseHandle: NETAB23-ARIN
• OrgAbuseName: NETABUSE
• OrgAbusePhone: +1-905-315-3455
• OrgAbuseEmail: net-abuse-global@hostpapa.com
• OrgAbuseRef: https://rdap.arin.net/registry/entity/NETAB23-ARIN
• NetRange: 155.94.163.0 - 155.94.163.255
• CIDR: 155.94.163.0/24
• NetName: CC-155-94-163-0-24
• NetHandle: NET-155-94-163-0-1
• Parent: HOSTP-7 (NET-155-94-128-0-1)
• NetType: Reallocated
• OriginAS:
• Organization: DataWagon LLC (DL-167)
• RegDate: 2025-08-14
• Updated: 2025-08-14
• Ref: https://rdap.arin.net/registry/ip/155.94.163.0
• OrgName: DataWagon LLC
• OrgId: DL-167
• Address: 3 Mead Pond Lane
• City: Rye
• StateProv: NY
• PostalCode: 10580
• Country: US
• RegDate: 2014-03-04
• Updated: 2024-11-25
• Comment: https://datawagon.net
• Ref: https://rdap.arin.net/registry/entity/DL-167
• OrgAbuseHandle: ABUSE4637-ARIN
• OrgAbuseName: Abuse
• OrgAbusePhone: +1-914-495-1661
• OrgAbuseEmail: abuse@datawagon.com
• OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE4637-ARIN
• OrgNOCHandle: NOC31754-ARIN
• OrgNOCName: Network Operations Center
• OrgNOCPhone: +1-914-495-1661
• OrgNOCEmail: noc@datawagon.com
• OrgNOCRef: https://rdap.arin.net/registry/entity/NOC31754-ARIN
• OrgTechHandle: NOC31754-ARIN
• OrgTechName: Network Operations Center
• OrgTechPhone: +1-914-495-1661
• OrgTechEmail: noc@datawagon.com
• OrgTechRef: https://rdap.arin.net/registry/entity/NOC31754-ARIN

Links to attack logs

anonymous-proxy-ip-list-2025-10-21