166.0.235.134 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 166.0.235.134 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 15/100

Host and Network Information

• View other sources: Spamhaus VirusTotal

• Country: United States
• Network: AS395111 kvchosting.com llc
• Noticed: 1 times
• Protocols Attacked: Anonymous Proxy
• Passive DNS Results: teres.com.co cesfincreditos.com posadaanoranza.com conecta2terapia.com individualtax.com.au anatooriente-turismo.santanderalextremo.com directus.serviciosweb.net www.directus.serviciosweb.net www.temp.equipxa.com temp.equipxa.com hotelpalonegro.com stelajeans.com decowall.uy zarrar.com.au beyondadvancedtech.com beyondadvancedtech.com.watechs.com www.beyondadvancedtech.com.watechs.com halconjema.com halconjema.com.analyticshawks.com www.halconjema.com.analyticshawks.com miconservatorio.net misesinternational.caribbeantradecompany.com www.market.newfrankmartin.com www.sales.newfrankmartin.com concasaspain.es.concasaspain.com concasaspain.es www.concasaspain.es.concasaspain.com sharpandshredded.com ok1004.kvchosting.com kentzconstruction.co.ke bremen.com.uy concasaspain.com gps.edu.pk www.yourcargy.com texlinetrade.com fscout.kyzen360.com www.gph.ossipmarketing.com gph.com.co gph.ossipmarketing.com www.app.analyticshawks.com app.analyticshawks.com www.moodle.serviciosweb.net moodle.serviciosweb.net www.analyticshawks-virtual.analyticshawks.com analyticshawks-virtual.analyticshawks.com analyticshawks-virtual.com www.sutterpaving.com sutterpaving.com emprociv.com paginasweb.turbo2host.com www.paginasweb.turbo2host.com routevoip.co www.routevoip.watechs.com superlativesolutions.io anchorageaccountant.com texastransmissionrepair.com hurbanewholesaletowels.com mountainprepperexpos.com www.ja-customs.com omgohlol.com www.vids.omgohlol.com midlandtradingco.com equipxa.com constructorajksalcedo.com agenciatalenti.com ablazeronline.com www.fc.ablazeronline.com sportscomplexonline.com ossipmarketing.com selfstoragedoublebay.xyz kentzlaundry.co.ke mountainpeaklawn.com www.mountainpeaklawn.com kyzen360.com www.kyzen360.watechs.com kyzen360.watechs.com grouprobust.com paginaweb.pw www.paginaweb.turbo2host.com paginaweb.turbo2host.com rehabilitarte.com.co www.siai.ossipmarketing.com siai.ossipmarketing.com paginasweb.pw digitalaustralia.xyz faran.edu.pk www.paginasweb.pw.turbo2host.com biodiverso.serviciosweb.net www.biodiverso.serviciosweb.net www.tht.bestdomainhostingsite.com www.thb.bestdomainhostingsite.com kentzsafaris.com ilmsargodha.com tosssuperstore.com superaffiliateresource.com gillis.cloud gillis.watechs.com www.gillis.watechs.com groupnfm.com ja-customs.com newfrankmartin.com featherstonenc.com balancesportsonline.com billvernon.com turbo2host.com hotelsicarare.com viayare.com www.anatooriente-turismo.santanderalextremo.com anatooriente-turismo.com santanderalextremo.com www.viayare.santanderalextremo.com verleih.com.co www.multimaterialesconstructor.com.repreleongomez.com.co multimaterialesconstructor.com multimaterialessanrafael.com www.multimaterialessanrafael.com.repreleongomez.com.co repreleongomez.com.co innomaq.com concasa.com.co serviciosweb.net analyticshawks.com misesinternational.com caribbeanagro.com.co www.caribbeanagro.caribbeantradecompany.com www.misesinternational.caribbeantradecompany.com www.misesfoods.caribbeantradecompany.com caribbeantradecompany.com misesfoods.com megaabogados.com lexfin.com.co janjua.com.au watechs.com www.8ball.watechs.com yourcargy.com www.fas.balancesportsonline.com fas.balancesportsonline.com www.midland.bestdomainhostingsite.com www.aclab.bestdomainhostingsite.com www.sk.bestdomainhostingsite.com bestdomainhostingsite.com vialamo.com www.scripts.kyzen360.com scripts.kyzen360.com

Malware Detected on Host

Count: 1 795a5549c36a8666b95c2bb56e79ce587ef56e90fd9a436b78d822192bb9025a

Open Ports Detected

110 111 143 2082 2083 2086 2087 21 26 443 465 53 587 80 8888 993 995

CVEs Detected

CVE-2016-10735 CVE-2018-14040 CVE-2018-14042 CVE-2018-20676 CVE-2018-20677 CVE-2019-8331

Map

Whois Information

• NetRange: 166.0.0.0 - 166.1.255.255
• CIDR: 166.0.0.0/15
• NetName: ACE-NETWORK-10
• NetHandle: NET-166-0-0-0-1
• Parent: NET166 (NET-166-0-0-0-0)
• NetType: Direct Allocation
• OriginAS: AS11798
• Organization: Ace Data Centers, Inc. (ADC-96)
• RegDate: 2012-07-10
• Updated: 2023-04-19
• Ref: https://rdap.arin.net/registry/ip/166.0.0.0
• OrgName: Ace Data Centers, Inc.
• OrgId: ADC-96
• Address: 727 North 1550 East
• Address: Ste 400
• City: Orem
• StateProv: UT
• PostalCode: 84097
• Country: US
• RegDate: 2010-11-02
• Updated: 2023-09-21
• Ref: https://rdap.arin.net/registry/entity/ADC-96
• OrgAbuseHandle: ABUSE8727-ARIN
• OrgAbuseName: Abuse
• OrgAbusePhone: +1-801-851-5540
• OrgAbuseEmail: ipabuse@acedatacenter.com
• OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE8727-ARIN
• OrgTechHandle: ACEAD-ARIN
• OrgTechName: ACE ADMIN
• OrgTechPhone: +1-801-851-5540
• OrgTechEmail: admin@acedatacenter.com
• OrgTechRef: https://rdap.arin.net/registry/entity/ACEAD-ARIN
• RAbuseHandle: INTER189-ARIN
• RAbuseName: InterLIR-ARIN
• RAbusePhone: +49 17 72335293
• RAbuseEmail: ripe@interlir.com
• RAbuseRef: https://rdap.arin.net/registry/entity/INTER189-ARIN
• NetRange: 166.0.224.0 - 166.0.239.255
• CIDR: 166.0.224.0/20
• NetName: IPXO-166-0-224-0-20
• NetHandle: NET-166-0-224-0-1
• Parent: ACE-NETWORK-10 (NET-166-0-0-0-1)
• NetType: Reallocated
• OriginAS:
• Organization: IPXO LLC (IL-845)
• RegDate: 2023-10-24
• Updated: 2023-10-24
• Ref: https://rdap.arin.net/registry/ip/166.0.224.0
• OrgName: IPXO LLC
• OrgId: IL-845
• Address: 3132 State Street
• City: Dallas
• StateProv: TX
• PostalCode: 75204-3500
• Country: US
• RegDate: 2021-03-25
• Updated: 2023-10-10
• Comment: Geofeed https://geofeed.ipxo.com/geofeed.txt
• Ref: https://rdap.arin.net/registry/entity/IL-845
• OrgDNSHandle: IST36-ARIN
• OrgDNSName: IPXO Support Team
• OrgDNSPhone: +1 (650) 564-3425
• OrgDNSEmail: support@ipxo.com
• OrgDNSRef: https://rdap.arin.net/registry/entity/IST36-ARIN
• OrgAbuseHandle: IAMT1-ARIN
• OrgAbuseName: IPXO Abuse Management Team
• OrgAbusePhone: +1 (650) 934-1667
• OrgAbuseEmail: abuse@ipxo.com
• OrgAbuseRef: https://rdap.arin.net/registry/entity/IAMT1-ARIN
• OrgTechHandle: IST36-ARIN
• OrgTechName: IPXO Support Team
• OrgTechPhone: +1 (650) 564-3425
• OrgTechEmail: support@ipxo.com
• OrgTechRef: https://rdap.arin.net/registry/entity/IST36-ARIN

Links to attack logs

anonymous-proxy-ip-list-2024-04-05 anonymous-proxy-ip-list-2024-04-10 anonymous-proxy-ip-list-2024-04-04 anonymous-proxy-ip-list-2024-04-08 anonymous-proxy-ip-list-2024-04-02 anonymous-proxy-ip-list-2024-04-09 anonymous-proxy-ip-list-2024-04-03 anonymous-proxy-ip-list-2024-04-07 anonymous-proxy-ip-list-2024-03-31 anonymous-proxy-ip-list-2024-04-01 anonymous-proxy-ip-list-2024-03-30 anonymous-proxy-ip-list-2024-04-11