172.64.106.16 Threat Intelligence and Host Information

Share on:

General

This page contains threat intelligence information for the IPv4 address 172.64.106.16 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 10/100

Host and Network Information

  • View other sources: Spamhaus VirusTotal

  • Country: United States
  • Network: AS13335 cloudflare
  • Noticed: 1 times
  • Protcols Attacked: Anonymous Proxy
  • Passive DNS Results: herofherlittl.com 42fvsn9.cn hjbed.com bj-share.info familysimulators.io tdalabamamag.com bnitainancity.com.tw sportstech.ch www.sportstech.ch www.linkspreed.com.cdn.cloudflare.net calculomates.com outlawgame.ir weeklyhype.com backlist24.com xyz.ng wp.1z2x1z.eu.org nitroscans.com eddprepaidcharge.com www.shorturl.at shorturl.at openwrd.com www.openwrd.com animeidhentai.com movie.xxxindianporn.pro xxxindianporn.pro extramovies.casa crimeisdown.com xnxx.irish remitano.com gowatchseries.movie www.repelisplus.vip cdn.lr-ingest.io clk.cash poster.pornohans.com www.pornohans.com images2.pornohans.com static.pornohans.com images1.pornohans.com sebasiamex.com pornohans.com ms-7.forgetmylife.info ms-64.forgetmylife.info ms-48.forgetmylife.info ms-77.forgetmylife.info ms-17.forgetmylife.info ms-53.forgetmylife.info ms-36.forgetmylife.info ms-37.forgetmylife.info ms-20.forgetmylife.info ms-14.forgetmylife.info ms-22.forgetmylife.info ms-80.forgetmylife.info forgetmylife.info backupvpn.com likemyhistory.info savingsguru.ca www.slickfluide.com slickfluide.com viduba.com

Malware Detected on Host

Count: 7 8c56dc9a42f0e57fd5a3a12b1b6599ccb88c2a600749c814babf354425b99b4d 298dd4f7c3fa73a852198b537442aafb0480d9fac8c22ad6888defd54fee123f 84a42a356582b9c50e504495a3d7bc54b04b36e79d7d778f31e663c7ef930627 cba97c315013d38cce9e7f237ea302b99c6bfe6eb61be82a2f5abc666524d47b 7feae1f7c6bcb69e8983a532ba5089b4a4f6a35e3abb3e8e78ef5e60f2204998 bf412c015f51244b45f9ca2a1ba1e001c850e32fe6e6940dce115c5f2c8847e7 dbf8db5de300d431017cc52014e12681f661af133bb9ffed5d158ad44f1d7df2

Open Ports Detected

2083 443 80 8080

Map

Whois Information

  • NetRange: 172.64.0.0 - 172.71.255.255
  • CIDR: 172.64.0.0/13
  • NetName: CLOUDFLARENET
  • NetHandle: NET-172-64-0-0-1
  • Parent: NET172 (NET-172-0-0-0-0)
  • NetType: Direct Allocation
  • OriginAS: AS13335
  • Organization: Cloudflare, Inc. (CLOUD14)
  • RegDate: 2015-02-25
  • Updated: 2021-05-26
  • Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
  • Ref: https://rdap.arin.net/registry/ip/172.64.0.0
  • OrgName: Cloudflare, Inc.
  • OrgId: CLOUD14
  • Address: 101 Townsend Street
  • City: San Francisco
  • StateProv: CA
  • PostalCode: 94107
  • Country: US
  • RegDate: 2010-07-09
  • Updated: 2021-07-01
  • Ref: https://rdap.arin.net/registry/entity/CLOUD14
  • OrgTechHandle: ADMIN2521-ARIN
  • OrgTechName: Admin
  • OrgTechPhone: +1-650-319-8930
  • OrgTechEmail: [email protected]
  • OrgTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
  • OrgRoutingHandle: CLOUD146-ARIN
  • OrgRoutingName: Cloudflare-NOC
  • OrgRoutingPhone: +1-650-319-8930
  • OrgRoutingEmail: [email protected]
  • OrgRoutingRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
  • OrgNOCHandle: CLOUD146-ARIN
  • OrgNOCName: Cloudflare-NOC
  • OrgNOCPhone: +1-650-319-8930
  • OrgNOCEmail: [email protected]
  • OrgNOCRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
  • OrgAbuseHandle: ABUSE2916-ARIN
  • OrgAbuseName: Abuse
  • OrgAbusePhone: +1-650-319-8930
  • OrgAbuseEmail: [email protected]
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
  • RAbuseHandle: ABUSE2916-ARIN
  • RAbuseName: Abuse
  • RAbusePhone: +1-650-319-8930
  • RAbuseEmail: [email protected]
  • RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
  • RNOCHandle: NOC11962-ARIN
  • RNOCName: NOC
  • RNOCPhone: +1-650-319-8930
  • RNOCEmail: [email protected]
  • RNOCRef: https://rdap.arin.net/registry/entity/NOC11962-ARIN
  • RTechHandle: ADMIN2521-ARIN
  • RTechName: Admin
  • RTechPhone: +1-650-319-8930
  • RTechEmail: [email protected]
  • RTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN

Links to attack logs

anonymous-proxy-ip-list-2023-06-22