172.64.149.3 Threat Intelligence and Host Information

Share on:
Jul 12, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 172.64.149.3 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 10/100

Host and Network Information

  • Tags: tsec

  • View other sources: Spamhaus VirusTotal

  • Country: United States
  • Network: AS13335 cloudflare
  • Noticed: 1 times
  • Protcols Attacked: Anonymous Proxy
  • Passive DNS Results: www.knaufinsulation.no knaufinsulation.no freenetmobile.de isalaimana.altres.com iswebdevqstest.altres.com ismlundquist.altres.com iskbarroga.altres.com isachilukuri.altres.com iswebdevspare1.altres.com iswebdevspare2.altres.com ismunderbrink.altres.com isdsangana.altres.com isaakamine.altres.com isjknight.altres.com iseswinehart.altres.com isthara.altres.com isjbuck.altres.com iskhashimoto.altres.com isagomolka.altres.com issau.altres.com istgiang.altres.com iscwampler.altres.com istle.altres.com mumpbolke.altres.com mumspawar.altres.com mumnramane.altres.com mumspanlekar.altres.com mumvpatil.altres.com mumkmehta.altres.com mumvkhandagale.altres.com mumjshrivastav.altres.com mumsparida.altres.com mumsnaik.altres.com mumkmandave.altres.com mumrwadekar.altres.com mumnbhosale.altres.com mumsnanavate.altres.com mumahaldavanekar.altres.com mumdvaidya.altres.com mumgiyengar.altres.com mumnpatil.altres.com mumskona.altres.com mumpsoundarkar.altres.com mumddicholkar.altres.com mumpaytemp.altres.com mumsbagal.altres.com mumpmenkar.altres.com mumadeshmukh.altres.com mumsmekhe.altres.com mumsmahajan.altres.com mumvyadav.altres.com mumswaje.altres.com mumamahajan.altres.com mumvrane.altres.com mumbchauhan.altres.com mumynaik.altres.com mumpnaik.altres.com mumsdalvi.altres.com mumnchoudhary.altres.com mumiyengar.altres.com mumjnarvariya.altres.com mumdd.altres.com mumsjiwane.altres.com mumukannan.altres.com mumskaradkar.altres.com mumskajale.altres.com mumfansari.altres.com iseswinehartlt.altres.com mumdmankas.altres.com mumkmanga.altres.com apple-news-rta.mlbinfra.com mumqa.altres.com iskschmeichel.altres.com isrreddy.altres.com altres.com www.sun-outdoors.co.uk edge.tenants.mcafee-prod.auth0.com edge.mcafee-prod.auth0.com wt.mcafee-prod.auth0.com mcafee-prod.auth0.com lpsitexas.com www.plandent.lt nra.org wot.nra.org litebit.nl competitions.nra.org int1.dexcom.com philmonlee.com yes.nra.org donate.nra.org www.arkoselabs.com graphics.nra.org lorealparis.sk pennsylvanialumberandbuildingmaterials.com home.nra.org prep.ausimm.com www.arkoselabs.com.cdn.cloudflare.net edge.tenants.aws-aiven-2.auth0c.com wt.aws-aiven-2.auth0c.com aws-aiven-2.auth0c.com www.nicorette.com.my nicorette.com.my

Open Ports Detected

2052 2053 2082 2083 2086 2095 2096 443 80 8080 8880

Map

Whois Information

  • NetRange: 172.64.0.0 - 172.71.255.255
  • CIDR: 172.64.0.0/13
  • NetName: CLOUDFLARENET
  • NetHandle: NET-172-64-0-0-1
  • Parent: NET172 (NET-172-0-0-0-0)
  • NetType: Direct Allocation
  • OriginAS: AS13335
  • Organization: Cloudflare, Inc. (CLOUD14)
  • RegDate: 2015-02-25
  • Updated: 2021-05-26
  • Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
  • Ref: https://rdap.arin.net/registry/ip/172.64.0.0
  • OrgName: Cloudflare, Inc.
  • OrgId: CLOUD14
  • Address: 101 Townsend Street
  • City: San Francisco
  • StateProv: CA
  • PostalCode: 94107
  • Country: US
  • RegDate: 2010-07-09
  • Updated: 2021-07-01
  • Ref: https://rdap.arin.net/registry/entity/CLOUD14
  • OrgAbuseHandle: ABUSE2916-ARIN
  • OrgAbuseName: Abuse
  • OrgAbusePhone: +1-650-319-8930
  • OrgAbuseEmail: [email protected]
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
  • OrgNOCHandle: CLOUD146-ARIN
  • OrgNOCName: Cloudflare-NOC
  • OrgNOCPhone: +1-650-319-8930
  • OrgNOCEmail: [email protected]
  • OrgNOCRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
  • OrgTechHandle: ADMIN2521-ARIN
  • OrgTechName: Admin
  • OrgTechPhone: +1-650-319-8930
  • OrgTechEmail: [email protected]
  • OrgTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
  • OrgRoutingHandle: CLOUD146-ARIN
  • OrgRoutingName: Cloudflare-NOC
  • OrgRoutingPhone: +1-650-319-8930
  • OrgRoutingEmail: [email protected]
  • OrgRoutingRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
  • RNOCHandle: NOC11962-ARIN
  • RNOCName: NOC
  • RNOCPhone: +1-650-319-8930
  • RNOCEmail: [email protected]
  • RNOCRef: https://rdap.arin.net/registry/entity/NOC11962-ARIN
  • RAbuseHandle: ABUSE2916-ARIN
  • RAbuseName: Abuse
  • RAbusePhone: +1-650-319-8930
  • RAbuseEmail: [email protected]
  • RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
  • RTechHandle: ADMIN2521-ARIN
  • RTechName: Admin
  • RTechPhone: +1-650-319-8930
  • RTechEmail: [email protected]
  • RTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN

Links to attack logs

anonymous-proxy-ip-list-2023-07-10 anonymous-proxy-ip-list-2023-06-30 anonymous-proxy-ip-list-2023-07-09 anonymous-proxy-ip-list-2023-06-22 anonymous-proxy-ip-list-2023-07-03