172.64.196.2 Threat Intelligence and Host Information

Share on:
Jul 12, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 172.64.196.2 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 10/100

Host and Network Information

  • View other sources: Spamhaus VirusTotal

  • Country: United States
  • Network: AS13335 cloudflare
  • Noticed: 1 times
  • Protcols Attacked: Anonymous Proxy
  • Passive DNS Results: rewardsgiantusa.com fevermag.com easytrdksa.com spekulasi.com momandworld.com www.momandworld.com rl-vue.pages.dev gmp.com.ar chat.covid19.go.id cdn.covid19.go.id covid19.go.id fren832.card4958483.workers.dev delicate-lab-a156.card4958483.workers.dev www.meothamthuy.com meothamthuy.com agoranoticiamt.com.br officeland.io whatdozigzag.gloriaestefanmexico.com howfarcan.gloriaestefanmexico.com doesyesstyle.gloriaestefanmexico.com couldthewestern.gloriaestefanmexico.com whatskillsdo.gloriaestefanmexico.com candiamonds.gloriaestefanmexico.com whatishidden.gloriaestefanmexico.com pptdrive.xyz repelis24.co leenkus.net play.repelis24.co 5to.me explorenewideas.com www.explorenewideas.com www.blogdepelis.io player.repelis24.co xuty.panparan.com fonti.panparan.com mety.panparan.com leakedbb.com govopendata.com www.aboutnutra.com www.rewardsgiantusa.com repelis.id pivigames.blog hotideiasnetwork.ga verox.pivigames.blog www.movieboxpro.app qd.admetricspro.com animalporn.rocks draxe.com tamilrockers.ws cumbrepuebloscop20.org vivud.com www.practicalmachinist.com safeiosvpn.com login.egy.best xvs9.renropsitto.info www.668833b.com www.egy.best egy.best resultadosdobichotemporeal.com.br fili.cc cdn.leagueofgraphs.com viduba.com watchwrestling.in lasillavacia.com Zombs.io cdngangsta.com unboxingame.com soltana.ma 7ba.ru www.zombs.io appvalley.vip www.cdngangsta.com

Malware Detected on Host

Count: 10 d6b66e2daa5492214e48e17465c4bec6db7bf92f142a95a77ec3121b41939542 23dd1d1c75fc2915835e16c4f86733f70c490dfeb9b42cd91141f6afe00c7547 80261c9906471f02f3eb3fb579afd223e739e9e0f6b36bf46b0d36bab06b785f 89a5edfce0cd724e6adcba57962f0d5eac9c1182699d7fd6ac40bcc21403394e 1cca7f9cd05ee8825984c716fc91fbd97a8082cc99f85f1e40bf82040adcbb99 a5b2151d1260abeb21f9d8bc665f3c38169af65545caca0a07e1b7dd6b4c5fe3 aac4ec8b9a145140a003a8b3c4912394325b26d32826c6c3785e8e641c0de957 2e036c9d2c87f04eb190fe3337729cd99445305803f7ebf9b670ffc8601aa2cb fa16aab32086d5ef662aff5d0cb57868bf6f01dfca730e91b5d7473786e30077 2fc2d966f591134edbed19a05405a9a84d4303f54ba0e3687cb70d2a8bb51e68

Open Ports Detected

2053 2082 2083 2087 2095 443 80 8443 8880

Map

Whois Information

  • NetRange: 172.64.0.0 - 172.71.255.255
  • CIDR: 172.64.0.0/13
  • NetName: CLOUDFLARENET
  • NetHandle: NET-172-64-0-0-1
  • Parent: NET172 (NET-172-0-0-0-0)
  • NetType: Direct Allocation
  • OriginAS: AS13335
  • Organization: Cloudflare, Inc. (CLOUD14)
  • RegDate: 2015-02-25
  • Updated: 2021-05-26
  • Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
  • Ref: https://rdap.arin.net/registry/ip/172.64.0.0
  • OrgName: Cloudflare, Inc.
  • OrgId: CLOUD14
  • Address: 101 Townsend Street
  • City: San Francisco
  • StateProv: CA
  • PostalCode: 94107
  • Country: US
  • RegDate: 2010-07-09
  • Updated: 2021-07-01
  • Ref: https://rdap.arin.net/registry/entity/CLOUD14
  • OrgAbuseHandle: ABUSE2916-ARIN
  • OrgAbuseName: Abuse
  • OrgAbusePhone: +1-650-319-8930
  • OrgAbuseEmail: [email protected]
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
  • OrgNOCHandle: CLOUD146-ARIN
  • OrgNOCName: Cloudflare-NOC
  • OrgNOCPhone: +1-650-319-8930
  • OrgNOCEmail: [email protected]
  • OrgNOCRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
  • OrgTechHandle: ADMIN2521-ARIN
  • OrgTechName: Admin
  • OrgTechPhone: +1-650-319-8930
  • OrgTechEmail: [email protected]
  • OrgTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
  • OrgRoutingHandle: CLOUD146-ARIN
  • OrgRoutingName: Cloudflare-NOC
  • OrgRoutingPhone: +1-650-319-8930
  • OrgRoutingEmail: [email protected]
  • OrgRoutingRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
  • RNOCHandle: NOC11962-ARIN
  • RNOCName: NOC
  • RNOCPhone: +1-650-319-8930
  • RNOCEmail: [email protected]
  • RNOCRef: https://rdap.arin.net/registry/entity/NOC11962-ARIN
  • RAbuseHandle: ABUSE2916-ARIN
  • RAbuseName: Abuse
  • RAbusePhone: +1-650-319-8930
  • RAbuseEmail: [email protected]
  • RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
  • RTechHandle: ADMIN2521-ARIN
  • RTechName: Admin
  • RTechPhone: +1-650-319-8930
  • RTechEmail: [email protected]
  • RTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN

Links to attack logs

anonymous-proxy-ip-list-2023-07-10