172.67.21.232 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 172.67.21.232 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 12/100

Host and Network Information

• View other sources: Spamhaus VirusTotal

• Country: United States
• Network:
• Noticed: 1 times
• Protocols Attacked: Anonymous Proxy
• Passive DNS Results: www.miss148.com u.kueezrtb.com resources.kvaser.com otrack.kueezrtb.com challenge.plcschools.org.cdn.cloudflare.net test.miss148.com passwords.plcschools.org.cdn.cloudflare.net rt.kueezrtb.com pimstage.kvaser.com spo.kueezrtb.com miss148.com track.kueezrtb.com site.accureference.com gtrack.kueezrtb.com static.kueezrtb.com kueezrtb.com myapps.plcschools.org.cdn.cloudflare.net accureference.com g-v3.lagoon.soracom.io jp-v3-staging.lagoon.soracom.io jp-v3-dev.lagoon.soracom.io peercomm.thetavideoapi.com www.thetavideoapi.com www.kvaser.com kvaser.com qa-fi-ink-caecom-2424-adding-sphere-cl-t.az.ssdgws.co.uk qa-gb-9q8-testfbmvp-0000sdidemo.az.ssdgws.co.uk thetavideoapi.com qa-dk-vxd-fbmvp-6035-envvarfortoggle.az.ssdgws.co.uk player.thetavideoapi.com dashboard.mosaic.soracom.io www.mothership.sg static.mothership.sg mothership.sg ragoncanvas.com ge2020.mothership.sg staging.mothership.sg

Malware Detected on Host

Count: 15 3c81aa98c7d3d9649d02bdc8315f587b8c891c64b8914462e36e6edfcd2b22f4 ff2af9076452e068832450ec031e9dea1c11075a0bddedf079523508331d910e 11acd6e68ff21c7eee8c0c6d6c20fc3bbf18f039ff97c8122e0a20d1259451ed 41836ac12929d45dba9739f713c8ae036995ec3c2038558f4db159800b1e791e 690e9518a9df3c264390b3723b412844b48f53db5068c4f95942c0f0855b0c44 857b13681db230b0dc0ae961fed796b763e58f824d97c8a2da22c180359ef5fe ada4ef5ddc2147aced4a1eabe827469574b27817c72fb2cc0f68fbdb748b4b50 da6b33401a03f4b1b9a0efaffe16a32bbeef3c374e1a1d3b818aaa6ad75727b5 377d96ffea31252f0c1ef8f7500badcf06f3e29566aecf9c302dc4f2249050f7 a9eebcc5ffb4b25cf642e843384b5216fe21d0b5abffcdcc4a29c7061efadb36

Open Ports Detected

2082 2083 2086 2087 443 80 8080 8880

Map

Whois Information

• NetRange: 172.64.0.0 - 172.71.255.255
• CIDR: 172.64.0.0/13
• NetName: CLOUDFLARENET
• NetHandle: NET-172-64-0-0-1
• Parent: NET172 (NET-172-0-0-0-0)
• NetType: Direct Allocation
• OriginAS: AS13335
• Organization: Cloudflare, Inc. (CLOUD14)
• RegDate: 2015-02-25
• Updated: 2024-09-04
• Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
• Comment: Geofeed: https://api.cloudflare.com/local-ip-ranges.csv
• Ref: https://rdap.arin.net/registry/ip/172.64.0.0
• OrgName: Cloudflare, Inc.
• OrgId: CLOUD14
• Address: 101 Townsend Street
• City: San Francisco
• StateProv: CA
• PostalCode: 94107
• Country: US
• RegDate: 2010-07-09
• Updated: 2024-11-25
• Ref: https://rdap.arin.net/registry/entity/CLOUD14
• OrgRoutingHandle: CLOUD146-ARIN
• OrgRoutingName: Cloudflare-NOC
• OrgRoutingPhone: +1-650-319-8930
• OrgRoutingEmail: noc@cloudflare.com
• OrgRoutingRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
• OrgTechHandle: ADMIN2521-ARIN
• OrgTechName: Admin
• OrgTechPhone: +1-650-319-8930
• OrgTechEmail: rir@cloudflare.com
• OrgTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
• OrgNOCHandle: CLOUD146-ARIN
• OrgNOCName: Cloudflare-NOC
• OrgNOCPhone: +1-650-319-8930
• OrgNOCEmail: noc@cloudflare.com
• OrgNOCRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
• OrgAbuseHandle: ABUSE2916-ARIN
• OrgAbuseName: Abuse
• OrgAbusePhone: +1-650-319-8930
• OrgAbuseEmail: abuse@cloudflare.com
• OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
• RAbuseHandle: ABUSE2916-ARIN
• RAbuseName: Abuse
• RAbusePhone: +1-650-319-8930
• RAbuseEmail: abuse@cloudflare.com
• RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
• RNOCHandle: NOC11962-ARIN
• RNOCName: NOC
• RNOCPhone: +1-650-319-8930
• RNOCEmail: noc@cloudflare.com
• RNOCRef: https://rdap.arin.net/registry/entity/NOC11962-ARIN
• RTechHandle: ADMIN2521-ARIN
• RTechName: Admin
• RTechPhone: +1-650-319-8930
• RTechEmail: rir@cloudflare.com
• RTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN

Links to attack logs

anonymous-proxy-ip-list-2025-06-23 anonymous-proxy-ip-list-2025-06-22 anonymous-proxy-ip-list-2025-06-24 anonymous-proxy-ip-list-2025-06-25