172.67.70.139 Threat Intelligence and Host Information

Aug 22, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 172.67.70.139 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 10/100

Host and Network Information

View other sources: Spamhaus VirusTotal

Country: United States
Network:
Noticed: 1 times
Protocols Attacked: Anonymous Proxy
Passive DNS Results: www.sandguest.com hub.herzlich.app dnbs1.clopri.com platform.singlekey.com cms.ulife.me minio.dazen.pt web.stg.dohands.com rentals.bubuhomes.com cdn.herzlich.app www.urbanblissboutiqueguesthouse.com sbmegabites.co.uk www.ballzaa1.com www.casamiravalle.com de-it.movieposterdb.com connect.ulife.me dreamtravelyaari.com moneytransfers.com dev.moneytransfers.com amiliacasas.bookonline.pro www.almarinae.es salihinacademy.com messaging.lifespeak.io www.cestodagavea.pt www.masvilobi.com dulcineabranosera.es thewanderfulltraveler.com algardunhastone.com inversiones1991ltd.com de-cm.movieposterdb.com superuser.openinfra.org www.thewanderfulltraveler.com buynexagen.com souscrire.placement-direct.fr www.letspack.es vacationrentalslbi.com appimage.tvdigital.de vacanzenettuno.bookonline.pro www.apartamentos-murcia.es www.renuevaenbuendia.es metadao.fi staging.graphql.metadao.fi api.aikeji.vip reserva.alojamientosengalicia.com www.macaronesialpasuites.com testschnatter.ulife.me bahariyeart.com clients.placement-direct.fr grit2025.com openinfra.org www.openinfra.org www.malagaandhousing.com dex.onxrp.com www.apartamentosturisticos.org cms.bookonline.pro www.naafdoppenshop.com www.poderelacasaccia.it b2b.racer1927.com preview2.adnami.io www.chemiq.pl www.globalcarnica.com www.gmcrafts.co.uk fabricworm.com www.patio25.com k2t.findyourhalf.live www.villasalquilervacacional.com www.casamonti.es www.pascualsherparentals.com support.itdconsulting.com blog.hunny.finance www.casaflex.es helpy-bot-webapp.israeltechguard.org www.ria-formosa-pineview.com reserva.solmediterraneo.com booking.enebholidays.com weazelnews.ulife.me cloudflare3.avaibook-booking.com www.cocopanda.se evisa.gov.ph dev.ulife.me meraki.itdconsulting.com app.singlekey.com singlekey.com tech.dohands.com no15executivetravel.co.uk www.no15executivetravel.co.uk usd.zary-joyas.com dashboard.goswift.ly ouvrir-super-livret.placement-direct.fr main–eecol–hlxsites.hlx-orch.live www.singlekey.com info.goswift.ly app.tvdigital.de polareanuevopolanco.grupolar.com.mx admin.ulife.me 5hs.findyourhalf.live 65g.findyourhalf.live 56l.findyourhalf.live a5e.findyourhalf.live img.viu.to assets.viu.to viu.to shanghai-pcg.evisa.gov.ph customerservice.ecredable.com test.no15executivetravel.co.uk moncayo.grupolar.com.mx grupolar.com.mx qualif.neofa.com docs.briloerp.com fgarpo.com fametv.info download.vet-ebooks.com kudiwave.me logs-beats.placement-direct.fr bet88.us bukukita.perpuskita.id rvq.findyourhalf.live 1p9.findyourhalf.live 91f.findyourhalf.live tcy.findyourhalf.live b7g.findyourhalf.live medicareplann.com gmv.findyourhalf.live 9qq.findyourhalf.live 8pd.findyourhalf.live ik7.findyourhalf.live 52x.findyourhalf.live vco.findyourhalf.live e6z.findyourhalf.live edv-au.cloud capicconnect.com itdconsulting.com www.itdconsulting.com mbox.itdconsulting.com chemiq.pl u31.com thepeoplescube.com www.dohands.com web.develop.dohands.com blog.dohands.com web.main.dohands.com hub.dohands.com providers.getmylo.com app-staging.adnami.io app-dev.adnami.io app.adnami.io auth-staging.adnami.io auth.adnami.io app-e2e-1.adnami.io app-dev-staging.adnami.io app-e2e.adnami.io dao.hunny.finance dhuf8.com app-e2e-3.adnami.io app-e2e-2.adnami.io develop-web.dohands.com adnami.io api.hunny.finance abgc.org.au assets.placement-direct.fr affiliate.perpuskita.id office.itdconsulting.com fabricator.supaliteroof.co.uk www.pulsarstrategies.com spellcaster.sh tibiona.eu staging-env-management.bandpencil.com business.ecredable.com dohands.com link.measurit.com server-ovh.tricel.fr www.nlsdns.net www.ettorevulcano.com nft.onxrp.com wlxd.shop apricus.atcmedical.com www.theoneiota.com web.perpuskita.id www.perpuskita.id admin.perpuskita.id belanja.perpuskita.id appsetupllc.com trytheletsketo.com paydo.com blocked.paydo.com checkout.paydo.com measurit.com www.measurit.com 3i9.findyourhalf.live mw4.findyourhalf.live e49.findyourhalf.live wf7.findyourhalf.live 4bm.findyourhalf.live 1n5.findyourhalf.live 7w6.findyourhalf.live theoneiota.com espace-client.placement-direct.fr help.briloerp.com demoweb.briloerp.com wiki.briloerp.com pkg.briloerp.com 168kinggame.com eot.bandpencil.com account.paydo.com www.modurast.is www.pveuk.com chronopost-colis-suivi.com modurast.is atmbet-24.com onxrp.com status.drivvn.com mobile.tvdigital.de www.mcpehub.org xpert9.com www.jabelpack.com perpuskita.id lagrimasmagicas.com totopatch.net www.sustitutas.xxx search.solomon.tech app.hamiltech.io trustmark.inc hosting.perpuskita.id cwp.perpuskita.id go.perpuskita.id riiosbiicgpge.com www.hamiltech.io fortius.com.au ethgw.dashible.com api.hkhsalipay.com.hk solomon.tech hamiltech.io www.zary-joyas.com zary-joyas.com php7-mobile.tvdigital.de www.supaliteroof.co.uk supaliteroof.co.uk tvdigital.de www.tricel.fr tricel.fr p.scrapcarcomparison.co.uk picxly.pw www.tvdigital.de webrn.co go.scrapcarcomparison.co.uk oparana.com.br www.gymfitforme.com hunny.finance www.cologne-timing.de bookonline.pro www.car-vision.net letspack.es gymfitforme.com minio.hunny.finance pulsarstrategies.com francecasino2.com gallery.virco.com polimer-stroy.online benameiran.biz ismgmc.org kkoo789.com stg-0.scrapcarcomparison.co.uk placement-direct.fr marketing.virco.com scrapcarcomparison.co.uk mensclosetclothing.net mcpehub.org neofa.com www.racer1927.com dl.benameiran.biz www.palmettosurety.net palmettosurety.net cn.benameiran.biz racer1927.com cdn1.racer1927.com sav.racer1927.com st.thattravelsolution.com www.asian.mx www.umsltritonstore.com www.kanal5.com.mk www.dashible.com sustitutas.xxx firstshopth.com ibkrcrypto.com axa.vizionassist.co.uk www.ropeshop.ca www.dacsboutique.com www.intel-school.com www.cosmedismile.com.au uspc.co.uk www.doc-smilemaker.de marumaru220.com ropeshop.ca ipsplumbingproducts.com secure.leoawards.com www.leoawards.com leoawards.com skydream365.com minimuffins.com goldendragonwhiteheaven.co.uk www.thruthebible.xyz www.mugmonster.uk www.capicconnect.com www.atcmedical.com knowledge.justradiators.co.uk content.thruthebible.xyz curs.artadeateiubi.ro www.silhouetteparfaite.com api.zoogame.app zoogame.app new007.online app.bandpencil.com management.bandpencil.com www.bandpencil.com firmenlauf.cologne-timing.de briloerp.com www.cfdt-bpce.fr bhgks.com blog.atcmedical.com www.buero-zeltweg.at florencefriedchicken.co.uk static.webteb.net pauwelsconsulting.com a.findyourhalf.live lifespeak.io drivvn.com help.through6.com www.almiria.co.ke usatomv.com batiskaf.eu ecommercedesucesso.com.br offersearch.com vers-vd-pers.nl spiceloungeayr.com atcmedical.com demo-cracy.co ebace.com supergame.one senbbqnewport.co.uk thattravelsolution.com challenges.dk reposify.com bandpencil.com www.morada.eco ginasiovirtual.com datasoftlogic.com www.frontiercoffee.co.za flowt.io www.napitdesktop.co.uk caue-guyane.sdmig.fr serveur-caue.sdmig.fr web.sdmig.fr serveur.sdmig.fr apps.sdmig.fr www.sdmig.fr mac.sdmig.fr www.goethe-verlag.de cosmedismile.com.au expert.luenendonk.de www.justradiators.co.uk justradiators.co.uk sfa.virco.com etcze.club xtracdashboards.com findyourhalf.live casinowulkan-online.click 96star.asia sizzlersleighonline.co.uk yavendes.com www.drcousensglobal.com accountdev.through6.com api.demo-cracy.co justfreeslide.com imione.club www.imione.club silhouetteparfaite.com www.pubgmobileucwin.com account.through6.com www.cbdclinicals.com internship.digitalready.co api-staging.demo-cracy.co meleeyun.com ecredable.com www.reposify.com frontiercoffee.co.za thruthebible.xyz topdoesun.com umsltritonstore.com cocopanda.se www.remny.com accountdev2.through6.com www.vacationrentalslbi.com secret.imione.club red.digitalready.co wrdie.com hypnoticpoker.com www.hypnoticpoker.com www.cornishliquids.co.uk cornishliquids.co.uk www.artadeateiubi.ro artadeateiubi.ro app.govstatus.site www.darseys.com api.imione.club mir-instrumenta.ru serendeputy.com www.cebusecond.com.cdn.cloudflare.net animesorion.vip newenglandinnovations.com creditor.ecredable.com kanal5.com.mk cbdclinicals.com www.intel-school.com.cdn.cloudflare.net darseys.com mycertix.com www.luenendonk.de luenendonk.de www.remny.com.cdn.cloudflare.net service.virco.com www.virco.com products.virco.com www.bootsonboard.com docs.reposify.com hartford.im www.vacationrentalslbi.com.cdn.cloudflare.net www.4betlight.com.cdn.cloudflare.net db.govstatus.site cabo.bootsonboard.com www.impossible.sg www.youxel.com istanbul.net ic168168.com www.drcousensglobal.com.cdn.cloudflare.net www.mugmonster.uk.cdn.cloudflare.net paardenartikelen-hendri.nl www.gigstation.ph gigstation.ph uat2.govstatus.site youxel.com www.shop.truhealthsuccess.com shop.truhealthsuccess.com www.redrabbitracers.com.cdn.cloudflare.net www.truhealthsuccess.com truhealthsuccess.com hayatigrillzonline.com staging.packlinq.se packlinq.se www.packlinq.se www.workwearcity.co.uk www.trivia.com katitube.com 2021.bootsonboard.com govstatus.site slay.video letterzenzo.nl quikads.com.bd www.quikads.com.bd detweedelente.nl axiomvaping.com www.cfdt-bpce.fr.cdn.cloudflare.net www.freewilliamsburg.com fmtest.com www.fmtest.com naafdoppenshop.com inhemelsnaam.nl mavendental.com.au virco.com bootsonboard.com denirossheffield.co.uk trivia.com freewilliamsburg.com admiral-avtomaty.download alan.impossible.sg yapansushi.fr impossible.sg eastexcrude.com www.eastexcrude.com dashible.com revealedrecordings.com www.revealedrecordings.com stmode.de.cdn.cloudflare.net support.darait.co.uk marmarisannan.co.uk www.infosecnews.org stat.katitube.com workwearcity.co.uk globalcarnica.com napitdesktop.co.uk josh4congress.com www.josh4congress.com healthyhospitality.com eatwellgrills.ie discountedporn.com www.goethe-verlag.de.cdn.cloudflare.net cpcalendars.dnajj.com.br dnajj.com.br cpcontacts.dnajj.com.br www.dnajj.com.br infosecnews.org uat.govstatus.site madnesscreamery.com

Malware Detected on Host

Count: 9 6782d5439b60934e38aa6335e1ab51d3974de43c2ffaba74751ff875583f20ba cd15319a399a5f37d2ede441d1b4774a7cbe431fe73a49c262cab243ff4ea9ae b6b18c4c1fe078509ebf58414b06e76d4bcdd4595553563bd6f41418f76bd5f0 f15c1fb0ec48fcd1c8071b42da76037089d88aadb78c7fcd64ce6fa845c0e765 d56f5d0a5b2da4fe33822477a8b491f2f80616acb779be2f6632a43119d34ec6 5c9e342f202b09b6ae20b3d5df42086353a6206c5f920837bb9f0317f8c88342 fd5a136080c3629d609845236c3b9f9873164d66299ea7c0a11a4baa4dbd0927 5fe7716cf527f6e7fee906ba24564c73bddffdef7a472cca4346f543374ac1a5 8f7a1dcd89a65c5ed275237db006223166850d213c4f519e35d28198003c7e69

Open Ports Detected

2082 2083 2086 2087 2096 443 80 8080 8443 8880

Map

Whois Information

NetRange: 172.64.0.0 - 172.71.255.255
CIDR: 172.64.0.0/13
NetName: CLOUDFLARENET
NetHandle: NET-172-64-0-0-1
Parent: NET172 (NET-172-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Cloudflare, Inc. (CLOUD14)
RegDate: 2015-02-25
Updated: 2024-09-04
Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
Comment: Geofeed: https://api.cloudflare.com/local-ip-ranges.csv
Ref: https://rdap.arin.net/registry/ip/172.64.0.0
OrgName: Cloudflare, Inc.
OrgId: CLOUD14
Address: 101 Townsend Street
City: San Francisco
StateProv: CA
PostalCode: 94107
Country: US
RegDate: 2010-07-09
Updated: 2024-11-25
Ref: https://rdap.arin.net/registry/entity/CLOUD14
OrgNOCHandle: CLOUD146-ARIN
OrgNOCName: Cloudflare-NOC
OrgNOCPhone: +1-650-319-8930
OrgNOCEmail: noc@cloudflare.com
OrgNOCRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
OrgRoutingHandle: CLOUD146-ARIN
OrgRoutingName: Cloudflare-NOC
OrgRoutingPhone: +1-650-319-8930
OrgRoutingEmail: noc@cloudflare.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
OrgTechHandle: ADMIN2521-ARIN
OrgTechName: Admin
OrgTechPhone: +1-650-319-8930
OrgTechEmail: rir@cloudflare.com
OrgTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
OrgAbuseHandle: ABUSE2916-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-650-319-8930
OrgAbuseEmail: abuse@cloudflare.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
RTechHandle: ADMIN2521-ARIN
RTechName: Admin
RTechPhone: +1-650-319-8930
RTechEmail: rir@cloudflare.com
RTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
RAbuseHandle: ABUSE2916-ARIN
RAbuseName: Abuse
RAbusePhone: +1-650-319-8930
RAbuseEmail: abuse@cloudflare.com
RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
RNOCHandle: NOC11962-ARIN
RNOCName: NOC
RNOCPhone: +1-650-319-8930
RNOCEmail: noc@cloudflare.com
RNOCRef: https://rdap.arin.net/registry/entity/NOC11962-ARIN

Links to attack logs

Share on: