172.67.70.245 Threat Intelligence and Host Information

Sep 23, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 172.67.70.245 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 10/100

Host and Network Information

View other sources: Spamhaus VirusTotal

Country: United States
Network:
Noticed: 1 times
Protocols Attacked: Anonymous Proxy
Passive DNS Results: migration-test.nimaa.edu sorpa.overcastcdn.com rezultatai.vrk.lt allianz.overcastcdn.com www.bagoes.nl stage.nimaa.edu stage.innocode.digital www.traversautoplaza.com traversautoplaza.com metricool.nubapp.com www.rmag.org rrss.odontonet.es metricool.inmoenter.com metricool.berrly.com www.sapmeesters.nl www.ownrootcollective.com social.acumbamail.com metricool.inmovilla.com metricool.softseguros.com dashboard.facilit8.network pi.burnhamlaw.com staging4.burnhamlaw.com volcanotrails.overcastcdn.com octazone.app www.layer4layer.de metricas.valordigital.com.ar bagoes.nl clientes.blow.marketing trekcardhq.com localpartnernetwork.bobwoodrufffoundation.org www.landryblume.com staging.buymystock.com www.staging.buymystock.com webmail.bellahills.com rcm-stage.innocode.digital app.qtimesoftware.com ownrootcollective.com www.buymystock.com www.eos.to www.memorybreak.com staging.ownrootcollective.com apuesteria.com landryblume.com localpartners.bobwoodrufffoundation.org adminacc.bagoes.nl bobwoodrufffoundation.org www.bobwoodrufffoundation.org startrekcards.net mtr.cosasqueregalarle.com www.primemovie.asia login.primemovie.asia primemovie.asia queenpizzapa.com noobyfashion.nl www.gracetransport.com gilmertongrocers.com exampathfinder.com gracetransport.com www.duckmole.shop nimaa.edu www.nimaa.edu www.dicadoemprego.com.br dicadoemprego.com.br www.displaypoint.co.uk adm.duckmole.shop im.duckmole.shop aus.duckmole.shop api.duckmole.shop snackshackspices.co.uk auth.exampathfinder.com dev2.cabinplace.com rmag.org fzz0011.com webu-stage-2.innocode.digital webu-stage.innocode.digital globaldownloadmanager.com m.octazone.app www.cabinplace.com cabinplace.com gioiellirossetti.it www.pagella.de www.mywatchmart.com www.crealien.nl people.innocode.digital webu.innocode.digital novo.criticalhits.com.br videokonferenz.maxxvision.com secure.katburki.com displaypoint.co.uk www.immanueljewelers.com www.tb-ninaus.at babypatta.nl blog.katburki.com paidiatros.com blog.poltava.to www.poltava.to beta.poltava.to depenneveer.nl canonzoomin.com virtualpropertiesworld.ca thats-normal.com makkahlive.net www.paidiatros.com staging.burnhamlaw.com www.lesliereutter.de memorybreak.com api.carfellows.com gamershomes.com pasangbola.online umbarato.com community.exampathfinder.com neurolang.org feedback.lesliereutter.de umbarato.com.br www.torogrow.com colinmarcel.xyz gn-bakken.nl sapmeesters.nl www.mainwp.dev russia.carfellows.com wwewines.com www.sinteg.cat www.wtfskins.com eos.to w88vipkr.com www.nikhox.com term-insurance.bimakaro.in www.kcrconsultants.com natuurwinkelfrancine.be terminsuranceuat.bimakaro.in writestepswriting.net admin.poltava.to beta.juegocontrola.com tariff.greenwoods.in bnnrs.me unz.org newsite.greenwoods.in healthdevapi.bimakaro.in app.funnelscripts.com www.bimakaro.in i1.poltava.to www.criticalhits.com.br declaration.greenwoods.in www.burnhamlaw.com api.bimakaro.in beta.professionalmuscle.com www.orgonitespoa.com.br novo.orgonitespoa.com.br orgonitespoa.com.br bimakaro.in poltava.to web.bimakaro.in torstar.innocode.digital shop.scantech.com support.scantech.com hhi.overcastcdn.com uat.bimakaro.in healthuatapi.bimakaro.in cmedical-en.innocode.digital cmedical-se.innocode.digital cmedical.innocode.digital grafana.capacify.se staging.carfellows.com healthapi.bimakaro.in health.bimakaro.in burnhamlaw.com mosaicdevel.digitalinnovations.com.au www.canonzoomin.com cdn6.jeniusplay1.com cdn5.jeniusplay1.com cdn4.jeniusplay1.com cdn3.jeniusplay1.com cdn2.jeniusplay1.com www.carfellows.com www.exporee.juegocontrola.com exporee.juegocontrola.com criticalhits.com.br kcrconsultants.com www.scantech.com cdn-hesselberg.innocode.digital 2020.neurolang.org snl2020.neurolang.org info.carfellows.com www.mrsumkin.com.ua italy.carfellows.com japan.carfellows.com antarctica.carfellows.com greenland.carfellows.com mallorca.carfellows.com www.nuova-dimensione.it frettabladid.overcastcdn.com jeniusplay1.com norsklektorlag.innocode.digital cdn1.jeniusplay1.com successliveauction.com mainwp.dev www.successliveauction.com.cdn.cloudflare.net prometheus.capacify.se www.unz.org paintline.digitalinnovations.com.au www.improvevideostudio.com carfellows.com holmen.innocode.digital eksportkreditt-stage.innocode.digital photos.clarinea.fr idrottsochsamhalle.innocode.digital videokonferenz.maxxvision.com.cdn.cloudflare.net profile.capacify.se vrk.lt budstikka.innocode.digital capacify.se www.tb-ninaus.at.cdn.cloudflare.net crealien.nl fiji.carfellows.com katburki.com.cdn.cloudflare.net www.shaungroves.com shaungroves.com app.apphud.com backoffice.apphud.com members.funnelscripts.com mrsumkin.com.ua toprabais.ca www.toprabais.ca apphud.com bellahills.com balancetechnology.com conversionvoodoo.com juegocontrola.com skultunahotell.se digitalinnovations.com.au metricool.com wtfskins.com mywatchmart.com torogrow.com clarinea.fr overcastcdn.com greenwoods.in qtimesoftware.com www.lotterybd.co.uk lotterybd.co.uk nuova-dimensione.it livemosaic.digitalinnovations.com.au mosaic.digitalinnovations.com.au dinicoladesign.com improvevideostudio.com qicraft.innocode.digital cdn-qicraft.innocode.digital crossroadscafetakeaway.com www.groenedaken.net groenedaken.net moelven-quarterly-report.innocode.digital kibana.capacify.se vrtual.katcommunications.com professionalmuscle.com www.professionalmuscle.com admin.capacify.se prod01.innocode.digital redirectlink.minutodaseguranca.blog.br scantech.com join-slack.apphud.com findyourowntrade.com www.minutodaseguranca.blog.br minutodaseguranca.blog.br innocode.digital www.203k.org 203k.org www.vrk.lt tracker.metricool.com www.cuningham.com cuningham.com cdn.lotterybd.co.uk

Malware Detected on Host

Count: 14 45b4b3895d8c1cf3591089e40a523329c0590de95ce2e54e72575fee187c6560 066b383774003e97d24ada346b584bf1c34b7624588533747dc2871ce922d545 9622a1bd5d3c52bd0a922a369be6fe8224bccd0f84e5b9054ad7556a61a9293f d7f9babd1770e88ffc74d8626328fba84a09cf05e23ff80298811797b6400246 cb09809a80738287c92756a0ac9c2f28c3423b850706a899889816a3ac0f543f 2046d8dc8a50cfbb3bc35dc94b24a2da9cc9888267eddffe23af0416041fece6 5241f19c576c85e433c08813a746ffea0fd6e675c9d3d5e5fc6c62d053e360ca d21da738295076d7cd2bc494c34961fced3840547bd5759179a1fea2a9cc1b85 d3a23ed1d0f8a6929435e9b6787ddb66fc3a0f75166468d17266ad0d281daab7 00639e70cc90ad0b1d6358c65ed4213b2e9e5dba7d2e692dcbe376dda2759dae

Open Ports Detected

2052 2053 2082 2083 2086 2087 2096 443 80 8080 8443 8880

Whois Information

NetRange: 172.64.0.0 - 172.71.255.255
CIDR: 172.64.0.0/13
NetName: CLOUDFLARENET
NetHandle: NET-172-64-0-0-1
Parent: NET172 (NET-172-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Cloudflare, Inc. (CLOUD14)
RegDate: 2015-02-25
Updated: 2024-09-04
Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
Comment: Geofeed: https://api.cloudflare.com/local-ip-ranges.csv
Ref: https://rdap.arin.net/registry/ip/172.64.0.0
OrgName: Cloudflare, Inc.
OrgId: CLOUD14
Address: 101 Townsend Street
City: San Francisco
StateProv: CA
PostalCode: 94107
Country: US
RegDate: 2010-07-09
Updated: 2024-11-25
Ref: https://rdap.arin.net/registry/entity/CLOUD14
OrgNOCHandle: CLOUD146-ARIN
OrgNOCName: Cloudflare-NOC
OrgNOCPhone: +1-650-319-8930
OrgNOCEmail: noc@cloudflare.com
OrgNOCRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
OrgRoutingHandle: CLOUD146-ARIN
OrgRoutingName: Cloudflare-NOC
OrgRoutingPhone: +1-650-319-8930
OrgRoutingEmail: noc@cloudflare.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
OrgTechHandle: ADMIN2521-ARIN
OrgTechName: Admin
OrgTechPhone: +1-650-319-8930
OrgTechEmail: rir@cloudflare.com
OrgTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
OrgAbuseHandle: ABUSE2916-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-650-319-8930
OrgAbuseEmail: abuse@cloudflare.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
RTechHandle: ADMIN2521-ARIN
RTechName: Admin
RTechPhone: +1-650-319-8930
RTechEmail: rir@cloudflare.com
RTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
RAbuseHandle: ABUSE2916-ARIN
RAbuseName: Abuse
RAbusePhone: +1-650-319-8930
RAbuseEmail: abuse@cloudflare.com
RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
RNOCHandle: NOC11962-ARIN
RNOCName: NOC
RNOCPhone: +1-650-319-8930
RNOCEmail: noc@cloudflare.com
RNOCRef: https://rdap.arin.net/registry/entity/NOC11962-ARIN

Links to attack logs

Share on: