172.67.70.28 Threat Intelligence and Host Information

Sep 30, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 172.67.70.28 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 5/100

Host and Network Information

View other sources: Spamhaus VirusTotal

Country: United States
Network:
Noticed: 1 times
Protocols Attacked: Anonymous Proxy
Passive DNS Results: auth.coinut.com api-blog.farmtopeople.com n8n.coinut.com wiki.itsbrasil.net api-na.coinut.com dmtrace.coinut.com s3-testing.coinut.com email.maillist.coinut.com wsapi.coinut.com balchem.com stahmannwebster.com www.tsrinfo.net www.itsbrasil.net informe.itsbrasil.net radio-stream-relay-lb.hamropatro.com paywebhook.hamropatro.com headscale.hamropatro.com chautari-api-nepal.hamropatro.com kibana-elk.hamropatro.com payapi.hamropatro.com rendertron.hamropatro.com do.farmtopeople.com learn.hamropatro.com chautari-api.hamropatro.com wap88.cc w5.888kpa.com w1.888kpa.com hp-image-cdn.hamropatro.com wombournefishbar.co.uk www.citypay.io almouqranstore.com travel-rule-rampage.coinut.com travel-rule.coinut.com travelrule.coinut.com hexagonroofing.com www.natfy.com natfy.com production.farmtopeople.com api.farmtopeople.com staging.farmtopeople.com test.farmtopeople.com nyc.farmtopeople.com test.avo-token.com www.avo-token.com avo-token.com www.farmtopeople.com www.plus-travel.mk mgmslot777.com distinction-online.co.uk griffinproperty.co farmtopeople.com movie2uhd.com goldeninn-stonebroom.co.uk vpn.hamropatro.com m1.888kpa.com www.girls-in-fetisch.de movies.girls-in-fetisch.de mitglieder.girls-in-fetisch.de members.girls-in-fetisch.de we.hamropatro.com www.acc-new-zonnebrillen.com acc-new-zonnebrillen.com quiz.coconutforlife.org www.coconutforlife.org www.proficosmetics.ru directlyfactory.com l.proficosmetics.ru coconutforlife.org survey.coinut.com g8.888kpa.com g7.888kpa.com g6.888kpa.com g5.888kpa.com w8.888kpa.com g3.888kpa.com g2.888kpa.com g1.888kpa.com w7.888kpa.com 888kpa.com www.888kpa.com 2021.proficosmetics.ru ja.proficosmetics.ru abcmix.com proficosmetics.ru us.fastfrom.com api.cxinpay2021.xyz test.cxinpay2021.xyz www.cxinpay2021.xyz uc.ronramseyauctions.com www.voyagermark.com www.vetrocar.it steam-accounts.ru production.pledgeme.com.au ead.itsbrasil.net steam-account.ru www.hamropatro.com www.moonminer.org moonminer.org www.online-casinos.co.uk online-casinos.co.uk radio-streaming.hamropatro.com bloxhub.gg muabangoquy.com www.cheater.run alexey-shadrin.com vetrocar.it cheater.run new.voyagermark.com p-r-c.com schools4sa.co.za tsrinfo.net android4game.com fastfrom.com ppaving.voyagermark.com citypay.io voyagermark.com inu.farm e.maillist.coinut.com www.bkm-zirndorf.de keyvalue.hamropatro.com 420.weden.com coinnew.live www.pledgeme.com.au wwgimages.starrealms.com downloads.starrealms.com hamropatro.com staging.pledgeme.com.au track.coinut.com starrealms.com diginights.com podcasts.hamropatro.com podcast.hamropatro.com bengarrison.com api-as.coinut.com zaidcrowe.co.uk testing.trackle.co.uk exceldepartment.com www.jbandassociates.biz us-hosting.hamropatro.com sentinelscanner.com wsapi-as.coinut.com meuscommercial.jbandassociates.biz doc.jbandassociates.biz test.creative-inks.com cf.boyjas.info coin.boyjas.info api.boyjas.info wf.boyjas.info dec.api.boyjas.info cdn.boyjas.info download.boyjas.info map.api.boyjas.info www.exceldepartment.com marketplace.hamropatro.com myspuds.xyz practicegator.com pledgeme.com.au roncarpenter.com softwarepundit.com www.fearlessrecords.com meus.jbandassociates.biz polo.co.za www.polo.co.za mindfulpresenter.com www.mindfulpresenter.com trackle.co.uk www.trackle.co.uk cronos.itsbrasil.net www.bkm-zirndorf.de.cdn.cloudflare.net weden.com cadet.coinut.com coinut.com www.coinut.com fearlessrecords.com status.diginights.com wholesomeyumfoods.com www.wholesomeyumfoods.com wp-demo.hamropatro.com report.coinut.com jbandassociates.biz

Malware Detected on Host

Count: 1 5b1ad8f454d16314189c82d605f4cbd7ccba56882faa2fe1df068e131029a6ce

Open Ports Detected

2053 2082 2083 2086 2087 2095 443 80 8080 8443 8880

Map

Whois Information

NetRange: 172.64.0.0 - 172.71.255.255
CIDR: 172.64.0.0/13
NetName: CLOUDFLARENET
NetHandle: NET-172-64-0-0-1
Parent: NET172 (NET-172-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Cloudflare, Inc. (CLOUD14)
RegDate: 2015-02-25
Updated: 2024-09-04
Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
Comment: Geofeed: https://api.cloudflare.com/local-ip-ranges.csv
Ref: https://rdap.arin.net/registry/ip/172.64.0.0
OrgName: Cloudflare, Inc.
OrgId: CLOUD14
Address: 101 Townsend Street
City: San Francisco
StateProv: CA
PostalCode: 94107
Country: US
RegDate: 2010-07-09
Updated: 2024-11-25
Ref: https://rdap.arin.net/registry/entity/CLOUD14
OrgNOCHandle: CLOUD146-ARIN
OrgNOCName: Cloudflare-NOC
OrgNOCPhone: +1-650-319-8930
OrgNOCEmail: noc@cloudflare.com
OrgNOCRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
OrgRoutingHandle: CLOUD146-ARIN
OrgRoutingName: Cloudflare-NOC
OrgRoutingPhone: +1-650-319-8930
OrgRoutingEmail: noc@cloudflare.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
OrgTechHandle: ADMIN2521-ARIN
OrgTechName: Admin
OrgTechPhone: +1-650-319-8930
OrgTechEmail: rir@cloudflare.com
OrgTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
OrgAbuseHandle: ABUSE2916-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-650-319-8930
OrgAbuseEmail: abuse@cloudflare.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
RTechHandle: ADMIN2521-ARIN
RTechName: Admin
RTechPhone: +1-650-319-8930
RTechEmail: rir@cloudflare.com
RTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
RAbuseHandle: ABUSE2916-ARIN
RAbuseName: Abuse
RAbusePhone: +1-650-319-8930
RAbuseEmail: abuse@cloudflare.com
RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
RNOCHandle: NOC11962-ARIN
RNOCName: NOC
RNOCPhone: +1-650-319-8930
RNOCEmail: noc@cloudflare.com
RNOCRef: https://rdap.arin.net/registry/entity/NOC11962-ARIN

Links to attack logs

Share on: