188.114.98.138 Threat Intelligence and Host Information

Jun 19, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 188.114.98.138 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 40/100

Host and Network Information

Mitre ATT&CK IDs: T1106 - Native API
Tags: 0c87j01orwjy, arguments, arial, body, callee, cdfunction, cfappsselector, click, closure library, cloudflare apps, complete, container, copyright, date, ddfunction, deploy now, false, function, hash, helvetica, helvetica neue, html, html5, kefunction, lefunction, menu, menubutton, n cloudflareapp, number, preview, promise, regexp, reset css, script, scroll, selector, specificity, string, symbol, true, visible, webpackrequire, windows vps, xdfunction, zcdixcykgz6p
View other sources: Spamhaus VirusTotal

Country: Netherlands
Network: AS13335 cloudflare
Noticed: 5 times
Protocols Attacked: Anonymous Proxy

Malware Detected on Host

Count: 3 22d36a685761e672456437ebb860091b99709a0142bb07017d86938cc8bd770f 2b2fddcc326427904e395b5146a324c7705b7c522e8c27cda6b415162e984151 8876da2a8d706f474b482f36240b30518714f3791517398f58186df42f8f5ef7

Open Ports Detected

2082 2083 2086 2087 2095 443 80 8080 8443 8880

Map

Whois Information

inetnum: 188.114.96.0 - 188.114.99.255
netname: CLOUDFLARENET-EU
descr: CloudFlare, Inc.
descr: 101 Townsend Street, San Francisco, CA 94107, US
descr: +1 (650) 319-8930
descr: https://cloudflare.com/
country: US
admin-c: CAC80-RIPE
tech-c: CTC6-RIPE
status: ASSIGNED PA
mnt-by: MNT-CLOUDFLARE
mnt-lower: MNT-CLOUDFLARE
mnt-routes: MNT-CLOUDFLARE
created: 2015-10-16T16:26:10Z
last-modified: 2015-10-16T16:26:10Z
person: Cloudflare Abuse Contact
address: Viktualienmarkt Rosental 7 80331 Munchen, DE
phone: +49 89 2555 2276
nic-hdl: CAC80-RIPE
mnt-by: MNT-CLOUDFLARE
created: 2012-06-01T23:27:49Z
last-modified: 2022-04-21T01:07:44Z
person: Cloudflare Technical Contact
address: Viktualienmarkt Rosental 7 80331 Munchen, DE
phone: +49 89 2555 2276
nic-hdl: CTC6-RIPE
mnt-by: MNT-CLOUDFLARE
created: 2012-06-01T23:35:57Z
last-modified: 2022-04-21T01:07:28Z
route: 188.114.98.0/24
origin: AS13335
mnt-by: MNT-CLOUDFLARE
created: 2020-06-15T18:05:37Z
last-modified: 2020-06-15T18:05:37Z

Links to attack logs

Share on: