188.114.99.202 Threat Intelligence and Host Information

Oct 24, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 188.114.99.202 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 40/100

Host and Network Information

Tags: 0 report, aaaa, accept, address, adformatplain, adnetworks, a domains, adposbottom, age7200 path, agent tesla, alexa top, all octoseek, all scoreblue, analyze, analyzer paste, analyzer threat, anchor, anchor href, anchor hrefs, apache, apple ios, april, artro, as196763, as44273 host, as46606, ascii text, asn as16509, attack, awful, b body, body, body doctype, body length, bq jun, bundled, cellbrite, certificate, cisco umbrella, coalition, code, communicating, contacted, contacted urls, cookie, copy, core, country, creation date, crypto, customer, cyber threat, date, de indicators, #discordwallets, div div, div section, dnssec, domain, domains, download, emails, encrypt, entity, entries, execution, fake update, february, files, for privacy, generic malware, germany asn, germany unknown, gmbh version, gmt connection, gmt content, gmt max, hacktool, hashes, historical ssl, hostname, hostnames, house.mo.gov, hrefs, html document, html info, httponly, iana id, idat loader, impressum, installer, internet storm, invicta stealer, iocs, ip address, ip detections, ip summary, ipv4, isadultno, june, kuaizip, kukacka jan, legal, link, location united, mail spammer, main, malicious site, malicious url, malware, march, meta, metro, million, moved, name, name servers, next, november, october, open, orcus rat, otx telemetry, passive dns, paste, pegasus, phishing, phishing site, problems, pulse pulses, pulse submit, quasar rat, record type, record value, redacted for, redline stealer, referrer, registrar, registrar abuse, registrar url, registrar whois, registry domain, resolutions, riskware, safe site, sample, samples, scan endpoints, script domains, script script, script urls, sea alt, search, server, servers, service privacy, serving ip, sha256, showing, silent, site, ssl certificate, startpage, status, status code, status page, stealc, subdomains, summary, suppobox, tag count, #targeting, team, team top, tech email, telefonica co, threat, threat roundup, title, title launch, trojandropper, tsara brashears, ttl value, ukraine, united, unknown, unsafe, upgrade, url analysis, url https, urls, urls http, url summary, utilizes new, virtool, wed aug, whois record, whois whois, win32, x adblock, xl div
View other sources: Spamhaus VirusTotal

Country: Netherlands
Network:
Noticed: 5 times
Protocols Attacked: Anonymous Proxy
Countries Attacked: Canada, United States of America
Passive DNS Results: docs.metarank.ai

Malware Detected on Host

Count: 27 3ed2b376db5b8e6ca5acbc7f4ee3847aae1f1ac1910a010a8d3632caee65fa56 918ff7ce2a4f15e40faba82bf2d07b36d116570ff5cd7f3cbd8fc9edf0cd885a 679537728517178f45a5f11fe88cf8a3b13ddc24569b82fe5047484210140891 df681516729279c2cd116bf473fa9ba1b3652c2ea7b45ac7dbf5663f3e0de483 e0853f74e7ff813838bc117455231c9c3a06e56ceebb3d9f19c49c1a192bc495 cb5277aa081a990b84c35ff4fcb7bbde3757e1e4866bf74bd36056bb5b74821c 61c1707f6ebf64caa54c04549d442da88ff9e1580794e314d7be65b6b5d56b4b a3cdad41d25733f773fea673087741067beda7d8c3889afa879c64eaf9622cd8 2b2fd3b15739300d963d84ed65522b902a69db7f8126b735afcc67ecfd3836ba 9dfb4ea160a498af205f9c0dc8e3e1c0f0db246723741fc3fc4c920d0c884e6f

Open Ports Detected

2053 2082 2083 2086 2087 2095 443 80 8080 8443 8880

Map

Whois Information

inetnum: 188.114.96.0 - 188.114.99.255
netname: CLOUDFLARENET-EU
descr: CloudFlare, Inc.
descr: 101 Townsend Street, San Francisco, CA 94107, US
descr: +1 (650) 319-8930
descr: https://cloudflare.com/
country: US
admin-c: CAC80-RIPE
tech-c: CTC6-RIPE
status: ASSIGNED PA
mnt-by: MNT-CLOUDFLARE
mnt-lower: MNT-CLOUDFLARE
mnt-routes: MNT-CLOUDFLARE
created: 2015-10-16T16:26:10Z
last-modified: 2015-10-16T16:26:10Z
person: Cloudflare Abuse Contact
address: Viktualienmarkt Rosental 7 80331 Munchen, DE
phone: +49 89 2555 2276
nic-hdl: CAC80-RIPE
mnt-by: MNT-CLOUDFLARE
created: 2012-06-01T23:27:49Z
last-modified: 2022-04-21T01:07:44Z
person: Cloudflare Technical Contact
address: Viktualienmarkt Rosental 7 80331 Munchen, DE
phone: +49 89 2555 2276
nic-hdl: CTC6-RIPE
mnt-by: MNT-CLOUDFLARE
created: 2012-06-01T23:35:57Z
last-modified: 2022-04-21T01:07:28Z
route: 188.114.99.0/24
origin: AS13335
mnt-by: MNT-CLOUDFLARE
created: 2020-06-15T18:05:37Z
last-modified: 2020-06-15T18:05:37Z

Links to attack logs

Share on: