194.63.252.22 Threat Intelligence and Host Information

Sep 10, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 194.63.252.22 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 40/100

Host and Network Information

  • Mitre ATT&CK IDs: T1056 - Input Capture, T1140 - Deobfuscate/Decode Files or Information

  • Tags: akamaias, akamaiasn1, amazon02, as15169, as16509, as20940, as3359, as8075, as852, cuba, facebook, geoip, ghost, google, indonesia, level3, media, mexico, mini, proton, public url, seznam, telecom, twitter, ukraine, win32, win64

  • View other sources: Spamhaus VirusTotal

  • Country: Norway
  • Network:
  • Noticed: 4 times
  • Protocols Attacked: SSH
  • Countries Attacked: Anguilla, Aruba, Australia, Bahamas, Barbados, Canada, Cayman Islands, Costa Rica, Curaçao, Georgia, Guatemala, Japan, Mexico, Netherlands, Panama, Philippines, Poland, Saint Kitts and Nevis, Saint Martin (French part), Saint Vincent and the Grenadines, Sint Maarten (Dutch part), Tanzania United Republic of, Trinidad and Tobago, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: mx.domeneshop.no eirikrye.no mx02.domeneshop.no

Malware Detected on Host

Count: 2 9ea88ba1e51c6406c03c9bc900850b7b6261fe98c6abe415d3fc63d5b32cdf02 12594c1ac7056f9f7bd6dd0f85f5306bac1e603d2a2ccce0c80b92058de975c4

Open Ports Detected

25

Map

Whois Information

  • inetnum: 194.63.248.0 - 194.63.255.255
  • netname: NO-DOMENESHOP
  • org: ORG-DA421-RIPE
  • country: NO
  • admin-c: SS19786-RIPE
  • tech-c: HH2777-RIPE
  • status: ASSIGNED PI
  • mnt-by: RIPE-NCC-END-MNT
  • mnt-by: DOMENESHOP-MNT
  • mnt-routes: DOMENESHOP-MNT
  • mnt-domains: DOMENESHOP-MNT
  • created: 1970-01-01T00:00:00Z
  • last-modified: 2016-04-14T09:55:14Z
  • organisation: ORG-DA421-RIPE
  • org-name: Domeneshop AS
  • country: NO
  • org-type: LIR
  • address: Christian Krohgs gate 16
  • address: 0186
  • address: Oslo
  • address: NORWAY
  • phone: +4722943333
  • fax-no: +4722943334
  • mnt-ref: DOMENESHOP-MNT
  • mnt-ref: RIPE-NCC-HM-MNT
  • mnt-by: RIPE-NCC-HM-MNT
  • mnt-by: DOMENESHOP-MNT
  • abuse-c: HH2777-RIPE
  • created: 2012-06-07T11:55:20Z
  • last-modified: 2025-08-12T12:48:08Z
  • admin-c: SS19786-RIPE
  • role: Domeneshop Hostmaster
  • address: Domeneshop AS
  • address: Christian Krohgs gate 16
  • address: 0186 Oslo
  • address: Norway
  • phone: +47 22 94 33 33
  • fax-no: +47 22 94 33 34
  • abuse-mailbox: abuse@domeneshop.no
  • admin-c: SS19786-RIPE
  • tech-c: SS19786-RIPE
  • nic-hdl: HH2777-RIPE
  • mnt-by: DOMENESHOP-MNT
  • created: 1970-01-01T00:00:00Z
  • last-modified: 2021-03-06T09:54:48Z
  • person: Stale Schumacher
  • address: Domeneshop AS
  • address: Christian Krohgs gate 16
  • address: 0186 Oslo
  • address: Norway
  • phone: +47 22 94 33 33
  • fax-no: +47 22 94 33 34
  • nic-hdl: SS19786-RIPE
  • mnt-by: DOMENESHOP-MNT
  • created: 2012-06-07T12:47:02Z
  • last-modified: 2021-03-06T09:53:34Z
  • route: 194.63.252.0/24
  • descr: DOMENESHOP
  • origin: AS12996
  • mnt-by: DOMENESHOP-MNT
  • created: 2013-04-22T08:24:55Z
  • last-modified: 2013-04-22T08:24:55Z

Links to attack logs

****** ****** ******

Share on: