198.12.112.159 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 198.12.112.159 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 5/100

Host and Network Information

• View other sources: Spamhaus VirusTotal

• Country: United States
• Network:
• Noticed: 1 times
• Protocols Attacked: Anonymous Proxy
• Passive DNS Results: club4.shsshs.xyz club.shsshs.xyz host.shsshs.club nimbleclass166.com velociload166.com voiceload166.com flipmain166.com swiftmain166.com viabit53.com activearray53.com activebit53.com riffclass166.com blogsrc166.com vibemodule166.com zipscript166.com nimblemodule166.com rapidbase53.com nimbleload166.com riffscript166.com brisktype166.com voicemain166.com axnlion.com axnrilla.com kacobird.com hcsbatee.com axnmain.com maolxsrc.com axgvbnhorse.xyz axgvbnalope.win glowframe53.icu brilliantdrive53.website radiadrive53.website brilliantswitch53.icu dazzlenode53.website brightswitch53.website focalbase53.website focalbus53.website keendex53.website blazesource53.website dazzleamp53.website clearfiber53.website glowmap53.website brightmesh53.website brightport53.website voicestate166.com visrc166.com snapload166.com weeville53.com holodom53.com flipscape53.com avaspace53.com shinesource53.icu brightcore53.website glowfiber53.website brilliantroute53.icu clearoptic53.icu keencore53.icu ncshmode.com ncbafox.com ccnmbcbus.com acbnaroute.com vvnode.com hbcling.com axnroad.com metasphere53.com combospace53.com voxverse53.com technoinity53.com viaurbia53.com viscape53.com avascape53.com freshspace53.com vicosm53.com infoville53.com voxansion53.com yainity53.com retrospan53.com stratoansion53.com primoreach53.com

Map

Whois Information

• NetRange: 198.12.64.0 - 198.12.127.255
• CIDR: 198.12.64.0/18
• NetName: CC-09
• NetHandle: NET-198-12-64-0-1
• Parent: NET198 (NET-198-0-0-0-0)
• NetType: Direct Allocation
• OriginAS: AS36352
• Organization: HostPapa (HOSTP-7)
• RegDate: 2012-07-10
• Updated: 2024-02-02
• Comment: Geofeed https://geofeeds.oniaas.io/geofeeds.csv
• Ref: https://rdap.arin.net/registry/ip/198.12.64.0
• OrgName: HostPapa
• OrgId: HOSTP-7
• Address: 325 Delaware Avenue
• Address: Suite 300
• City: Buffalo
• StateProv: NY
• PostalCode: 14202
• Country: US
• RegDate: 2016-06-06
• Updated: 2024-04-26
• Ref: https://rdap.arin.net/registry/entity/HOSTP-7
• OrgTechHandle: NETTE9-ARIN
• OrgTechName: NETTECH
• OrgTechPhone: +1-905-315-3455
• OrgTechEmail: net-tech-global@hostpapa.com
• OrgTechRef: https://rdap.arin.net/registry/entity/NETTE9-ARIN
• OrgAbuseHandle: NETAB23-ARIN
• OrgAbuseName: NETABUSE
• OrgAbusePhone: +1-905-315-3455
• OrgAbuseEmail: net-abuse-global@hostpapa.com
• OrgAbuseRef: https://rdap.arin.net/registry/entity/NETAB23-ARIN
• RAbuseHandle: NETAB27-ARIN
• RAbuseName: NETABUSE-COLOCROSSING
• RAbusePhone: +1-800-518-9716
• RAbuseEmail: abuse@colocrossing.com
• RAbuseRef: https://rdap.arin.net/registry/entity/NETAB27-ARIN
• RTechHandle: NETTE11-ARIN
• RTechName: NETTECH-COLOCROSSING
• RTechPhone: +1-800-518-9716
• RTechEmail: support@colocrossing.com
• RTechRef: https://rdap.arin.net/registry/entity/NETTE11-ARIN

Links to attack logs

anonymous-proxy-ip-list-2024-11-20