198.251.89.129 Threat Intelligence and Host Information
General
This page contains threat intelligence information for the IPv4 address 198.251.89.129 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.
Possibly Malicious Host 🟢 15/100
Host and Network Information
- View other sources: Spamhaus VirusTotal
- Country: Luxembourg
- Network:
- Noticed: 1 times
- Protocols Attacked: SSH
- Passive DNS Results: lecko.lv devmap.tripjot.net www.devmap.tripjot.net happy-anniversary-michelle-and-derek.host www.radio.driftercoffee.com.au radio.driftercoffee.com.au www.gregbuilder.net www.live.superstar-radio.online live.superstar-radio.online coobikcantcode.com www.webmail.driftercoffee.com.au criminalthreats.xyz ftp.dawidurbanek.com smtp.dawidurbanek.com www.dawidurbanek.com punishments.anomlymc.net dawidurbanek.com tripjot.net driftercoffee.online superstar-radio.online crimsonpvp.org digivizee.com quackfm.com map.queensway.gay www.nowplaying.superstar-radio.com.au blackreselluk.xyz gregbuilder.net pop.wcrp.uk ftp.wcrp.uk smtp.wcrp.uk www.wcrp.uk dadams.gay youaremega.gay wcrp.uk www.forum.dev-leomorris.com staff.dev-leomorris.com www.cad.dev-leomorris.com www.fivemstuff.dev-leomorris.com cad.dev-leomorris.com forum.dev-leomorris.com www.staff.dev-leomorris.com dev-leomorris.com fivemstuff.dev-leomorris.com stats.queensway.gay www.stats.queensway.gay freedomscwesterville.com dopenoizedj.com www.dopenoizedj.com www.gsrp.uk gsrp.uk whmcs2.rade023.com www.whmcs2.rade023.com dubbini.co.uk radio.dev-leomorris.com www.radio.dev-leomorris.com www.rmk.dev-leomorris.com rmk.dev-leomorris.com lslrp.net www.lslrp.net ftp.lslrp.net www.rade023.com demo.rade023.com www.demo.rade023.com www.sallyyoga.xyz sallyyoga.xyz pop.sallyyoga.xyz ftp.sallyyoga.xyz smtp.sallyyoga.xyz diced.design smtp.queensway.gay ftp.queensway.gay queensway.gay www.queensway.gay pop.queensway.gay client.filmplex.net smtp.filmplex.net ftp.filmplex.net pop.filmplex.net panel.underkart.com www.ginni.me rade023.com market.rade023.com www.market.rade023.com whmcs.rade023.com www.whmcs.rade023.com www.web.visionnode.net web.visionnode.net visionnode.net www.visionnode.net www.testsite.braintreecomputers.co.uk testsite.braintreecomputers.co.uk ftp.braintreecomputers.co.uk nolabocce.club idfta.org superstar-radio.com.au www.makemoremoneyonline.info smtp.makemoremoneyonline.info ftp.makemoremoneyonline.info pop.makemoremoneyonline.info www.radiopanel.superstar-radio.com.au www.radioadmin.superstar-radio.com.au ftp.superstar-radio.com.au radiopanel.superstar-radio.com.au smtp.superstar-radio.com.au pop.superstar-radio.com.au radioadmin.superstar-radio.com.au beetonia.com alcdivision.com walliestech.com.au shanecooke.co.uk xylo.network newhealthystyle.com portal.cardiko.com www.boosting.newmettagaming.com boosting.newmettagaming.com www.discord.newmettagaming.com discord.newmettagaming.com www.coaching.newmettagaming.com coaching.newmettagaming.com newmettagaming.com www.app.bozzy.xyz www.panel.pixelgenesismc.com www.discord.fsdistrict.com discord.fsdistrict.com ftp.woonpassie.com smtp.woonpassie.com pop.woonpassie.com www.woonpassie.com woonpassie.com jsjpainting.net ftp.conaxgames.com smtp.xylo.network ftp.xylo.network portal.jantechhosting.com development.conaxgames.com cardiko.com www.cardiko.com www.fits.in ftp.alain-bertaud.com smtp.alain-bertaud.com pop.alain-bertaud.com www.coyotehandyman.com ftp.coyotehandyman.com smtp.coyotehandyman.com pop.coyotehandyman.com coyotehandyman.com arespractice.net viciousprison.com file.dajichang.win yonseienca.ze.am www.ulip.in ulip.in www.ttoj.com www.roadzombies.org www.pravice.org pravice.org iyeg.net www.discord.brockchain.net discord.brockchain.net www.mc.hostneptune.com ftp.trustedwillsandprobate.com smtp.trustedwillsandprobate.com pop.trustedwillsandprobate.com dj-recycling.co.uk staff.down-town-radio.co.uk fsdistrict.com www.hct.wtf www.hardcoreteams.net smtp.hardcoreteams.net ftp.hardcoreteams.net pop.hardcoreteams.net infg.net www.infg.net www.ldprison.com ldprison.com www.discord.ldprison.com discord.ldprison.com cleancanyonair.com ftp.down-town-radio.co.uk www.down-town-radio.co.uk pop.down-town-radio.co.uk smtp.down-town-radio.co.uk down-town-radio.co.uk stream.leomorris.xyz www.stream.leomorris.xyz pop.movezenlogistiek.com smtp.movezenlogistiek.com directadmin.walliestech.com www.directadmin.walliestech.com movezenlogistiek.com revity.cc stephendurham.co.uk makemoremoneyonline.info image.leomorris.xyz www.image.leomorris.xyz www.influence.in smtp.lstvtc.co.uk pop.lstvtc.co.uk ftp.lstvtc.co.uk lstvtc.co.uk www.lstvtc.co.uk mc.hostneptune.com pop.xeno.host xeno.host ftp.xeno.host www.xeno.host smtp.xeno.host www.mail.aussieliferoleplay.com www.smashimage.com pop.vengeancemc.xyz smtp.vengeancemc.xyz ftp.vengeancemc.xyz vengeancemc.xyz www.vengeancemc.xyz axerion.xyz ftp.axerion.xyz smtp.axerion.xyz pop.axerion.xyz www.hostneptune.com hostneptune.com curvehosting.net pixelgenesismc.com blocksville.net aquartzbt.kro.kr fivemadmin.delta-gaming.net www.fivemadmin.delta-gaming.net discordtickets.com smtp.getreadyamsterdam.com ftp.getreadyamsterdam.com pop.getreadyamsterdam.com mycriservices.com www.superstarradio.com.au superstarradio.com.au ftp.hannelores.com smtp.hannelores.com pop.hannelores.com walliesdesigns.com ttoj.com pixelgenesistesttest.xyz smpcp.xyz www.masterbuilders.co www.clawhybrid.com joshroys.com dev-leomorris.xyz shesright.org eclipsecasper.com fits.in roadzombies.org masterbuilders.co reforgedservers.xyz www.fliidevelopment.xyz fliidevelopment.xyz codecraftmc.org www.codecraftmc.org www.panicked.xyz status.delta-gaming.net www.status.delta-gaming.net nordicad.leomorris.xyz www.nordicad.leomorris.xyz admin.leomorris.xyz cad.delta-gaming.net www.cad.delta-gaming.net www.fivemad.delta-gaming.net www.delta-gaming.net ftp.delta-gaming.net smtp.delta-gaming.net fivemad.delta-gaming.net pop.delta-gaming.net clawhybrid.com dropzonerp.xyz www.megabeats.uk megabeats.uk www.peterboroughsmostwanted.co.uk peterboroughsmostwanted.co.uk flatironexchangevt.com ftp.andisabohemiandesigns.co.uk pop.andisabohemiandesigns.co.uk smtp.andisabohemiandesigns.co.uk www.braintreecomputers.co.uk smtp.braintreecomputers.co.uk braintreecomputers.co.uk pop.braintreecomputers.co.uk iwca-oxford.org.uk www.iwca-oxford.org.uk luckyrip.com www.luckyrip.com alain-bertaud.com www.alain-bertaud.com www.r-morris-property-maintenance.com r-morris-property-maintenance.com blesta-test.zentorahosting.com www.iyeg.net influence.in millwoodmedicalclub.com www.conquermc.org conquermc.org rytale.net www.rytale.net brockchain.net smtp.brockchain.net pop.brockchain.net www.brockchain.net oldcrossleyans.co.uk www.pipandpeelfood.co.uk www.tommywelshbathrooms.co.uk almiragefurniture.co.uk www.easternrosebeauty.co.uk www.oldcrossleyans.co.uk www.outdoorangus.co.uk www.bedsincornwall.co.uk kudos-clothing.co.uk www.dealskick.co.uk babyclothesboutique.co.uk leafydeals.co.uk appliancebargains.co.uk www.thejewelleryroom.co.uk bedsincornwall.co.uk espcomputers.co.uk summeroutdoor.co.uk victoriashoes.co.uk tommywelshbathrooms.co.uk www.yourcooking.co.uk www.almiragefurniture.co.uk www.leafydeals.co.uk cycletechbeds.co.uk www.cornwallsmallpetboarding.co.uk www.ccbbuilders.co.uk www.kudos-clothing.co.uk www.cycletechbeds.co.uk www.summeroutdoor.co.uk www.victoriashoes.co.uk cornwallsmallpetboarding.co.uk ddsgamestoys.co.uk www.babyclothesboutique.co.uk zafer.co.uk dealskick.co.uk www.stoneboxaudio.co.uk yourcooking.co.uk www.appliancebargains.co.uk www.zafer.co.uk stoneboxaudio.co.uk www.ddsgamestoys.co.uk thejewelleryroom.co.uk outdoorangus.co.uk ccbbuilders.co.uk www.espcomputers.co.uk pipandpeelfood.co.uk easternrosebeauty.co.uk www.andisabohemiandesigns.co.uk andisabohemiandesigns.co.uk scavengercraft.net smtp.04012605.xyz 04012605.xyz pop.04012605.xyz www.04012605.xyz ftp.04012605.xyz www.radio.leomorris.xyz radio.leomorris.xyz bozzy.xyz i.bozzy.xyz pop.bozzy.xyz www.bozzy.xyz smtp.bozzy.xyz www.i.bozzy.xyz ftp.bozzy.xyz www.crownalarms.co.uk crownalarms.co.uk tigonhelp.xyz www.tigonhelp.xyz transmediaweek.org www.transmediaweek.org blackswanrp.live ftp.smashimage.com smashimage.com bubbleznglitz.com www.bubbleznglitz.com www.trustedwillsandprobate.com trustedwillsandprobate.com ws1.noc532.com ftp.iodios.com iodios.com pop.iodios.com www.iodios.com smtp.iodios.com panicked.xyz cinqueterrecook.xyz www.cinqueterrecook.xyz pop.ci-institute.xyz www.andrew.ci-institute.xyz andrew.ci-institute.xyz www.luke.ci-institute.xyz www.oliver.ci-institute.xyz ftp.ci-institute.xyz www.william.ci-institute.xyz edward.ci-institute.xyz william.ci-institute.xyz www.james.ci-institute.xyz www.lewis.ci-institute.xyz ci-institute.xyz www.ci-institute.xyz lewis.ci-institute.xyz www.edward.ci-institute.xyz james.ci-institute.xyz oliver.ci-institute.xyz luke.ci-institute.xyz smtp.ci-institute.xyz plasmatic.xyz www.plasmatic.xyz leomorris.xyz www.images.leomorris.xyz www.work.leomorris.xyz websitepics.leomorris.xyz www.websitepics.leomorris.xyz work.leomorris.xyz www.leomorris.xyz images.leomorris.xyz vraxilemc.com www.vraxilemc.com discord.vraxilemc.com www.thepoisonnw.com thepoisonnw.com discord.thepoisonnw.com www.i.zydro.org zydro.org www.zydro.org bans.zydro.org www.bans.zydro.org i.zydro.org aussieliferoleplay.com sftpclient.dev www.sftpclient.dev ns1.zentorahosting.com ns2.zentorahosting.com www.hannelores.com hannelores.com getreadyamsterdam.com www.getreadyamsterdam.com cpcontacts.giftcardshq.com www.giftcardshq.com giftcardshq.com cpcalendars.giftcardshq.com ballpooltrick.com www.blackopmethode.com
Malware Detected on Host
Count: 1 5eff5ed514b83e10673b39d5b1e3563a40b2fdc0782eeafab2f4c7d1b38eaca1
Open Ports Detected
143 21 22 2222 25 3306 443 465 53 587 80 993 995
CVEs Detected
CVE-2007-2768 CVE-2008-3844 CVE-2016-20012 CVE-2019-16905 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408 CVE-2023-48795 CVE-2023-51385 CVE-2023-51767 CVE-2025-26465
Map
Whois Information
- NetRange: 198.251.80.0 - 198.251.95.255
- CIDR: 198.251.80.0/20
- NetName: PONYNET-07
- NetHandle: NET-198-251-80-0-1
- Parent: NET198 (NET-198-0-0-0-0)
- NetType: Direct Allocation
- OriginAS: AS53667
- Organization: FranTech Solutions (SYNDI-5)
- RegDate: 2013-02-13
- Updated: 2013-02-13
- Ref: https://rdap.arin.net/registry/ip/198.251.80.0
- OrgName: FranTech Solutions
- OrgId: SYNDI-5
- Address: 1621 Central Ave
- City: Cheyenne
- StateProv: WY
- PostalCode: 82001
- Country: US
- RegDate: 2010-07-21
- Updated: 2024-11-25
- Ref: https://rdap.arin.net/registry/entity/SYNDI-5
- OrgAbuseHandle: FDI19-ARIN
- OrgAbuseName: Dias, Francisco
- OrgAbusePhone: +1-778-977-8246
- OrgAbuseEmail: fdias@frantech.ca
- OrgAbuseRef: https://rdap.arin.net/registry/entity/FDI19-ARIN
- OrgTechHandle: FDI19-ARIN
- OrgTechName: Dias, Francisco
- OrgTechPhone: +1-778-977-8246
- OrgTechEmail: fdias@frantech.ca
- OrgTechRef: https://rdap.arin.net/registry/entity/FDI19-ARIN