198.41.203.157 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 198.41.203.157 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 10/100

Host and Network Information

• View other sources: Spamhaus VirusTotal

• Country:
• Network:
• Noticed: 1 times
• Protocols Attacked: Anonymous Proxy
• Passive DNS Results: metatraderx.com www.evenews24.com evenews24.com dailydrop.com whatismyip.com img.readtiger.com readtiger.com www.whatismyip.com

Malware Detected on Host

Count: 475 57e1b221e5fa748d7f0b2783f9fa299a13da4abae77fbbd3b24813afec5d8eff 2d3be845ac32681f3a5785afdf86ffa8ab580242d3a9fa899ded32857d79b435 ab9000d50b4d3249287dc3585501a0c8100986de03e66669c79be29969c6269f 57a337362c4d509eb1c8d6ff1df2171139ef8ed8b3b82502ffaa3253e041b66e 92819db3d7edbb998e59c560d96f380a192333d8303fbe4f5886ce4c87618129 8b67a5677ed1dc51ac14a5b08ac2c28653e5bea28a6bfc7063fc6e1b69e92bac 54b0716247cf15ced9f62a8eddc690f6d74d22200a2db593179bae370e64e1d3 cfa884dad2343a524f7a8682bcdabcce44a9a8f4056a4dcfab18830631d9e679 81d6e2abd00e08bc3f996e27f6b5938950738f523e2f7dd9ce7cc83dcc1abfd5 0158d78d0b8c1aaf498f9a8615842d9c648b2f381cfd68f05bedf5fc2fe9ebc6

Open Ports Detected

2053 2082 2083 2086 2087 2096 443 80 8080 8443 8880

Whois Information

• NetRange: 198.41.128.0 - 198.41.255.255
• CIDR: 198.41.128.0/17
• NetName: CLOUDFLARENET
• NetHandle: NET-198-41-128-0-1
• Parent: NET198 (NET-198-0-0-0-0)
• NetType: Direct Allocation
• OriginAS: AS13335
• Organization: Cloudflare, Inc. (CLOUD14)
• RegDate: 2012-10-09
• Updated: 2024-09-04
• Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
• Comment: Geofeed: https://api.cloudflare.com/local-ip-ranges.csv
• Ref: https://rdap.arin.net/registry/ip/198.41.128.0
• OrgName: Cloudflare, Inc.
• OrgId: CLOUD14
• Address: 101 Townsend Street
• City: San Francisco
• StateProv: CA
• PostalCode: 94107
• Country: US
• RegDate: 2010-07-09
• Updated: 2024-11-25
• Ref: https://rdap.arin.net/registry/entity/CLOUD14
• OrgTechHandle: ADMIN2521-ARIN
• OrgTechName: Admin
• OrgTechPhone: +1-650-319-8930
• OrgTechEmail: rir@cloudflare.com
• OrgTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
• OrgAbuseHandle: ABUSE2916-ARIN
• OrgAbuseName: Abuse
• OrgAbusePhone: +1-650-319-8930
• OrgAbuseEmail: abuse@cloudflare.com
• OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
• OrgRoutingHandle: CLOUD146-ARIN
• OrgRoutingName: Cloudflare-NOC
• OrgRoutingPhone: +1-650-319-8930
• OrgRoutingEmail: noc@cloudflare.com
• OrgRoutingRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
• OrgNOCHandle: CLOUD146-ARIN
• OrgNOCName: Cloudflare-NOC
• OrgNOCPhone: +1-650-319-8930
• OrgNOCEmail: noc@cloudflare.com
• OrgNOCRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
• RAbuseHandle: ABUSE2916-ARIN
• RAbuseName: Abuse
• RAbusePhone: +1-650-319-8930
• RAbuseEmail: abuse@cloudflare.com
• RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
• RTechHandle: ADMIN2521-ARIN
• RTechName: Admin
• RTechPhone: +1-650-319-8930
• RTechEmail: rir@cloudflare.com
• RTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
• RNOCHandle: NOC11962-ARIN
• RNOCName: NOC
• RNOCPhone: +1-650-319-8930
• RNOCEmail: noc@cloudflare.com
• RNOCRef: https://rdap.arin.net/registry/entity/NOC11962-ARIN

Links to attack logs

anonymous-proxy-ip-list-2025-06-23 anonymous-proxy-ip-list-2025-06-22 anonymous-proxy-ip-list-2025-06-24 anonymous-proxy-ip-list-2025-06-25