198.54.114.195 Threat Intelligence and Host Information

Oct 21, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 198.54.114.195 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 16/100

Host and Network Information

  • JARM: 3fd3fd15d3fd3fd00042d42d000000038eaaf490bec8dc33757f165ce01762

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: hphosts_fsa

Malware Detected on Host

Count: 12 0d34b308257e47f7244eb3b88c90958bb8c8d583bc296e34b4f027c9ce426331 bba23222902d90655abe06592c374d24419b15345272402efc6febc0f3b95d64 1d75fa521ab70839bd92e3dd22f4d6b005b89847dc01d6e792e29a2e5f50fd34 8536fd22906980ed60c292837d8dfd90ac1d3e55df3a6a7fdcf678f68a6216f9 14a260e6dbd5fb14ed2fd4865d47ef2cf2e097265b3ce6323d0c5e5176724c63 2b58ae00836177d573672274901aee5636b651c564c63f1054012531e503d312 8c1d77aa52974e5c10a56c55a6c53617f62c498b8d0612e9ccaa1789b7c3037c a3b4430c861fff0d6225018286f20b7260b86a2cfc99cf8f4e0d7ce8483727b5 5d0ed9a1f31b3b171fd62096d53fa0f9c766e3a2933764312a794ec434143439 e6a09f109c1c6e0306dbaf5b2879bde9f8669abba0b09bca4296a3b526a5a99c

Open Ports Detected

110 143 2082 2083 21 443 53 80

CVEs Detected

CVE-2022-31628 CVE-2022-31629 CVE-2022-37454

Map

Whois Information

  • NetRange: 198.54.112.0 - 198.54.127.255
  • CIDR: 198.54.112.0/20
  • NetName: NAMEC-4
  • NetHandle: NET-198-54-112-0-1
  • Parent: NET198 (NET-198-0-0-0-0)
  • NetType: Direct Allocation
  • OriginAS:
  • Organization: Namecheap, Inc. (NAMEC-4)
  • RegDate: 2015-11-13
  • Updated: 2015-11-13
  • Ref: https://rdap.arin.net/registry/ip/198.54.112.0
  • OrgName: Namecheap, Inc.
  • OrgId: NAMEC-4
  • Address: 11400 W. Olympic Blvd. Suite 200
  • City: Los Angeles
  • StateProv: CA
  • PostalCode: 90064
  • Country: US
  • RegDate: 2011-01-28
  • Updated: 2017-01-28
  • Ref: https://rdap.arin.net/registry/entity/NAMEC-4
  • OrgTechHandle: EFIME-ARIN
  • OrgTechName: Efimenko, Igor
  • OrgTechPhone: +1-323-375-2822
  • OrgTechEmail: igor.e@namecheap.com
  • OrgTechRef: https://rdap.arin.net/registry/entity/EFIME-ARIN
  • OrgTechHandle: TECHT4-ARIN
  • OrgTechName: Tech team
  • OrgTechPhone: +1-661-310-2107
  • OrgTechEmail: tech@namecheaphosting.com
  • OrgTechRef: https://rdap.arin.net/registry/entity/TECHT4-ARIN
  • OrgAbuseHandle: ABUSE2885-ARIN
  • OrgAbuseName: Abuse team
  • OrgAbusePhone: +1-323-375-2822
  • OrgAbuseEmail: abuse@namecheaphosting.com
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2885-ARIN
  • network:Class-Name:network
  • network:Auth-Area:198.54.114.192/26
  • network:ID:NET-28522.198.54.114.195
  • network:IP-Network:198.54.114.195
  • network:IP-Network-Block:198.54.114.195
  • network:Org-Name:Web-hosting.com
  • network:Street-Address:3402 East University Drive
  • network:City:Phoenix
  • network:State:AZ
  • network:Postal-Code:85034
  • network:Country-Code:US
  • network:Tech-Contact:MAINT-28522.198.54.114.195
  • network:Created:20151126023358000
  • network:Updated:20151126024336000
  • network:Updated-By:net-admin@namecheap.com
  • contact:POC-Name:Network team
  • contact:POC-Email:net-admin@namecheap.com
  • contact:POC-Phone:
  • contact:Tech-Name:Network team
  • contact:Tech-Email:net-admin@namecheap.com
  • contact:Tech-Phone:
  • contact:Abuse-Name:Abuse team
  • contact:Abuse-Email:abuse@namecheaphosting.com
Share on: