199.34.228.42 Threat Intelligence and Host Information

Oct 19, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 199.34.228.42 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 45/100

Host and Network Information

  • Tags: auto-generated security, cyber security, ioc, malicious, Nextray, phishing

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: cleanmx_phishing, hphosts_fsa

Malware Detected on Host

Count: 11 dbc23761a3ff5e25d51dae18d387e0dcd046448926d7acd1b4c322383b8d28cd efa6b65a1eadf25c5fe9ae21284a8a3703065861def0eba79e6b0ba25e7034ad c951c4f533fbb7241e81af13b58f00440a6459978f04320bf947aa1488029a91 4061112505e14d19fd6d6af2fd56b4ec433473a0aa5dc71889035978a6e83529 47ab7ef747fc5f6d1e04a1bec059093b15a4fb8b9e127f7fc809e0ffb912474e 5a3c185e7c4574d1b6ccf835a690fead359edf981678a71a9f5068b03b4b0cbb 7b1206e39fa4769c3272e89755bacabff99fb2a31c02c1420e98862994cdba14 58041fcd89eba8bd2e0ad8b582a009dad379e59e729c4d8f1fee678351591a5c 83591361c770d4326f89bcb022cc86258244e2d8d820e7e6a03a7ff037237e85 5925eeb1b360226559c4768f478238e11b8a8dc2e34c48a212c8f26c679a0328

Open Ports Detected

2052 2053 2082 2083 2086 2087 2096 443 80 8080 8443 8880

Map

Whois Information

Links to attack logs

****** ****** ******

Share on: