199.34.228.56 Threat Intelligence and Host Information

Oct 28, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 199.34.228.56 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 68/100

Host and Network Information

  • Mitre ATT&CK IDs: T1021.001 - Remote Desktop Protocol, T1110 - Brute Force, T1184 - SSH Hijacking, T1192 - Spearphishing Link, T1194 - Spearphishing via Service, T1442 - Fake Developer Accounts, T1454 - Malicious SMS Message, T1566 - Phishing, T1583.001 - Domains, T1583.006 - Web Services, T1585.001 - Social Media Accounts, T1586 - Compromise Accounts, T1591.002 - Business Relationships

  • Tags: akamaias, akamaiasn1, amazon02, anydesk, as15169, as15169 as16509, as16509, as19871 as22612, as20940, as3359, as8075, as852, as9002, auto-generated security, business email compromise, c2, caas, cuba, facebook, fraud, geoip, ghost, google, hosting, identifying, indonesia, level3, media, mexico, mini, parked domains, proton, public url, scams, seznam, ssh hijacking, telecom, twitter, typosquatting, ukraine, win32, win64

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: hphosts_emd, hphosts_fsa, hphosts_psh

Malware Detected on Host

Count: 9 b9c80d25a7c2bd91393698dfe51df6e410ebb5a3ecd1c8648e2443801d2e9be0 5efae0602a040e3096b4866c3cbc190633be375f06590e14fd6a28fcb2f65386 19b633eed62712275bf5965e94125d74301c21603eb6656935b0628c1e721278 f1ceb7655681704ca9dc2509ab48083d830172be269e8253f73e37605987c73e 11ecd01c6e1c9f1656a002c0532c3e68827b2089736fd5565a57d59d9759b2aa 1e69c5b31cb0d1f8df5f716b254a052e3a3e9b2d1f9e8ea193e9d84820ab5b86 83591361c770d4326f89bcb022cc86258244e2d8d820e7e6a03a7ff037237e85 590c3dfab210a28a79c4cdb66b5cd1c78231e7d5a9a8980bc35252ee62adbac7 ac4834083a0a46d5d12df2d0f1c333a944d513ca0210e71cf4e31d4ab2e631c9

Open Ports Detected

2053 2082 2083 2086 2087 443 80 8080 8443 8880

Map

Whois Information

Links to attack logs

****** ****** ******

Share on: