205.185.192.248 Threat Intelligence and Host Information
General
This page contains threat intelligence information for the IPv4 address 205.185.192.248 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.
Possibly Malicious Host 🟢 10/100
Host and Network Information
- View other sources: Spamhaus VirusTotal
- Country: United States
- Network: AS33438 highwinds network group inc.
- Noticed: 1 times
- Protocols Attacked: Anonymous Proxy
Open Ports Detected
10001 10134 102 1024 10243 104 10554 1099 11 110 11000 111 11211 113 11371 11434 12000 1234 12345 13 1311 13579 1400 14265 1433 14344 1471 1599 16010 16030 1604 16992 1723 1741 175 1800 1801 18245 19071 1911 1925 1935 195 1962 20 2000 2008 20256 20547 2067 2081 2082 2086 2087 2095 2121 21379 2154 22067 2222 23023 23424 2345 2375 2379 2404 2455 2480 25001 25105 25565 264 27015 2761 2762 28017 3000 30003 3001 3056 3128 32400 3260 32764 3299 3306 33060 3310 3333 3402 3406 3460 35000 3541 3542 3689 3749 37777 3838 389 4000 4001 4040 4063 41800 4242 4282 43 4369 44158 444 4444 44818 4567 4664 4782 4786 4848 4911 49152 49153 5000 5005 50050 50070 5009 5025 51106 515 5201 5222 5269 52869 5357 5435 548 55442 5555 5560 5601 5672 5800 5801 5858 5900 5901 5938 5985 59980 6000 60001 60010 60030 6080 62078 631 6379 6653 666 6664 70 7171 7415 7445 7474 7500 7547 7657 7777 7779 789 79 7900 7989 80 8000 8001 8008 8009 8010 8060 8069 8080 8084 8086 8087 8090 8098 81 8112 8123 8126 82 8200 8291 83 8333 8334 84 8422 8554 8575 8649 8728 873 88 8800 8816 8888 9008 902 9035 9042 9080 9090 9100 9151 9191 9200 9251 9295 9306 9418 9527 9530 9595 9600 9633 9761 9800 9869 9876 9944 9981 9998 9999
Map
Whois Information
- NetRange: 205.185.192.0 - 205.185.193.255
- CIDR: 205.185.192.0/23
- NetName: NETPR-14
- NetHandle: NET-205-185-192-0-1
- Parent: NET205 (NET-205-0-0-0-0)
- NetType: Direct Allocation
- OriginAS: AS54203
- Organization: Netprotect, Inc. (NETPR-14)
- RegDate: 2009-08-03
- Updated: 2023-06-14
- Ref: https://rdap.arin.net/registry/ip/205.185.192.0
- OrgName: Netprotect, Inc.
- OrgId: NETPR-14
- Address: 114 5th Avenue
- Address: 15th Floor
- City: New York
- StateProv: NY
- PostalCode: 10011
- Country: US
- RegDate: 2020-11-13
- Updated: 2023-04-17
- Ref: https://rdap.arin.net/registry/entity/NETPR-14
- OrgAbuseHandle: NAD113-ARIN
- OrgAbuseName: Netprotect Abuse Department
- OrgAbusePhone: +1-800-591-5241
- OrgAbuseEmail: abuse@netprotect.com
- OrgAbuseRef: https://rdap.arin.net/registry/entity/NAD113-ARIN
- OrgTechHandle: NNO107-ARIN
- OrgTechName: Netprotect Network Operations
- OrgTechPhone: +1-800-591-5241
- OrgTechEmail: noc@netprotect.com
- OrgTechRef: https://rdap.arin.net/registry/entity/NNO107-ARIN
- NetRange: 205.185.192.0 - 205.185.192.255
- CIDR: 205.185.192.0/24
- NetName: NETPROTECT-LAX-SP
- NetHandle: NET-205-185-192-0-2
- Parent: NETPR-14 (NET-205-185-192-0-1)
- NetType: Reassigned
- OriginAS: AS54203
- Customer: Netprotect (C08233445)
- RegDate: 2022-03-09
- Updated: 2023-06-14
- Ref: https://rdap.arin.net/registry/ip/205.185.192.0
- CustName: Netprotect
- Address: 900 N. Alameda St
- City: Los Angeles
- StateProv: CA
- PostalCode: 90012
- Country: US
- RegDate: 2022-03-09
- Updated: 2022-03-09
- Ref: https://rdap.arin.net/registry/entity/C08233445
- OrgAbuseHandle: NAD113-ARIN
- OrgAbuseName: Netprotect Abuse Department
- OrgAbusePhone: +1-800-591-5241
- OrgAbuseEmail: abuse@netprotect.com
- OrgAbuseRef: https://rdap.arin.net/registry/entity/NAD113-ARIN
- OrgTechHandle: NNO107-ARIN
- OrgTechName: Netprotect Network Operations
- OrgTechPhone: +1-800-591-5241
- OrgTechEmail: noc@netprotect.com
- OrgTechRef: https://rdap.arin.net/registry/entity/NNO107-ARIN
Links to attack logs
anonymous-proxy-ip-list-2024-02-27
Share on: