208.3.195.65 Threat Intelligence and Host Information
ipinfopage
General
This page contains threat intelligence information for the IPv4 address 208.3.195.65 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.
🟡 Low Risk — 35/100
Geographic Location
Host and Network Information
- View other sources: Spamhaus VirusTotal Shodan AbuseIPDB
- Country: United States
- Noticed: 35 times
- Protocols Attacked: mysql portscan
- Countries Attacked: Australia
- Open Ports: 1723, 179, 2000, 80
- Tor Node: No
Tags
- 2026-01
- 2026-02
- Adbhoney
- attacker-ip
- automated
- Automated
- brute-force
- bruteforce
- cisco
- conpot
- cowrie
- digital ocean
- dionaea
- fatt
- heralding
- honeytrap
- LAMP
- lcia
- mailoney
- malicious
- mysql
- OpenCTI
- p0f
- portscan
- scanners
- sensor-tagged
- sentrypeer
- sftp
- sip
- ssh
- suricata
- tanner
- t-pot
- tpot
Attack Log References
- digitaloceanlondon-mysql-bruteforce-ip-list-2026-02-26
- digitaloceanlondon-mysql-bruteforce-ip-list-2026-02-25
- digitaloceantoronto-mysql-bruteforce-ip-list-2026-02-27
- digitaloceantoronto-mysql-bruteforce-ip-list-2026-02-26
- digitaloceantoronto-mysql-bruteforce-ip-list-2026-02-25
- digitaloceanlondon-mysql-bruteforce-ip-list-2026-02-27
Whois Information
NetRange: 208.0.0.0 - 208.35.255.255
CIDR: 208.32.0.0/14, 208.0.0.0/11
NetName: COGC
NetHandle: NET-208-0-0-0-1
Parent: NET208 (NET-208-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Cogent Communications, LLC (COGC)
RegDate: 1996-03-13
Updated: 2025-12-23
Ref: https://rdap.arin.net/registry/ip/208.0.0.0
OrgName: Cogent Communications, LLC
OrgId: COGC
Address: 2450 N Street NW
City: Washington
StateProv: DC
PostalCode: 20037
Country: US
RegDate: 2000-05-30
Updated: 2025-09-23
Comment: Geofeed https://geofeed.cogentco.com/geofeed.csv
Ref: https://rdap.arin.net/registry/entity/COGC
OrgTechHandle: IPALL-ARIN
OrgTechName: IP Allocation
OrgTechPhone: +1-877-875-4311
OrgTechEmail: ipalloc@cogentco.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPALL-ARIN
OrgAbuseHandle: COGEN-ARIN
OrgAbuseName: Cogent Abuse
OrgAbusePhone: +1-877-875-4311
OrgAbuseEmail: abuse@cogentco.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/COGEN-ARIN
OrgNOCHandle: ZC108-ARIN
OrgNOCName: Cogent Communications
OrgNOCPhone: +1-877-875-4311
OrgNOCEmail: noc@cogentco.com
OrgNOCRef: https://rdap.arin.net/registry/entity/ZC108-ARIN
NetRange: 208.3.194.0 - 208.3.195.255
CIDR: 208.3.194.0/23
NetName: VIP-MAIN-208-3
NetHandle: NET-208-3-194-0-1
Parent: COGC (NET-208-0-0-0-1)
NetType: Reassigned
OriginAS:
Organization: Volcano Telephone (VLCN)
RegDate: 2002-12-04
Updated: 2019-09-25
Ref: https://rdap.arin.net/registry/ip/208.3.194.0
OrgName: Volcano Telephone
OrgId: VLCN
Address: 20000 Hwy 88
City: Pine Grove
StateProv: CA
PostalCode: 95665
Country: US
RegDate: 1999-11-15
Updated: 2019-09-25
Ref: https://rdap.arin.net/registry/entity/VLCN
OrgRoutingHandle: ADMIN5088-ARIN
OrgRoutingName: admin
OrgRoutingPhone: +1-209-296-1490
OrgRoutingEmail: networkadmin@volcanotel.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ADMIN5088-ARIN
OrgTechHandle: ADMIN5088-ARIN
OrgTechName: admin
OrgTechPhone: +1-209-296-1490
OrgTechEmail: networkadmin@volcanotel.com
OrgTechRef: https://rdap.arin.net/registry/entity/ADMIN5088-ARIN
OrgDNSHandle: ADMIN5088-ARIN
OrgDNSName: admin
OrgDNSPhone: +1-209-296-1490
OrgDNSEmail: networkadmin@volcanotel.com
OrgDNSRef: https://rdap.arin.net/registry/entity/ADMIN5088-ARIN
OrgAbuseHandle: VAA3-ARIN
OrgAbuseName: VIP Abuse Admin
OrgAbusePhone: +1-209-296-7574
OrgAbuseEmail: admin@volcano.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/VAA3-ARIN
OrgNOCHandle: ADMIN5088-ARIN
OrgNOCName: admin
OrgNOCPhone: +1-209-296-1490
OrgNOCEmail: networkadmin@volcanotel.com
OrgNOCRef: https://rdap.arin.net/registry/entity/ADMIN5088-ARIN
RTechHandle: ADMIN5088-ARIN
RTechName: admin
RTechPhone: +1-209-296-1490
RTechEmail: networkadmin@volcanotel.com
RTechRef: https://rdap.arin.net/registry/entity/ADMIN5088-ARIN
RAbuseHandle: VAA3-ARIN
RAbuseName: VIP Abuse Admin
RAbusePhone: +1-209-296-7574
RAbuseEmail: admin@volcano.net
RAbuseRef: https://rdap.arin.net/registry/entity/VAA3-ARIN
RNOCHandle: ADMIN5088-ARIN
RNOCName: admin
RNOCPhone: +1-209-296-1490
RNOCEmail: networkadmin@volcanotel.com
RNOCRef: https://rdap.arin.net/registry/entity/ADMIN5088-ARIN
network:ID:NET4-D003C20017
network:Network-Name:NET4-D003C20017
network:IP-Network:208.3.194.0/23
network:Org-Name:VOLCANO INTERNET PROVIDER
network:Street-Address:PO BOX 1070
network:City:PINE GROVE
network:State:CA
network:Country:US
network:Postal-Code:95665
network:Tech-Contact:ZC108-ARIN
network:Updated:2024-05-13 17:51:44