208.89.138.21 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 208.89.138.21 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 15/100

Host and Network Information

  • JARM: 15d2ad16d29d29d00015d2ad15d29d67edd16014aa8d87eb613c543d04cbe2

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: hphosts_fsa, hphosts_psh

Malware Detected on Host

Count: 9 65f81879b5421a5683de158629677f153d046ce7dc81fb770d3b2ca9cbd8d47f 6c8f2e1c6dd5ac4357e2db4afd1503c5e7c8c2b9e9f25ea2682dd7fbfa9251b7 fc401c1105f2a7021c5b428f27f2d7cf8ab291b2540df938a11128467fbaed62 1295e1745d88998c7a008567517e80403d18ce27e83d9d06051b28faa548adf1 8f0fcdb8d2e1680a42a2bfdf0189466a00c3b07552bfce951e9a951c00e43fcd 5c5a7bace08156751932bb4fb615796c4bee427fe2ee52355036786bb78ac8fa a2fa53ba0afcd8e257b98f17440bbed9445afc629dcf580a5b000988b3f5518e 3fdfab2456146db30785bab95df3f67f26629379d53a1ce507671799a0f5e597 3de088b626a33c41183e3a719af326468b184d3265062678a703393706bfd39d

Open Ports Detected

443 80

Map

Whois Information

Links to attack logs

nmap-scanning-list-2021-09-13

Share on: