216.18.215.4 Threat Intelligence and Host Information

Share on:
Aug 20, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 216.18.215.4 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 5/100

Host and Network Information

  • View other sources: Spamhaus VirusTotal

  • Country: United States
  • Network: AS18450 webnx inc.
  • Noticed: 1 times
  • Protcols Attacked: Anonymous Proxy
  • Passive DNS Results: hnys3.site www.henniu504.site henniu499.site www.hnys9.site henniu490.site www.henniu501.site www.hnys13.site www.hnys12.site www.henniu481.site www.henniu487.site www.hnys1.site www.henniu503.site hnys4.site www.hnys7.site www.hnys5.site hnys5.site henniu486.site henniu473.site hnys11.site www.henniu479.site www.henniu477.site www.henniu506.site henniu484.site www.henniu502.site www.henniu490.site www.henniu491.site hnys13.site www.henniu480.site www.henniu505.site henniu483.site henniu487.site www.hnys8.site henniu474.site hnys1.site henniu476.site www.henniu498.site henniu489.site henniu475.site henniu477.site www.hnys14.site henniu505.site henniu482.site www.henniu488.site www.henniu478.site henniu481.site www.henniu485.site henniu502.site www.hnys3.site www.henniu473.site www.henniu476.site www.henniu475.site henniu506.site henniu500.site henniu479.site henniu488.site www.hnys4.site henniu491.site www.henniu484.site henniu501.site www.henniu499.site hnys7.site www.henniu474.site hnys14.site henniu504.site hnys10.site henniu503.site www.hnys10.site hnys12.site www.hnys6.site www.hnys2.site www.henniu483.site www.henniu489.site www.hnys11.site www.henniu486.site hnys6.site henniu498.site hnys8.site henniu485.site www.henniu500.site hnys9.site henniu480.site www.henniu482.site hnys2.site henniu478.site www.hnys46.site hnys44.site www.hnys50.site hnys50.site hnys48.site www.hnys47.site hnys45.site www.hnys45.site www.hnys49.site hnys47.site www.hnys44.site hnys49.site hnys46.site www.hnys48.site search4business.net businessseeking.com butterflysearch.net bizzclick.com docktorsearch.com

Open Ports Detected

53

Map

Whois Information

  • NetRange: 216.18.192.0 - 216.18.223.255
  • CIDR: 216.18.192.0/19
  • NetName: WEBNX-BLK-2
  • NetHandle: NET-216-18-192-0-1
  • Parent: NET216 (NET-216-0-0-0-0)
  • NetType: Direct Allocation
  • OriginAS: AS18450
  • Organization: WebNX, Inc. (WEBNX)
  • RegDate: 2009-09-01
  • Updated: 2012-03-02
  • Comment: WebNX - http://WebNX.com
  • Ref: https://rdap.arin.net/registry/ip/216.18.192.0
  • OrgName: WebNX, Inc.
  • OrgId: WEBNX
  • Address: 119 N 600 W
  • City: Ogden
  • StateProv: UT
  • PostalCode: 84404
  • Country: US
  • RegDate: 2006-11-01
  • Updated: 2019-09-02
  • Comment: http://WebNX.com
  • Comment: To report abuse, please email [email protected]
  • Ref: https://rdap.arin.net/registry/entity/WEBNX
  • OrgTechHandle: TECHS71-ARIN
  • OrgTechName: Tech Support
  • OrgTechPhone: +1-800-840-5996
  • OrgTechEmail: [email protected]
  • OrgTechRef: https://rdap.arin.net/registry/entity/TECHS71-ARIN
  • OrgNOCHandle: NOC2920-ARIN
  • OrgNOCName: NOC
  • OrgNOCPhone: +1-800-840-5996
  • OrgNOCEmail: [email protected]
  • OrgNOCRef: https://rdap.arin.net/registry/entity/NOC2920-ARIN
  • OrgAbuseHandle: ABUSE1832-ARIN
  • OrgAbuseName: Abuse
  • OrgAbusePhone: +1-800-840-5996
  • OrgAbuseEmail: [email protected]
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1832-ARIN
  • RNOCHandle: NOC2920-ARIN
  • RNOCName: NOC
  • RNOCPhone: +1-800-840-5996
  • RNOCEmail: [email protected]
  • RNOCRef: https://rdap.arin.net/registry/entity/NOC2920-ARIN
  • RTechHandle: TECHS71-ARIN
  • RTechName: Tech Support
  • RTechPhone: +1-800-840-5996
  • RTechEmail: [email protected]
  • RTechRef: https://rdap.arin.net/registry/entity/TECHS71-ARIN
  • RAbuseHandle: ABUSE1832-ARIN
  • RAbuseName: Abuse
  • RAbusePhone: +1-800-840-5996
  • RAbuseEmail: [email protected]
  • RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1832-ARIN
  • Found a referral to clients.webnx.com:4321.

Links to attack logs

anonymous-proxy-ip-list-2023-08-19