216.218.132.2 Threat Intelligence and Host Information

Jul 03, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 216.218.132.2 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 15/100

Host and Network Information

  • Country: United States
  • Network:
  • Noticed: 4 times
  • Protocols Attacked: SSH
  • Passive DNS Results: ns3.iama.geek.nz ampr-ns3.dl4tma.de ns1.mcncc.com ns3.snipanet.com ns3.august.tw bb.cjydns.pw ba.cjydns.pw ac.cjydns.pw ae.cjydns.pw ab.cjydns.pw ns-3.bunghatta.ac.id ns7.slor.net ns3.hearkenmedia.com ns3.lokinet.dev ns23.sayori.pw hns3.kabhai.in ns3.jlyo.net ns7.ehostdirect.com ns3.getmxplayerpro.com ns3.hdtimeline.com ns2.xinhuanet.work ns3.nalakawula.com orwell.wildanfauzy.com ns5.looid.com ns23.sayori.work dns2.wmexico.net ns3.pemilu.org ns2.verifiedata.ca c.ns.serverdns.org ns3.hoyletech.com c.ns.falkor.cc ns2.octosys.net ns3.wsubr.com ns1.jphurst.com ns2.verifiedata.net ns5.hackerone.pro ns3.alegre.es ns3.dtcom.com.br ns7.hackerone.pro ns4.csn.khai.edu ns3.sla.ac ns3.serbras.com ns3.inu.io ns1.teguhaditya.com ns3.cretcheu.net za.ns.serverdns.us ns2.backb0ne.net pils.onebeer.me ns3.windows10free.com ns3.chimera-labs.com foxtrot.cdgtech.one hanayo.asdf.hk ns3.newfido.net ns6.viprinet.vip ns3.merpatiair.co.id ns3.freddy.id ns3.event.id ns1.estejapronto.com.br ns3.imaginary.ca ns3.vxl0.org root-c.serverdns.mx ns3.xaox.net ns3.neuramedica.com n3.spiry.ro dns4.usitek.com ns3.dewanperiklananindonesia.id ns3.radrd.com ns3.oeltjen.us ns4.conexs.com.br ns8.nonara.com ns4.computerlagoon.com ns3.besthosting.pro ns3.cdstudio.org ns3.zeip.eu ns-002.de dns2.zeroaxis.org dns2.zeroaxis.net ns4.yaip.net ns4.itm.net.br ns3.alderwick.co.uk ns3.smartnetworks.ro ns1.mmobbs.org ns3.durak.org irl.rahemsa.com ns3.phx-net.de ns2.dataless.org ns2.maxfree-fun.net ns3.pietershgv.nl hens3.albaswim.com ns3.kumanov.com ns2.lightflowdynamics.net ns3.cibersoft.com ns-he3.fxkr.net root-c.serverdns.org ns4.fsonline.com.br ns3.itmethod.net ns3.karateonmain.com ns5.timweb.ca ns3.medlad.ro ns3.he.net.dashjr.org ns2.octosys.ru ns4.jacksonville-services.com ns3.intellisys.us ns3.adammel.net ns3.huerzeler.net ns3.qword.ru ns3.abjects.net ns3.he.net. ns4.0x3g3n.net ns4.opmlink.com ns3.he.net

Malware Detected on Host

Count: 2 a07c08352d96fffd9d384643788e38e05825db1e157def2507b170ad5ab60438 9235583481d06530ef1ce04fa4f9a3bf3b6735dcdef0486cf6181c7868c9c249

Open Ports Detected

53

Map

Whois Information

  • NetRange: 216.218.128.0 - 216.218.255.255
  • CIDR: 216.218.128.0/17
  • NetName: HURRICANE-1
  • NetHandle: NET-216-218-128-0-1
  • Parent: NET216 (NET-216-0-0-0-0)
  • NetType: Direct Allocation
  • OriginAS: AS6939
  • Organization: Hurricane Electric LLC (HURC)
  • RegDate: 1999-08-30
  • Updated: 2012-02-24
  • Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
  • Ref: https://rdap.arin.net/registry/ip/216.218.128.0
  • OrgName: Hurricane Electric LLC
  • OrgId: HURC
  • Address: 760 Mission Court
  • City: Fremont
  • StateProv: CA
  • PostalCode: 94539
  • Country: US
  • RegDate:
  • Updated: 2024-11-25
  • Ref: https://rdap.arin.net/registry/entity/HURC
  • OrgAbuseHandle: ABUSE1036-ARIN
  • OrgAbuseName: Abuse Department
  • OrgAbusePhone: +1-510-580-4100
  • OrgAbuseEmail: abuse@he.net
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1036-ARIN
  • OrgTechHandle: ZH17-ARIN
  • OrgTechName: Hurricane Electric
  • OrgTechPhone: +1-510-580-4100
  • OrgTechEmail: hostmaster@he.net
  • OrgTechRef: https://rdap.arin.net/registry/entity/ZH17-ARIN
  • RTechHandle: ZH17-ARIN
  • RTechName: Hurricane Electric
  • RTechPhone: +1-510-580-4100
  • RTechEmail: hostmaster@he.net
  • RTechRef: https://rdap.arin.net/registry/entity/ZH17-ARIN
  • RAbuseHandle: ABUSE1036-ARIN
  • RAbuseName: Abuse Department
  • RAbusePhone: +1-510-580-4100
  • RAbuseEmail: abuse@he.net
  • RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1036-ARIN
  • RNOCHandle: ZH17-ARIN
  • RNOCName: Hurricane Electric
  • RNOCPhone: +1-510-580-4100
  • RNOCEmail: hostmaster@he.net
  • RNOCRef: https://rdap.arin.net/registry/entity/ZH17-ARIN
  • network:ID;I:NET-216.218.132.0/29
  • network:Auth-Area:nets
  • network:Class-Name:network
  • network:Network-Name;I:NET-216.218.132.0/29
  • network:Parent;I:NET-216.218.128.0/17
  • network:IP-Network:216.218.132.0/29
  • network:Org-Contact;I:POC-CE-7
  • network:Tech-Contact;I:POC-HE-NOC
  • network:Abuse-Contact;I:POC-HE-ABUSE
  • network:NOC-Contact;I:POC-HE-NOC
  • network:Created:20180817203002000
  • network:Updated:20180817203002000
  • contact:ID;I:POC-CE-7
  • contact:Auth-Area:contacts
  • contact:Class-Name:contact
  • contact:Name:Network Operations
  • contact:Company:Hurricane Electric
  • contact:Street-Address:760 Mission Court
  • contact:City:Fremont
  • contact:Province:CA
  • contact:Postal-Code:94539
  • contact:Country-Code:US
  • contact:Phone:-
  • contact:E-Mail:-
  • contact:Created:20180817203001000
  • contact:Updated:20180817203001000
  • contact:ID;I:POC-HE-NOC
  • contact:Auth-Area:contacts
  • contact:Class-Name:contact
  • contact:Name:Network Operations Center
  • contact:Company:Hurricane Electric
  • contact:Street-Address:760 Mission Ct
  • contact:City:Fremont
  • contact:Province:CA
  • contact:Postal-Code:94539
  • contact:Country-Code:US
  • contact:Phone:+1-510-580-4100
  • contact:E-Mail:noc@he.net
  • contact:Created:20100901200738000
  • contact:Updated:20100901200738000
  • contact:ID;I:POC-HE-ABUSE
  • contact:Auth-Area:contacts
  • contact:Class-Name:contact
  • contact:Name:Abuse Department
  • contact:Company:Hurricane Electric
  • contact:Street-Address:760 Mission Ct
  • contact:City:Fremont
  • contact:Province:CA
  • contact:Postal-Code:94539
  • contact:Country-Code:US
  • contact:Phone:+1-510-580-4100
  • contact:E-Mail:abuse@he.net
  • contact:Created:20100901200738000
  • contact:Updated:20100901200738000
  • contact:Comment:For email abuse (spam) only

Links to attack logs

****** ****** ******

Share on: