217.64.195.223 Threat Intelligence and Host Information

Feb 14, 2026 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 217.64.195.223 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 60/100

Host and Network Information

  • Mitre ATT&CK IDs: T1018 - Remote System Discovery, T1027 - Obfuscated Files or Information, T1055 - Process Injection, T1059 - Command and Scripting Interpreter, T1090 - Proxy, T1113 - Screen Capture, T1127 - Trusted Developer Utilities Proxy Execution, T1134 - Access Token Manipulation, T1490 - Inhibit System Recovery, T1566 - Phishing

  • Tags: analysis, appliance, auto-generated security, clean, discord, grabber, ipfs, ipfs gateway, ipfs network, logo analysis, mime, multi scan, pe32 executable, powershell, python, report deletion, sample, securex, sha256, swift, system, talos, threats, threat spotlight, top story, update, view details, web3, web3 technology

  • JARM: 15d3fd16d29d29d00015d3fd15d29d4e8c1aa84431728424069c7ce21f7c61

  • View other sources: Spamhaus VirusTotal

Malware Detected on Host

Count: 47 2b9e253192c68bc69638043a5901d7753a9985a431738f0b22c7efea3e24bdea c6266e73a8f0289eea16a7307b9ab6eac83b2e0a99d544f9171f1883cb67367a 0f6526f0b1aa96073104e1e70114ce1d9f2b3fd10e56f816998d0bd7be59d06e 85a5af959c944b3608ce054560850166d968f1f4cbf083c048f0973cd5c3d181 48b074a7ff6bed7cbe6b12a47955bb698ae2a5d28021f3fb86e6418fb52b4a8c c545244cc87fbc3d38f1f6b8c3e2dc6cdd9ec9cf8129e72fcede14fbb5e1dbb6 49bb62fca2df052dfcfecb16455dff21d1cceb8e182105344490b18a6e113651 fe986b51731b9fa9b7c130781222bd3140a28ce57917a2cfa3d6bf5608d287c9 daf92bec9f2848b2182a3dba191065503a6ee242302b4bdff64dfc6265f1c02f 78b0a85f04520258ce4a57abe133d5532594211809de84eaaf005047c501d288

Open Ports Detected

21 443 80

CVEs Detected

CVE-2023-44487 CVE-2025-23419

Map

Whois Information

  • inetnum: 217.64.195.193 - 217.64.195.255
  • netname: SEEWEB-CLOUD
  • descr: Tophost hosting servers
  • country: IT
  • admin-c: AB91-RIPE
  • tech-c: SWBN-RIPE
  • status: ASSIGNED PA
  • mnt-by: SEEWEB-MNT
  • created: 2011-09-14T03:43:28Z
  • last-modified: 2011-12-09T15:18:12Z
  • role: NOC Seeweb
  • address: Seeweb s.r.l.
  • address: Corso Lazio 9/a
  • address: I-03100 Frosinone
  • phone: +39-0775-880041 ext. 1
  • fax-no: +39-0775-830054
  • admin-c: AB91-RIPE
  • tech-c: AB91-RIPE
  • tech-c: FF1984-RIPE
  • tech-c: MDIS-RIPE
  • nic-hdl: SWBN-RIPE
  • mnt-by: SEEWEB-MNT
  • abuse-mailbox: abuse@seeweb.it
  • created: 2006-11-24T23:44:14Z
  • last-modified: 2007-05-16T23:43:37Z
  • person: Antonio Baldassarra
  • address: SEEWEB Hosting Company
  • address: C.so Lazio 9/a
  • address: I-03100 Frosinone
  • phone: +39-0775-880041
  • fax-no: +39-0775-830054
  • nic-hdl: AB91-RIPE
  • mnt-by: SEEWEB-MNT
  • created: 2002-09-09T17:17:03Z
  • last-modified: 2006-11-25T00:38:23Z
  • route: 217.64.192.0/20
  • descr: Seeweb srl
  • origin: AS12637
  • mnt-by: SEEWEB-MNT
  • created: 2002-07-11T13:43:56Z
  • last-modified: 2006-02-03T13:39:49Z

Links to attack logs

****** ****** ******

Share on: