38.242.221.254 Threat Intelligence and Host Information

Share on:

General

This page contains threat intelligence information for the IPv4 address 38.242.221.254 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 5/100

Host and Network Information

  • View other sources: Spamhaus VirusTotal

  • Country: United States
  • Network: AS51167 contabo gmbh
  • Noticed: 1 times
  • Protcols Attacked: Anonymous Proxy
  • Passive DNS Results: prohunterchannel.com walldesarrollo.ideihostingfree30.top aguazarca.epictecno.com navarra.epictecno.com binari.ideihostingfree30.top qr.epictecno.com productosimport.ideihostingfree30.top zaben.ideihostingfree30.top traducir.epictecno.com puzzle.epictecno.com coffee.epictecno.com calendar.epictecno.com escort.ideihostingfree30.top aguazar.epictecno.com tracking.epictecno.com peanutdefinitiva.epictecno.com peanutelementor.epictecno.com waybetterlatam.com www.waybetterlatam.com hispa.ideihosting.cloud gruposalus.ideihosting.cloud boltestesi.epictecno.com catalogo.epictecno.com woobase.epictecno.com accesibledefinitivo.ideihosting.cloud accesible.ideihosting.cloud tiendablue.ideihosting.cloud samvenet.epictecno.com miguelcrea.epictecno.com anunciosfacil.com www.anunciosfacil.com portfolio.epictecno.com testing.ideihosting.cloud icantriatlon.ideihostingfree30.top epictecno.com miguelpractica.epictecno.com blelasbelleza.co auditoriodelafe.epictecno.com minisitio1.epictecno.com intelligentmarkets.com.co gimnasio.epictecno.com creainnovaeduca.epictecno.com homey2.epictecno.com www.magiadejaguar.com magiadejaguar.com www.o3terapiaintegral.com o3terapiaintegral.com desarrollo.dienut.com fincasales.com www.fincasales.com inmobilix.ideihostingfree30.top www.bluemarlinveracruz.com bluemarlinveracruz.com www.quequecas.com quequecas.com dienut.com www.dienut.com ticozz.com expo.weddingwayspr.com www.costaricaglobalinvestments.com costaricaglobalinvestments.com ideihostingfree30.top crescere.live www.crescere.live coachnutricionintegral.com www.velauniformes.com velauniformes.com amarteessanarte.com onfasesonline.com desarrollo.onfases.com aazdsgn.com www.lacallecr.com lacallecr.com cafesnfrancisco.com www.cafesnfrancisco.com www.difrutto.com difrutto.com www.donatita.co donatita.co www.herycam.co herycam.co www.yosvanygarcia.com yosvanygarcia.com pamelabardi.com camilamesias.com psicologaclaudiamercado.com ualanday.neyduguanaortiz.com marjcc.ideihosting.cloud onfases.com www.onfases.com weddingwayspr.com www.weddingwayspr.com farmacia.zona274.com iinmx.com danimktdigital.com ideiplesk22.ideihosting.cloud desarrollo.iinmx.com

Open Ports Detected

110 143 21 22 25 443 465 53 587 80 8443 8880 993 995

Map

Whois Information

  • NetRange: 38.0.0.0 - 38.255.255.255
  • CIDR: 38.0.0.0/8
  • NetName: COGENT-A
  • NetHandle: NET-38-0-0-0-1
  • Parent: ()
  • NetType: Direct Allocation
  • OriginAS: AS174
  • Organization: PSINet, Inc. (PSI)
  • RegDate: 1991-04-16
  • Updated: 2023-10-11
  • Comment: IP allocations within 38.0.0.0/8 are used for Cogent customer static IP assignments.
  • Comment:
  • Comment:
  • Comment: Geofeed https://geofeed.cogentco.com/geofeed.csv
  • Ref: https://rdap.arin.net/registry/ip/38.0.0.0
  • OrgName: PSINet, Inc.
  • OrgId: PSI
  • Address: 2450 N Street NW
  • City: Washington
  • StateProv: DC
  • PostalCode: 20037
  • Country: US
  • RegDate:
  • Updated: 2023-10-11
  • Comment: Geofeed https://geofeed.cogentco.com/geofeed.csv
  • Ref: https://rdap.arin.net/registry/entity/PSI
  • OrgTechHandle: IPALL-ARIN
  • OrgTechName: IP Allocation
  • OrgTechPhone: +1-877-875-4311
  • OrgTechEmail: [email protected]
  • OrgTechRef: https://rdap.arin.net/registry/entity/IPALL-ARIN
  • OrgNOCHandle: ZC108-ARIN
  • OrgNOCName: Cogent Communications
  • OrgNOCPhone: +1-877-875-4311
  • OrgNOCEmail: [email protected]
  • OrgNOCRef: https://rdap.arin.net/registry/entity/ZC108-ARIN
  • OrgAbuseHandle: COGEN-ARIN
  • OrgAbuseName: Cogent Abuse
  • OrgAbusePhone: +1-877-875-4311
  • OrgAbuseEmail: [email protected]
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/COGEN-ARIN
  • RTechHandle: PSI-NISC-ARIN
  • RTechName: IP Allocation
  • RTechPhone: +1-877-875-4311
  • RTechEmail: [email protected]
  • RTechRef: https://rdap.arin.net/registry/entity/PSI-NISC-ARIN
  • network:ID:NET4-26F2C00013
  • network:Network-Name:NET4-26F2C00013
  • network:IP-Network:38.242.192.0/19
  • network:Org-Name:Contabo GmbH
  • network:Street-Address:IN DER STEELE 39
  • network:City:DUSSELDORF
  • network:Country:DE
  • network:Postal-Code:40599
  • network:Tech-Contact:MH7476-RIPE
  • network:Updated:2022-01-26 09:16:14

Links to attack logs

anonymous-proxy-ip-list-2023-10-02