68.65.122.53 Threat Intelligence and Host Information

Sep 14, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 68.65.122.53 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 45/100

Host and Network Information

  • Tags: agenttesla, agentteslaexe, anna paula, arkeistealer, associated, azorult, azorultexe, currc3adculo, danabot, darkrat, dridex, dridexopendir, emotetheodo, formbook, from email, gandcrab, gozi, hancitor, hawkeye, headers, heodo, icedid, kpot, kpotstealer, loader, loki, luminositylink, malspam email, malware, msi file, nanocore, nemty, netwire, phishing, phorpiex, pony, qakbot, qealler, quasarrat, raccoonstealer, remcos, remcosrat, scam, servhelper, stealer, systembc, trickbot, troldesh, tuesday, utf8, zip archive, zloader

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: hphosts_emd, hphosts_psh

Malware Detected on Host

Count: 9 0ab586ce8cdcd735a997909774a23f4a3f1b7b583894f6eb666ac3c46c10b97d a7a499ad7fd62d0c6705e02eb55bc41117defbde7047cac60d870fbcbe7badb5 a7e7b31d73abde089343e17fb1a37d2330e4510ae94814515ae45b38afe2c662 68f77d37ae24a9f9fb5c5b427c2650d6c70804308724c72fbec773446717bab1 4fdf22614a5da44f57dbc9be564e7489d3cc885b1838720ce815c651da3a0b68 1219cfdf13a9c920d8445e19df2f458fcfcf65170e6ed7a63ebce684ea8ad36d be6c1600352157b88f6c12ced20d1d300a43e13e6d214b1d6793b0c89153078a 11dc446753646f49b79e834029dd2ee21a53a380f7b15423bb530e7ed80fd1c5 b529531d7cd90f48694e8389b6d278c698fd875eea0357cc32198cebcc82cabe

Open Ports Detected

2079 2095 21 26 465 53 587 80 993 995

Whois Information

  • NetRange: 68.65.120.0 - 68.65.123.255
  • CIDR: 68.65.120.0/22
  • NetName: NCNET-7
  • NetHandle: NET-68-65-120-0-1
  • Parent: NET68 (NET-68-0-0-0-0)
  • NetType: Direct Allocation
  • OriginAS:
  • Organization: Namecheap, Inc. (NAMEC-4)
  • RegDate: 2015-03-06
  • Updated: 2015-03-06
  • Comment: http://namecheap.com
  • Comment: for any abuse please use: abuse@namecheap.com
  • Ref: https://rdap.arin.net/registry/ip/68.65.120.0
  • OrgName: Namecheap, Inc.
  • OrgId: NAMEC-4
  • Address: 11400 W. Olympic Blvd. Suite 200
  • City: Los Angeles
  • StateProv: CA
  • PostalCode: 90064
  • Country: US
  • RegDate: 2011-01-28
  • Updated: 2024-11-25
  • Ref: https://rdap.arin.net/registry/entity/NAMEC-4
  • OrgTechHandle: EFIME-ARIN
  • OrgTechName: Efimenko, Igor
  • OrgTechPhone: +1-323-375-2822
  • OrgTechEmail: igor.e@namecheap.com
  • OrgTechRef: https://rdap.arin.net/registry/entity/EFIME-ARIN
  • OrgAbuseHandle: ABUSE2885-ARIN
  • OrgAbuseName: Abuse team
  • OrgAbusePhone: +1-323-375-2822
  • OrgAbuseEmail: abuse@namecheaphosting.com
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2885-ARIN
  • OrgTechHandle: TECHT4-ARIN
  • OrgTechName: Tech team
  • OrgTechPhone: +1-661-310-2107
  • OrgTechEmail: tech@namecheaphosting.com
  • OrgTechRef: https://rdap.arin.net/registry/entity/TECHT4-ARIN
  • network:Class-Name:network
  • network:Auth-Area:68.65.122.32/27
  • network:ID:NET-53460.68.65.122.53
  • network:IP-Network:68.65.122.53
  • network:IP-Network-Block:68.65.122.53
  • network:Org-Name:Web-hosting.com
  • network:Street-Address:3402 East University Drive
  • network:City:Phoenix
  • network:State:AZ
  • network:Postal-Code:85034
  • network:Country-Code:US
  • network:Tech-Contact:MAINT-53460.68.65.122.53
  • network:Created:20180510122225000
  • network:Updated:20180510134921000
  • network:Updated-By:net-admin@namecheap.com
  • contact:POC-Name:Network team
  • contact:POC-Email:net-admin@namecheap.com
  • contact:POC-Phone:
  • contact:Tech-Name:Network team
  • contact:Tech-Email:net-admin@namecheap.com
  • contact:Tech-Phone:
  • contact:Abuse-Name:Abuse team
  • contact:Abuse-Email:abuse@namecheaphosting.com

Links to attack logs

****** ****** ******

Share on: