91.216.248.21 Threat Intelligence and Host Information

Oct 21, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 91.216.248.21 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 35/100

Host and Network Information

  • Tags: cyber security, ioc, malicious, Nextray, phishing

  • JARM: 2ad2ad0002ad2ad00042d42d0000002059a3b916699461c5923779b77cf06b

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: coinbl_hosts, hphosts_psh

Malware Detected on Host

Count: 9 bafe9f4850fdb18df839755822f0c9ac45d81c8cd79b78bff8f1081bdfbf022b ac79b017254279a49c1dff6a06da81aa891e019b35ecda429265d772cff7066b 1f37994043f716e077de17b5f34bb7e4bb348e2fd4b17a6d56ae8c7e2d6fe2a8 e2225ff0ac57e5722b4b37ef5888978fef11704d75a754fff1d5445f3955f16d be3c42f0be03f6350347b8097be404d8e3756e0bc29787b3fb66969238a19f80 c2dc8ce8f3640464867d008a839b384765f6f87dbe14c5af1f068ff09f4918f8 164f2f818a6900fcf83751ae0b02f4ae65b400b90f163143434af711de429620 c790a728b265044f4cce6f1cd4855dd78919a042bc7299580671f1df5669f693 02254f2cfd525f318423849ca13bd39e2f3b3df727e843bf089fa23a3db72f14

Open Ports Detected

123 3306 443 80

Map

Whois Information

  • inetnum: 91.216.248.0 - 91.216.248.255
  • netname: DE-LIMACITY-CLOUD
  • country: DE
  • abuse-c: ACRO293-RIPE
  • org: ORG-TG211-RIPE
  • admin-c: PHIL42-RIPE
  • tech-c: PHIL42-RIPE
  • status: ASSIGNED PI
  • mnt-by: RIPE-NCC-END-MNT
  • mnt-by: TRAFFICPLEX-MNT
  • mnt-routes: TRAFFICPLEX-MNT
  • mnt-domains: TRAFFICPLEX-MNT
  • created: 2010-07-13T13:31:44Z
  • last-modified: 2021-04-28T11:57:39Z
  • organisation: ORG-TG211-RIPE
  • org-name: TrafficPlex GmbH
  • org-type: LIR
  • address: Konsul-Smidt-Str. 90
  • address: 28217
  • address: Bremen
  • address: GERMANY
  • country: DE
  • phone: +4942140899450
  • admin-c: RA10375-RIPE
  • tech-c: RA10375-RIPE
  • abuse-c: AR62322-RIPE
  • mnt-ref: TRAFFICPLEX-MNT
  • mnt-by: RIPE-NCC-HM-MNT
  • mnt-by: TRAFFICPLEX-MNT
  • created: 2021-01-22T09:08:09Z
  • last-modified: 2021-01-22T09:08:12Z
  • person: Phillipp Roell
  • address: TrafficPlex GmbH
  • address: Konsul-Smidt-Str. 90
  • address: 28217 Bremen
  • address: Germany
  • phone: +4942140899450
  • nic-hdl: PHIL42-RIPE
  • mnt-by: TRAFFICPLEX-MNT
  • created: 2015-06-16T18:56:18Z
  • last-modified: 2021-04-22T09:32:21Z
  • route: 91.216.248.0/24
  • descr: Roell
  • origin: AS47447
  • mnt-by: MNT-23MEDIA
  • created: 2011-01-21T11:53:15Z
  • last-modified: 2011-01-21T11:53:15Z
Share on: