IP intelligence

193.142.38.11

United States · GTS-AS · Data Center

Own this IP? Request a review

90/100

Fraud score

critical risk

What we know about 193.142.38.11.

VPN

Clean

Proxy

Detected

Tor

Clean

Relay

Clean

Datacenter

Detected

Mobile

Clean

Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. Credential stuffing and login brute force attempts across multiple services. Exploiting web server vulnerabilities and launching HTTP attacks. Spam and automated registration abuse across multiple platforms. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Hosted on GTS-AS infrastructure. Located in a high-risk network neighborhood where 95% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation

Network

Organization
GTS-AS
ISP
GTS-AS
Connection type
Data Center
Cloud provider
–
Residential proxy
No
Shared connection
No

Location

Country
United States (US)
Region
–
City
–
Coordinates
37.7510, -97.8220
Timezone
America/Chicago
rDNS
no_ptr

History

First seen
May 6, 2026
Last seen
Nov 2, 2026
Times seen
1,456

Registry and abuse

Netname
US-ATLAS-LEASE
Abuse contact
info@atlasnetworkholdings.online
Status
ASSIGNED PA
Allocated
2018-09-13

Threat signatures · 9

c2_serverbotnet_nodelogin_brute_forceweb_attackserver_abusemulti_source_abusemulti_source_blacklistspamopen_proxy

Subnet (/24)

IPs observed
219
Abusive
209
Abuse ratio
95%

No reports on 193.142.38.11 yet.

Nobody has reported 193.142.38.11 yet. If it attacked you, be the first: every report feeds the free, open database that everyone can use.

193.142.38.11, answered.

Yes. FFraud classifies 193.142.38.11 as an open or public proxy. Connection type: Data Center.

FFraud scores 193.142.38.11 at 90/100 (critical risk) because Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. Credential stuffing and login brute force attempts across multiple services. Exploiting web server vulnerabilities and launching HTTP attacks. Spam and automated registration abuse across multiple platforms. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Hosted on GTS-AS infrastructure. Located in a high-risk network neighborhood where 95% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation We recommend blocking or challenging it.

193.142.38.11 is operated by GTS-AS (AS213954), located in United States.

The score reflects high-confidence signals: Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. Credential stuffing and login brute force attempts across multiple services. Exploiting web server vulnerabilities and launching HTTP attacks. Spam and automated registration abuse across multiple platforms. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Hosted on GTS-AS infrastructure. Located in a high-risk network neighborhood where 95% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation FFraud only lists an IP once it is independently confirmed at least twice, by our honeypot sensors and community reports.

Check another IP. One at a time, instantly.

193.142.38.11: fraud score 90 of 100, Critical

193.142.38.11

GTS-AS · United States

Critical

90/100

Fraud score

  • VPN: no
  • Proxy: yes
  • Tor: no
  • Datacenter: yes
Live from the FFraud APIFull report