90/100
Fraud score
critical risk
What we know about 193.142.38.11.
VPN
Clean
Proxy
Detected
Tor
Clean
Relay
Clean
Datacenter
Detected
Mobile
Clean
Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. Credential stuffing and login brute force attempts across multiple services. Exploiting web server vulnerabilities and launching HTTP attacks. Spam and automated registration abuse across multiple platforms. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Hosted on GTS-AS infrastructure. Located in a high-risk network neighborhood where 95% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation
Network
- ASN
- AS213954
- Organization
- GTS-AS
- ISP
- GTS-AS
- Connection type
- Data Center
- Cloud provider
- –
- Residential proxy
- No
- Shared connection
- No
Location
- Country
- United States (US)
- Region
- –
- City
- –
- Coordinates
- 37.7510, -97.8220
- Timezone
- America/Chicago
- rDNS
- no_ptr
History
- First seen
- May 6, 2026
- Last seen
- Nov 2, 2026
- Times seen
- 1,456
Registry and abuse
- Netname
- US-ATLAS-LEASE
- Abuse contact
- info@atlasnetworkholdings.online
- Status
- ASSIGNED PA
- Allocated
- 2018-09-13
Threat signatures · 9
Subnet (/24)
- IPs observed
- 219
- Abusive
- 209
- Abuse ratio
- 95%
No reports on 193.142.38.11 yet.
Nobody has reported 193.142.38.11 yet. If it attacked you, be the first: every report feeds the free, open database that everyone can use.
193.142.38.11, answered.
Yes. FFraud classifies 193.142.38.11 as an open or public proxy. Connection type: Data Center.
FFraud scores 193.142.38.11 at 90/100 (critical risk) because Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. Credential stuffing and login brute force attempts across multiple services. Exploiting web server vulnerabilities and launching HTTP attacks. Spam and automated registration abuse across multiple platforms. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Hosted on GTS-AS infrastructure. Located in a high-risk network neighborhood where 95% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation We recommend blocking or challenging it.
193.142.38.11 is operated by GTS-AS (AS213954), located in United States.
The score reflects high-confidence signals: Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. Credential stuffing and login brute force attempts across multiple services. Exploiting web server vulnerabilities and launching HTTP attacks. Spam and automated registration abuse across multiple platforms. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Hosted on GTS-AS infrastructure. Located in a high-risk network neighborhood where 95% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation FFraud only lists an IP once it is independently confirmed at least twice, by our honeypot sensors and community reports.
Check another IP. One at a time, instantly.
193.142.38.11: fraud score 90 of 100, Critical
193.142.38.11
GTS-AS · United States
90/100
Fraud score
- VPN: no
- Proxy: yes
- Tor: no
- Datacenter: yes