SecureFeed - Is 104.21.52.209 Malicious? Host Analysis

Results for 104.21.52.209

Classification:

malicious

IP:

104.21.52.209

EntityType:

Tags:

N/A

Malicious Tags:

malware phishing scanning final ransomware ransomware scam spy spyware cobaltstrike malicious stealer

Country:

City:

Toronto

State:

Ontario

Postal Code:

N/A

Lat/Lon:

43.6532°, -79.3832°

ISP Name:

Cloudflare, Inc.

ISP Network:

104.16.0.0/13

Source	Description	Last Seen	References
Hybrid-Analysis	Host has shown activity related to malware.	11/23/2024 17:00:29 (UTC)	acet.fi,fannydayywjwo.shop,inventec.arntictur.com
PhishStats	Phishing URL	07/30/2024 17:36:21 (UTC)	service-terra.carlosamaral.workers.dev
urlscan.io	Phishing detected during url scan	04/21/2024 00:17:50 (UTC)	ziptopapi.site
oisd.nl	Malware detected with this host, including blocks ads, (mobile) app ads, phishing, malvertising, malware, spyware, ransomware, cryptoJacking, scam, etc.	09/30/2024 00:04:38 (UTC)	fannydayywjwo.shop,login.ackwinsm.ru,wcanadagoosecheap.com,wrap.insteadmorning.shop
urlscan.io	Scam detected during url scan	08/16/2024 00:13:11 (UTC)	klasiktoto8y15o.com
Abuse.ch ThreatFox	Deemed malicious due to: Cobalt Strike	07/04/2023 17:29:34 (UTC)	nbnj.xyz
Abuse.ch ThreatFox	Deemed malicious due to: {action}	09/23/2024 12:46:15 (UTC)	fannydayywjwo.shop
Abuse.ch ThreatFox	Deemed malicious due to: Lumma Stealer	09/23/2024 12:48:47 (UTC)	fannydayywjwo.shop