SecureFeed - Is 109.248.11.123 Malicious? Host Analysis

Results for 109.248.11.123

Classification:

malicious

IP:

109.248.11.123

EntityType:

Tags:

ssh route router net

Malicious Tags:

bruteforce attack spy spyware virus malicious malware phishing threat route unauthorized spam scanning

Country:

City:

Orekhovo-Borisovo Yuzhnoye

State:

Moscow

Postal Code:

N/A

Lat/Lon:

55.6333°, 37.7333°

ISP Name:

Kontel LLC

ISP Network:

109.248.10.0/23

Source	Description	Last Seen	References
Blocklist.net.ua	Malicous host due to: Brute force passwords using SSH on server PS3	06/28/2024 11:36:02 (UTC)
FireHol	Host involved with attacks, spyware or viruses	11/22/2024 18:01:35 (UTC)
IPsum	Associated with various online threats, including cyberattacks, malware distribution, phishing, and other malicious activities	11/24/2024 00:03:06 (UTC)
Project Turris	this blocklist contains IP addresses that have attempted to access services on Turris routers or gain unauthorized access	06/30/2024 00:11:08 (UTC)
Ellio	Exists in threat list	06/30/2024 00:03:15 (UTC)
UCEPROTECT	Suspicious activity reported by trusted systems that hit their spamtraps or that tried unauthorized relaying.	07/06/2024 18:01:10 (UTC)
Nix Spam	Associated with recent spam activities.	06/30/2024 03:00:40 (UTC)
Blocklist.de	Detected by fail2ban	11/22/2024 17:00:08 (UTC)
Blocklist.de	Attacks on SSH services	11/22/2024 17:00:58 (UTC)
APNIC Community Honeynet Project	Involved in SSH brute-force attacks	11/22/2024 19:47:37 (UTC)
HoneyDB	Detected by network honeypots as engaging in suspicious activities, possibly indicative of scanning attempts, automated attacks, or other malicious behaviors	11/23/2024 00:00:00 (UTC)
Hybrid-Analysis	Host has shown activity related to malware.	11/23/2024 18:30:13 (UTC)	638032.cloud4box.ru