SecureFeed - Is 114.199.200.39 Malicious? Host Analysis

Results for 114.199.200.39

Classification:

malicious

IP:

114.199.200.39

EntityType:

Tags:

ssh route router net

Malicious Tags:

attack spy spyware virus bruteforce malicious malware phishing threat route unauthorized scanning

Country:

City:

Daegu

State:

Daegu

Postal Code:

N/A

Lat/Lon:

35.8703°, 128.5910°

ISP Name:

Kumho Cable

ISP Network:

114.199.192.0/19

Source	Description	Last Seen
Blocklist.de	Detected by fail2ban	01/04/2025 13:15:14 (UTC)
Blocklist.de	Attacks on SSH services	01/04/2025 13:15:37 (UTC)
FireHol	Host involved with attacks, spyware or viruses	01/05/2025 21:02:43 (UTC)
Blocklist.net.ua	Malicous host due to: Brute force passwords using SSH on server RELAY	01/04/2025 22:19:01 (UTC)
APNIC Community Honeynet Project	Involved in SSH brute-force attacks	01/04/2025 09:27:40 (UTC)
CINS Army List	Malicious activity detected	01/05/2025 18:00:28 (UTC)
IPsum	Associated with various online threats, including cyberattacks, malware distribution, phishing, and other malicious activities	01/06/2025 00:03:33 (UTC)
Project Turris	this blocklist contains IP addresses that have attempted to access services on Turris routers or gain unauthorized access	01/06/2025 00:09:35 (UTC)
HoneyDB	Detected by network honeypots as engaging in suspicious activities, possibly indicative of scanning attempts, automated attacks, or other malicious behaviors	01/06/2025 00:00:00 (UTC)