SecureFeed - Is 139.59.168.133 Malicious? Host Analysis

Results for 139.59.168.133

Classification:

malicious

IP:

139.59.168.133

EntityType:

Tags:

ssh sip voip net firewall

Malicious Tags:

malicious attack spy spyware virus risk scanning bruteforce spam unauthorized malware

Country:

City:

London

State:

England

Postal Code:

N/A

Lat/Lon:

51.4741°, -0.0797°

ISP Name:

DigitalOcean, LLC

ISP Network:

139.59.0.0/16

Source	Description	Last Seen	References
CINS Army List	Malicious activity detected	08/29/2024 15:00:07 (UTC)
FireHol	Host involved with attacks, spyware or viruses	11/23/2024 09:02:47 (UTC)
Blocklist.de	Detected by fail2ban	11/22/2024 08:45:15 (UTC)
Blocklist.de	Attacks on SSH services	11/22/2024 20:15:36 (UTC)
Blocklist.de	Attempt to log in to an SIP, VOIP or Asterisk Server	11/22/2024 18:15:32 (UTC)
APNIC Community Honeynet Project	Involved in SSH brute-force attacks	11/22/2024 23:41:05 (UTC)
HoneyDB	Detected by network honeypots as engaging in suspicious activities, possibly indicative of scanning attempts, automated attacks, or other malicious behaviors	11/23/2024 00:00:00 (UTC)
BruteForceBlocker	Suspected SSH brute force attempts, based on excessive failed login patterns, and subsequently blocked by the pf firewall.	11/23/2024 06:52:06 (UTC)
UCEPROTECT	Suspicious activity reported by trusted systems that hit their spamtraps or that tried unauthorized relaying.	11/23/2024 11:03:09 (UTC)
Hybrid-Analysis	Host has shown activity related to malware.	11/23/2024 09:45:15 (UTC)	mail.vdex.eu