SecureFeed - Is 139.59.35.248 Malicious? Host Analysis

Results for 139.59.35.248

Classification:

malicious

IP:

139.59.35.248

EntityType:

Tags:

irc reg net http

Malicious Tags:

attack spy spyware virus bruteforce malicious scanning ddos abuse spam malware phishing threat flood unauthorized

Country:

City:

Bengaluru

State:

Karnataka

Postal Code:

N/A

Lat/Lon:

12.8498°, 77.6545°

ISP Name:

DigitalOcean, LLC

ISP Network:

139.59.0.0/16

Source	Description	Last Seen	References
FireHol	Host involved with attacks, spyware or viruses	09/05/2024 09:01:33 (UTC)
GreenSnow	Marked for involvement in attacks or bruteforce activities	09/12/2024 23:00:24 (UTC)
Blocklist.de	Detected by fail2ban	09/07/2024 09:15:23 (UTC)
Blocklist.de	Attacks using RFI, REG-Bots, IRC-Bots or BadBots	09/07/2024 09:15:33 (UTC)
HoneyDB	Detected by network honeypots as engaging in suspicious activities, possibly indicative of scanning attempts, automated attacks, or other malicious behaviors	08/17/2024 00:00:00 (UTC)
Blocklist.de	Attacks on the service Apache, Apache-DDOS, RFI-Attacks	08/26/2024 12:45:24 (UTC)
Blocklist.de	Attacks using Brute-Force	08/26/2024 12:45:30 (UTC)
FireHol	Host marked as abuser	08/21/2024 09:05:24 (UTC)
StopForumSpam.com	Hosts that have been reported as a forum spam source	08/22/2024 00:08:35 (UTC)
IPsum	Associated with various online threats, including cyberattacks, malware distribution, phishing, and other malicious activities	09/28/2024 00:02:58 (UTC)
Blocklist.net.ua	Malicous host due to: HTTP flood requests to the websites	05/29/2024 13:29:08 (UTC)
UCEPROTECT	Suspicious activity reported by trusted systems that hit their spamtraps or that tried unauthorized relaying.	10/20/2024 14:03:09 (UTC)
GPF DNS Blocklist	Deemed malicious due to: Forum/Comment/Wiki Spammer	06/11/2024 09:07:00 (UTC)
Ellio	Exists in threat list	06/12/2024 00:03:12 (UTC)
Hybrid-Analysis	Host has shown activity related to malware.	11/27/2024 00:30:22 (UTC)	alamoheightscounseling.com