SecureFeed - Is 159.65.20.47 Malicious? Host Analysis

Results for 159.65.20.47

Classification:

malicious

IP:

159.65.20.47

EntityType:

Tags:

ssh sip voip firewall net

Malicious Tags:

attack risk spy spyware virus bruteforce spam unauthorized malicious scanning compromised malware phishing threat

Country:

City:

Farnham Royal

State:

England

Postal Code:

N/A

Lat/Lon:

51.5421°, -0.6158°

ISP Name:

DigitalOcean, LLC

ISP Network:

159.65.0.0/16

Source	Description	Last Seen
Blocklist.de	Detected by fail2ban	01/06/2025 22:15:03 (UTC)
Blocklist.de	Attacks on SSH services	01/06/2025 23:45:34 (UTC)
Blocklist.de	Attempt to log in to an SIP, VOIP or Asterisk Server	01/07/2025 16:15:28 (UTC)
FireHol	Host involved with attacks, spyware or viruses	01/07/2025 06:02:49 (UTC)
APNIC Community Honeynet Project	Involved in SSH brute-force attacks	01/06/2025 22:34:38 (UTC)
BruteForceBlocker	Suspected SSH brute force attempts, based on excessive failed login patterns, and subsequently blocked by the pf firewall.	01/07/2025 03:31:23 (UTC)
UCEPROTECT	Suspicious activity reported by trusted systems that hit their spamtraps or that tried unauthorized relaying.	01/07/2025 04:01:04 (UTC)
HoneyDB	Detected by network honeypots as engaging in suspicious activities, possibly indicative of scanning attempts, automated attacks, or other malicious behaviors	01/07/2025 00:00:00 (UTC)
BruteForceBlocker	Known hostile or compromised hosts	01/08/2025 00:00:43 (UTC)
IPsum	Associated with various online threats, including cyberattacks, malware distribution, phishing, and other malicious activities	01/08/2025 00:10:17 (UTC)