SecureFeed - Is 170.64.236.221 Malicious? Host Analysis

Results for 170.64.236.221

Classification:

malicious

IP:

170.64.236.221

EntityType:

Tags:

ssh net

Malicious Tags:

attack malicious scanning spy spyware virus exploit bruteforce malware phishing threat

Country:

City:

Alexandria

State:

New South Wales

Postal Code:

N/A

Lat/Lon:

-33.9088°, 151.1960°

ISP Name:

DigitalOcean, LLC

ISP Network:

170.64.224.0/20

Source	Description	Last Seen
Blocklist.de	Detected by fail2ban	01/06/2025 22:30:11 (UTC)
Blocklist.de	Attacks on SSH services	01/06/2025 22:30:31 (UTC)
HoneyDB	Detected by network honeypots as engaging in suspicious activities, possibly indicative of scanning attempts, automated attacks, or other malicious behaviors	01/06/2025 00:00:00 (UTC)
FireHol	Host involved with attacks, spyware or viruses	01/07/2025 00:05:13 (UTC)
3CORESec	Hosts involved with SSH brute-force	01/07/2025 04:00:01 (UTC)
3CORESec	Hosts involved in mass scanning and/or exploitation attempts	01/07/2025 04:00:09 (UTC)
3CORESec	Hosts involved in various malicious activities (bruteforce or scanning)	01/08/2025 00:00:12 (UTC)
IPsum	Associated with various online threats, including cyberattacks, malware distribution, phishing, and other malicious activities	01/08/2025 00:10:17 (UTC)
APNIC Community Honeynet Project	Involved in SSH brute-force attacks	01/07/2025 16:43:01 (UTC)