SecureFeed - Is 172.67.144.66 Malicious? Host Analysis

Results for 172.67.144.66

Classification:

malicious

IP:

172.67.144.66

EntityType:

Tags:

N/A

Malicious Tags:

scam scanning final ransomware malware phishing ransomware spy spyware malicious attack stealer

Country:

City:

Toronto

State:

Ontario

Postal Code:

N/A

Lat/Lon:

43.6532°, -79.3832°

ISP Name:

Cloudflare, Inc.

ISP Network:

172.67.144.0/21

Source	Description	Last Seen	References
Public Mastodon servers	Associated with Public Mastodon servers	12/20/2022 00:00:00 (UTC)
urlscan.io	Scam detected during url scan	05/13/2024 00:14:29 (UTC)	panen77-slotgacor.vip
oisd.nl	Malware detected with this host, including blocks ads, (mobile) app ads, phishing, malvertising, malware, spyware, ransomware, cryptoJacking, scam, etc.	01/12/2025 00:04:47 (UTC)	dash.barakaprojects.com.br,datexurlove.com,flowseasonallissoo.pw,guvenlisiparisim.club,obilet-tr.com,sunflowerserenade.cam
CERT-PL	Flagged as a malicious domain by Computer Emergency Response Team for Poland	07/24/2024 00:02:37 (UTC)	sunflowerserenade.cam
Phishing Army	Involved in phishing activities	08/03/2024 01:31:20 (UTC)	sunflowerserenade.cam
Politie.nl	Malware detected with this host, including domains and IPs used for phishing attacks and malware distribution.	12/17/2023 00:20:28 (UTC)	flowseasonallissoo.pw,obilet-tr.com
Hybrid-Analysis	Host has shown activity related to malware.	01/15/2025 15:15:01 (UTC)	myduaccount-quickpayment.click,n2.aroundpayablequirk.shop
Abuse.ch ThreatFox	Deemed malicious	12/06/2023 18:44:03 (UTC)	flowseasonallissoo.pw
Abuse.ch ThreatFox	Deemed malicious due to: Lumma Stealer	12/15/2023 15:30:59 (UTC)	flowseasonallissoo.pw