SecureFeed - Is 172.67.160.193 Malicious? Host Analysis

Results for 172.67.160.193

Classification:

malicious

IP:

172.67.160.193

EntityType:

Tags:

N/A

Malicious Tags:

malicious phishing malware stealer attack final ransomware ransomware scam spy spyware scanning spam

Country:

City:

Toronto

State:

Ontario

Postal Code:

N/A

Lat/Lon:

43.6532°, -79.3832°

ISP Name:

Cloudflare, Inc.

ISP Network:

172.67.128.0/17

Source	Description	Last Seen	References
Phishtank	Suspected phishing site, identified through community verification and analysis	03/24/2022 00:47:54 (UTC)
Hybrid-Analysis	Host has shown activity related to malware.	12/18/2024 20:00:42 (UTC)	fb88.vegas,intro-hd.net,romsgames.net
Abuse.ch ThreatFox	Deemed malicious due to: Lumma Stealer	01/12/2025 20:43:07 (UTC)	misha-lomonosov.com
Abuse.ch ThreatFox	Deemed malicious due to: {action}	01/12/2025 20:44:07 (UTC)	misha-lomonosov.com
Phishing Army	Involved in phishing activities	09/15/2024 00:08:13 (UTC)	ipahaxqpvmuvnevfhjzsl.tdyifti.cn
Politie.nl	Malware detected with this host, including domains and IPs used for phishing attacks and malware distribution.	12/15/2023 00:19:39 (UTC)	evlikrdswhnzsiwlsz.net
oisd.nl	Malware detected with this host, including blocks ads, (mobile) app ads, phishing, malvertising, malware, spyware, ransomware, cryptoJacking, scam, etc.	01/12/2025 00:05:08 (UTC)	alignedalts.net,evlikrdswhnzsiwlsz.net,mariannesdtyleut.shop
urlscan.io	Spam detected during url scan	03/01/2024 00:22:11 (UTC)	surveyrewardusa.com