SecureFeed - Is 172.67.195.20 Malicious? Host Analysis

Results for 172.67.195.20

Classification:

malicious

IP:

172.67.195.20

EntityType:

Tags:

N/A

Malicious Tags:

malware final ransomware phishing ransomware scam spy spyware scanning attack malicious

Country:

City:

Toronto

State:

Ontario

Postal Code:

N/A

Lat/Lon:

43.6532°, -79.3832°

ISP Name:

Cloudflare, Inc.

ISP Network:

172.67.192.0/18

Source	Description	Last Seen	References
Public Mastodon servers	Associated with Public Mastodon servers	06/13/2023 00:00:00 (UTC)
Hybrid-Analysis	Host has shown activity related to malware.	01/21/2025 00:45:09 (UTC)	patriciamendez.shop
oisd.nl	Malware detected with this host, including blocks ads, (mobile) app ads, phishing, malvertising, malware, spyware, ransomware, cryptoJacking, scam, etc.	01/12/2025 00:06:09 (UTC)	amadeusduo.de,baba-asliii-11.buzz,cpcalendars.mediaffire2abcu2k.wdsy.biz.id,doniesieniadnia.click,poseidonstore.de
urlscan.io	Scam detected during url scan	12/11/2024 00:11:41 (UTC)	reading-discovery45.online
Politie.nl	Malware detected with this host, including domains and IPs used for phishing attacks and malware distribution.	12/08/2023 02:24:22 (UTC)	amadeusduo.de
PhishStats	Phishing URL	03/22/2024 08:09:47 (UTC)	splonline.servicedlgbn.world
Phishing Army	Involved in phishing activities	07/25/2024 00:26:53 (UTC)	doniesieniadnia.click,splonline.servicedlgbn.world
CERT-PL	Flagged as a malicious domain by Computer Emergency Response Team for Poland	07/24/2024 00:02:17 (UTC)	doniesieniadnia.click