SecureFeed - Is 18.218.10.228 Malicious? Host Analysis

Results for 18.218.10.228

Classification:

malicious

IP:

18.218.10.228

EntityType:

Tags:

reg ssh net route router

Malicious Tags:

attack bruteforce malicious spy spyware virus scanning spam unauthorized threat route exploit malware phishing

Country:

City:

Dublin

State:

Ohio

Postal Code:

N/A

Lat/Lon:

40.0992°, -83.1141°

ISP Name:

Amazon.com, Inc.

ISP Network:

18.216.0.0/13

Source	Description	Last Seen
DroneBL	Flagged as Brute force attackers, due to data aggregated from multiple sources and observed malicious behavior patterns.	01/01/2025 19:29:48 (UTC)
Blocklist.de	Detected by fail2ban	01/01/2025 20:15:14 (UTC)
Blocklist.de	Attacks on SSH services	01/01/2025 20:15:37 (UTC)
FireHol	Host involved with attacks, spyware or viruses	01/01/2025 21:02:06 (UTC)
HoneyDB	Detected by network honeypots as engaging in suspicious activities, possibly indicative of scanning attempts, automated attacks, or other malicious behaviors	01/01/2025 00:00:00 (UTC)
UCEPROTECT	Suspicious activity reported by trusted systems that hit their spamtraps or that tried unauthorized relaying.	01/02/2025 09:01:21 (UTC)
Ellio	Exists in threat list	01/03/2025 00:02:57 (UTC)
Project Turris	this blocklist contains IP addresses that have attempted to access services on Turris routers or gain unauthorized access	01/03/2025 00:09:18 (UTC)
3CORESec	Hosts involved in mass scanning and/or exploitation attempts	01/03/2025 08:00:20 (UTC)
Binary Defense	Flagged by Binary Defense's Artillery Threat Intelligence and Banlist, based on advanced TTPs and Defense-in-Depth insights	01/03/2025 17:00:05 (UTC)
IPsum	Associated with various online threats, including cyberattacks, malware distribution, phishing, and other malicious activities	01/04/2025 00:08:33 (UTC)