SecureFeed - Is 185.120.80.13 Malicious? Host Analysis

Results for 185.120.80.13

Classification:

malicious

IP:

185.120.80.13

EntityType:

Tags:

php http irc reg

Malicious Tags:

attack bruteforce spy spyware virus flood spam ddos unauthorized malicious malware phishing threat

Country:

City:

Sulmona

State:

Abruzzo

Postal Code:

N/A

Lat/Lon:

42.0561°, 13.9242°

ISP Name:

Telweb s.r.l.

ISP Network:

185.120.80.0/22

Source	Description	Last Seen	References
Blocklist.net.ua	Malicous host due to: xmlrpc.php / Brute force attack on site greencityhotel.com.ua. Requests to the script: /xmlrpc.php	12/07/2024 12:27:02 (UTC)
FireHol	Host involved with attacks, spyware or viruses	01/14/2025 03:01:53 (UTC)
Blocklist.net.ua	Malicous host due to: HTTP flood requests to the websites	12/08/2024 16:20:16 (UTC)
GreenSnow	Marked for involvement in attacks or bruteforce activities	01/19/2025 00:02:51 (UTC)
Blocklist.de	Detected by fail2ban	01/17/2025 23:30:10 (UTC)
Blocklist.de	Attacks using RFI, REG-Bots, IRC-Bots or BadBots	12/18/2024 18:00:46 (UTC)
Nix Spam	Associated with recent spam activities.	01/14/2025 20:00:55 (UTC)
Blocklist.de	Attacks on the service Apache, Apache-DDOS, RFI-Attacks	01/17/2025 23:30:17 (UTC)
Blocklist.de	Attacks using Brute-Force	01/17/2025 23:30:20 (UTC)
UCEPROTECT	Suspicious activity reported by trusted systems that hit their spamtraps or that tried unauthorized relaying.	01/15/2025 01:01:01 (UTC)
IPsum	Associated with various online threats, including cyberattacks, malware distribution, phishing, and other malicious activities	01/19/2025 00:03:03 (UTC)
Hybrid-Analysis	Host has shown activity related to malware.	01/19/2025 11:45:09 (UTC)	poppy.arc.it