SecureFeed - Is 185.141.35.21 Malicious? Host Analysis

Results for 185.141.35.21

Classification:

malicious

IP:

185.141.35.21

EntityType:

Tags:

N/A

Malicious Tags:

jrat malicious njrat malware final ransomware phishing ransomware scam spy spyware quasarrat

Country:

City:

Osmangazi

State:

Bursa Province

Postal Code:

N/A

Lat/Lon:

40.2680°, 29.0882°

ISP Name:

DGN TEKNOLOJI A.S.

ISP Network:

185.141.34.0/23

Source	Description	Last Seen	References
Abuse.ch ThreatFox	Deemed malicious due to: NjRAT	10/05/2024 06:40:02 (UTC)	drd8jxg.localto.net,gbyvwcn.localto.net
Hybrid-Analysis	Host has shown activity related to malware.	01/09/2025 18:30:18 (UTC)	drd8jxg.localto.net,ubxn6j9dc.localto.net
oisd.nl	Malware detected with this host, including blocks ads, (mobile) app ads, phishing, malvertising, malware, spyware, ransomware, cryptoJacking, scam, etc.	01/10/2025 00:05:28 (UTC)	drd8jxg.localto.net,gbyvwcn.localto.net,panel39d3sxas58d419784210.localto.net,ubxn6j9dc.localto.net
Abuse.ch ThreatFox	Deemed malicious due to: Quasar RAT	01/09/2025 06:18:18 (UTC)	ubxn6j9dc.localto.net
Abuse.ch ThreatFox	Deemed malicious due to: {action}	12/29/2024 10:06:29 (UTC)	jt8iyre.localto.net
PhishStats	Phishing URL	12/21/2024 11:36:51 (UTC)	panel39d3sxas58d419784210.localto.net
Phishing Army	Involved in phishing activities	12/22/2024 00:07:47 (UTC)	panel39d3sxas58d419784210.localto.net