SecureFeed - Is 194.38.22.137 Malicious? Host Analysis

Results for 194.38.22.137

Classification:

malicious

IP:

194.38.22.137

EntityType:

Tags:

net ssh

Malicious Tags:

spam unauthorized hijacking attack spy spyware virus malicious scanning malware phishing threat

Country:

City:

Kyiv

State:

Kyiv City

Postal Code:

N/A

Lat/Lon:

50.4501°, 30.5234°

ISP Name:

Rices Privately owned enterprise

ISP Network:

194.38.20.0/22

Source	Description	Last Seen	References
UCEPROTECT	Suspicious activity reported by trusted systems that hit their spamtraps or that tried unauthorized relaying.	11/26/2024 21:01:04 (UTC)
Nix Spam	Associated with recent spam activities.	01/06/2025 11:00:41 (UTC)
Spamhaus	Netblock is hijacked or leased by professional spam or cyber-crime operation	12/19/2024 00:10:49 (UTC)
Blocklist.de	Detected by fail2ban	01/12/2025 20:45:20 (UTC)
Blocklist.de	Attacks on SSH services	01/12/2025 20:45:35 (UTC)
FireHol	Host involved with attacks, spyware or viruses	01/12/2025 21:01:58 (UTC)
HoneyDB	Detected by network honeypots as engaging in suspicious activities, possibly indicative of scanning attempts, automated attacks, or other malicious behaviors	01/12/2025 00:00:00 (UTC)
APNIC Community Honeynet Project	Involved in SSH brute-force attacks	01/12/2025 23:15:46 (UTC)
IPsum	Associated with various online threats, including cyberattacks, malware distribution, phishing, and other malicious activities	01/14/2025 00:03:21 (UTC)
Hybrid-Analysis	Host has shown activity related to malware.	01/19/2025 02:45:15 (UTC)	taxas4.abasteceganha.org