SecureFeed - Is 216.245.214.84 Malicious? Host Analysis

Results for 216.245.214.84

Classification:

malicious

IP:

216.245.214.84

EntityType:

Tags:

N/A

Malicious Tags:

malicious phishing attack malware final ransomware ransomware scam spy spyware exploit threat

Country:

City:

Dallas

State:

Texas

Postal Code:

N/A

Lat/Lon:

32.7767°, -96.7970°

ISP Name:

Limestone Networks, Inc.

ISP Network:

216.245.192.0/19

Source	Description	Last Seen	References
CERT-PL	Flagged as a malicious domain by Computer Emergency Response Team for Poland	07/24/2024 00:02:42 (UTC)	sangwory.com,travpayments.com,www.familyfithealth.com,www.kellymoses.com
Phishing Army	Involved in phishing activities	04/25/2024 00:06:42 (UTC)	sangwory.com,travpayments.com,www.familyfithealth.com,www.kellymoses.com
Politie.nl	Malware detected with this host, including domains and IPs used for phishing attacks and malware distribution.	12/21/2023 01:28:52 (UTC)	comurbate.com,harltdoors.com,sangwory.com,travpayments.com,trax.inspectorclick.com,v2.inspectorclick.com
oisd.nl	Malware detected with this host, including blocks ads, (mobile) app ads, phishing, malvertising, malware, spyware, ransomware, cryptoJacking, scam, etc.	08/20/2024 00:05:19 (UTC)	checkbs.com,comurbate.com,harltdoors.com,maryduke.co.uk,sangwory.com,travpayments.com
Hybrid-Analysis	Host has shown activity related to malware.	12/27/2024 19:15:09 (UTC)	jaworskimeatmarket.com
Botvrij	Malicious bot activity or other cyber threats, based on reports from users and trusted sources. Reason: Evil Eye Threat Actor Resurfaces with iOS Exploit and Updated Implant	12/22/2024 00:00:43 (UTC)	status.verifyingbycf.com