SecureFeed - Is 34.86.81.254 Malicious? Host Analysis

Results for 34.86.81.254

Classification:

malicious

IP:

34.86.81.254

EntityType:

Tags:

ssh firewall net route router

Malicious Tags:

attack bruteforce malicious scanning spy spyware virus route unauthorized compromised malware phishing threat

Country:

City:

Washington D.C.

State:

District of Columbia

Postal Code:

N/A

Lat/Lon:

38.9072°, -77.0369°

ISP Name:

Google LLC

ISP Network:

34.80.0.0/12

Source	Description	Last Seen	References
Blocklist.de	Detected by fail2ban	05/31/2026 15:45:04 (UTC)
Blocklist.de	Attacks on SSH services	05/31/2026 15:45:19 (UTC)
BruteForceBlocker	Suspected SSH brute force attempts, based on excessive failed login patterns, and subsequently blocked by the pf firewall.	05/31/2026 17:50:17 (UTC)
Blocklist.net.ua	Malicous host due to: Brute force passwords using SSH on server S19	05/31/2026 15:10:02 (UTC)
HoneyDB	Detected by network honeypots as engaging in suspicious activities, possibly indicative of scanning attempts, automated attacks, or other malicious behaviors	05/31/2026 00:00:00 (UTC)
FireHol	Host involved with attacks, spyware or viruses	06/01/2026 00:01:50 (UTC)
Project Turris	this blocklist contains IP addresses that have attempted to access services on Turris routers or gain unauthorized access	06/01/2026 00:11:08 (UTC)
BruteForceBlocker	Known hostile or compromised hosts	06/02/2026 00:00:47 (UTC)
IPsum	Associated with various online threats, including cyberattacks, malware distribution, phishing, and other malicious activities	06/02/2026 00:12:32 (UTC)
Abuse.ch UrlHaus	Url associated with malware and {action}	06/01/2026 05:46:22 (UTC)	34.86.81.254
Abuse.ch UrlHaus	Url associated with malware and 63-bit	06/01/2026 05:46:22 (UTC)	34.86.81.254,http://34.86.81.254/meow