SecureFeed - Is 38.9.141.74 Malicious? Host Analysis

Searching 38.9.141.74

You still have 12/20 request limit available for today. Sign up to get higher limits.

Results for 38.9.141.74

Classification:

malicious

IP:

38.9.141.74

EntityType:

Tags:

ssh net

Malicious Tags:

attack spy spyware virus malicious malware phishing threat scanning bruteforce

Country:

City:

Medan

State:

North Sumatra

Postal Code:

N/A

Lat/Lon:

3.5952°, 98.6722°

ISP Name:

PT. Media Antar Nusa

ISP Network:

38.9.140.0/23

Source	Description	Last Seen	References
Blocklist.de	Detected by fail2ban	01/06/2025 01:30:21 (UTC)
Blocklist.de	Attacks on SSH services	01/06/2025 01:30:37 (UTC)
FireHol	Host involved with attacks, spyware or viruses	01/09/2025 18:05:01 (UTC)
IPsum	Associated with various online threats, including cyberattacks, malware distribution, phishing, and other malicious activities	01/07/2025 00:08:34 (UTC)
APNIC Community Honeynet Project	Involved in SSH brute-force attacks	01/04/2025 09:38:41 (UTC)
HoneyDB	Detected by network honeypots as engaging in suspicious activities, possibly indicative of scanning attempts, automated attacks, or other malicious behaviors	01/07/2025 00:00:00 (UTC)
Blocklist.net.ua	Malicous host due to: Brute force passwords using SSH on server RELAY	01/09/2025 14:51:01 (UTC)
Hybrid-Analysis	Host has shown activity related to malware.	01/10/2025 13:00:45 (UTC)	berlin.vpsbumiayu.site