SecureFeed - Is 64.23.142.244 Malicious? Host Analysis

Results for 64.23.142.244

Classification:

malicious

IP:

64.23.142.244

EntityType:

Tags:

ssh net firewall

Malicious Tags:

attack spy spyware virus malicious scanning bruteforce malware phishing threat

Country:

City:

Santa Clara

State:

California

Postal Code:

N/A

Lat/Lon:

37.3986°, -121.9640°

ISP Name:

DigitalOcean, LLC

ISP Network:

64.23.128.0/17

Source	Description	Last Seen
Blocklist.de	Detected by fail2ban	01/06/2025 22:15:11 (UTC)
Blocklist.de	Attacks on SSH services	01/06/2025 22:15:29 (UTC)
FireHol	Host involved with attacks, spyware or viruses	01/07/2025 18:02:48 (UTC)
APNIC Community Honeynet Project	Involved in SSH brute-force attacks	01/06/2025 22:54:37 (UTC)
HoneyDB	Detected by network honeypots as engaging in suspicious activities, possibly indicative of scanning attempts, automated attacks, or other malicious behaviors	01/07/2025 00:00:00 (UTC)
BruteForceBlocker	Suspected SSH brute force attempts, based on excessive failed login patterns, and subsequently blocked by the pf firewall.	01/07/2025 16:40:09 (UTC)
IPsum	Associated with various online threats, including cyberattacks, malware distribution, phishing, and other malicious activities	01/08/2025 00:10:19 (UTC)
GreenSnow	Marked for involvement in attacks or bruteforce activities	01/08/2025 01:30:19 (UTC)