SecureFeed - Is 78.159.131.121 Malicious? Host Analysis

Results for 78.159.131.121

Classification:

malicious

IP:

78.159.131.121

EntityType:

Tags:

N/A

Malicious Tags:

cybergate malicious attack malware phishing final ransomware ransomware scam spy spyware jrat njrat

Country:

City:

Istanbul

State:

Istanbul

Postal Code:

N/A

Lat/Lon:

41.0082°, 28.9784°

ISP Name:

Nese Mala trading as Moon Dc

ISP Network:

78.159.131.0/24

Source	Description	Last Seen	References
Abuse.ch ThreatFox	Deemed malicious due to: CyberGate	01/23/2025 17:32:32 (UTC)	geheim.no-ip.biz,muffin.no-ip.biz,try.no-ip.biz
Politie.nl	Malware detected with this host, including domains and IPs used for phishing attacks and malware distribution.	12/21/2023 01:28:32 (UTC)	azoz.no-ip.biz,ch.no-ip.biz,chocolate.no-ip.biz,example.no-ip.biz,ihateyou.no-ip.biz,liber.no-ip.biz,oussama.no-ip.biz,qwe123.no-ip.biz,sakura.no-ip.biz,salah.no-ip.biz,vendetta.no-ip.biz
oisd.nl	Malware detected with this host, including blocks ads, (mobile) app ads, phishing, malvertising, malware, spyware, ransomware, cryptoJacking, scam, etc.	08/15/2024 00:05:47 (UTC)	azoz.no-ip.biz,ch.no-ip.biz,chocolate.no-ip.biz,example.no-ip.biz,geheim.no-ip.biz,hacker2.no-ip.biz,ihateyou.no-ip.biz,komay.no-ip.biz,liber.no-ip.biz,muffin.no-ip.biz,naj.no-ip.biz,oussama.no-ip.biz,qwe123.no-ip.biz,sakura.no-ip.biz,salah.no-ip.biz,vendetta.no-ip.biz
Abuse.ch ThreatFox	Deemed malicious due to: NjRAT	12/17/2023 16:31:20 (UTC)	hacker2.no-ip.biz,komay.no-ip.biz,naj.no-ip.biz,oussama.no-ip.biz,vendetta.no-ip.biz
Hybrid-Analysis	Host has shown activity related to malware.	01/15/2024 04:15:02 (UTC)	koko.no-ip.biz,komay.no-ip.biz,oussama.no-ip.biz