SecureFeed - Is 85.234.110.78 Malicious? Host Analysis

Results for 85.234.110.78

Classification:

malicious

IP:

85.234.110.78

EntityType:

Tags:

ssh net route router

Malicious Tags:

attack malicious scanning spy spyware virus bruteforce malware phishing threat route unauthorized

Country:

City:

St Petersburg

State:

St.-Petersburg

Postal Code:

N/A

Lat/Lon:

59.9311°, 30.3609°

ISP Name:

TimeWeb Ltd.

ISP Network:

85.234.110.0/24

Source	Description	Last Seen
Blocklist.de	Detected by fail2ban	12/30/2024 20:15:24 (UTC)
Blocklist.de	Attacks on SSH services	12/30/2024 20:15:39 (UTC)
HoneyDB	Detected by network honeypots as engaging in suspicious activities, possibly indicative of scanning attempts, automated attacks, or other malicious behaviors	12/30/2024 00:00:00 (UTC)
FireHol	Host involved with attacks, spyware or viruses	01/01/2025 18:04:54 (UTC)
Blocklist.net.ua	Malicous host due to: Brute force passwords using SSH on server S1	12/30/2024 21:29:02 (UTC)
APNIC Community Honeynet Project	Involved in SSH brute-force attacks	12/30/2024 22:23:00 (UTC)
IPsum	Associated with various online threats, including cyberattacks, malware distribution, phishing, and other malicious activities	01/01/2025 00:03:15 (UTC)
Blocklist.net.ua	Malicous host due to: Brute force passwords using SSH on server S4	01/01/2025 14:53:02 (UTC)
Project Turris	this blocklist contains IP addresses that have attempted to access services on Turris routers or gain unauthorized access	01/02/2025 00:10:00 (UTC)