SecureFeed - Is 89.169.173.109 Malicious? Host Analysis

Results for 89.169.173.109

Classification:

malicious

IP:

89.169.173.109

EntityType:

Tags:

ssh net reg

Malicious Tags:

attack spy spyware virus malicious scanning malware phishing threat bruteforce

Country:

City:

Moscow (Tsentralnyy administrativnyy okrug)

State:

Moscow

Postal Code:

N/A

Lat/Lon:

55.7341°, 37.5887°

ISP Name:

Yandex.Cloud LLC

ISP Network:

89.169.128.0/18

Source	Description	Last Seen
Blocklist.de	Detected by fail2ban	01/24/2025 22:30:07 (UTC)
Blocklist.de	Attacks on SSH services	01/24/2025 22:30:27 (UTC)
FireHol	Host involved with attacks, spyware or viruses	01/25/2025 00:04:38 (UTC)
HoneyDB	Detected by network honeypots as engaging in suspicious activities, possibly indicative of scanning attempts, automated attacks, or other malicious behaviors	01/25/2025 00:00:00 (UTC)
IPsum	Associated with various online threats, including cyberattacks, malware distribution, phishing, and other malicious activities	01/26/2025 00:03:32 (UTC)
APNIC Community Honeynet Project	Involved in SSH brute-force attacks	01/25/2025 23:37:21 (UTC)
DroneBL	Flagged as Brute force attackers, due to data aggregated from multiple sources and observed malicious behavior patterns.	01/26/2025 01:56:13 (UTC)
GreenSnow	Marked for involvement in attacks or bruteforce activities	01/26/2025 02:30:23 (UTC)
Mike On Technology	Within range of suspecious subnet: Russia (Russian Federation Moscow Llc Multiscan)	(UTC)