SecureFeed - Is 91.108.245.249 Malicious? Host Analysis

Results for 91.108.245.249

Classification:

malicious

IP:

91.108.245.249

EntityType:

Tags:

ssh reg route router firewall

Malicious Tags:

attack spam unauthorized spy spyware virus bruteforce malicious route malware phishing threat

Country:

City:

Frankfurt am Main (Innenstadt I)

State:

Hesse

Postal Code:

N/A

Lat/Lon:

50.1154°, 8.6806°

ISP Name:

DpkgSoft International Limited

ISP Network:

91.108.244.0/22

Source	Description	Last Seen
Blocklist.de	Detected by fail2ban	01/04/2025 07:15:18 (UTC)
Blocklist.de	Attacks on SSH services	01/04/2025 07:15:36 (UTC)
UCEPROTECT	Suspicious activity reported by trusted systems that hit their spamtraps or that tried unauthorized relaying.	01/04/2025 09:01:25 (UTC)
FireHol	Host involved with attacks, spyware or viruses	01/06/2025 06:05:37 (UTC)
DroneBL	Flagged as Brute force attackers, due to data aggregated from multiple sources and observed malicious behavior patterns.	01/04/2025 14:51:11 (UTC)
Project Turris	this blocklist contains IP addresses that have attempted to access services on Turris routers or gain unauthorized access	01/05/2025 00:09:23 (UTC)
APNIC Community Honeynet Project	Involved in SSH brute-force attacks	01/04/2025 13:26:17 (UTC)
GreenSnow	Marked for involvement in attacks or bruteforce activities	01/05/2025 02:30:23 (UTC)
BruteForceBlocker	Suspected SSH brute force attempts, based on excessive failed login patterns, and subsequently blocked by the pf firewall.	01/06/2025 00:36:16 (UTC)
IPsum	Associated with various online threats, including cyberattacks, malware distribution, phishing, and other malicious activities	01/06/2025 00:08:32 (UTC)
Blocklist.net.ua	Malicous host due to: Brute force passwords using SSH on server S21	01/06/2025 03:24:02 (UTC)