SecureFeed - Is 92.38.145.145 Malicious? Host Analysis

Results for 92.38.145.145

Classification:

malicious

IP:

92.38.145.145

EntityType:

Tags:

N/A

Malicious Tags:

abuse final ransomware malware phishing ransomware scam spy spyware attack malicious

Country:

City:

Washington D.C.

State:

District of Columbia

Postal Code:

N/A

Lat/Lon:

38.9072°, -77.0369°

ISP Name:

G-Core Labs S.A.

ISP Network:

92.38.144.0/22

Source	Description	Last Seen	References
Project Honey Pot	Detected as a bad web host IP.	05/09/2024 00:00:00 (UTC)
FireHol	Host marked as abuser	10/30/2024 18:05:58 (UTC)
oisd.nl	Malware detected with this host, including blocks ads, (mobile) app ads, phishing, malvertising, malware, spyware, ransomware, cryptoJacking, scam, etc.	06/28/2026 00:05:12 (UTC)	china-wps.com,cteripre.com,uknjma.cn,verifyagejs.com,vodcdn.sanvit.net,zlon6.cc
Phishing Army	Involved in phishing activities	12/02/2025 00:07:07 (UTC)	uknjma.cn
Politie.nl	Malware detected with this host, including domains and IPs used for phishing attacks and malware distribution.	12/08/2023 02:25:20 (UTC)	cteripre.com,video-native.steepto.com
Hybrid-Analysis	Host has shown activity related to malware.	04/20/2026 13:45:13 (UTC)	brumolat.com,mf.b37mrtl.ru,prom.international.business,st-n.ads7-adnow.com,staging.international.business,static.cdns.space,viposidn.com
OpenPhish	Detected phishing site: {action}	05/04/2026 00:06:26 (UTC)	gemini.bgpr.eu.org
Abuse.ch ThreatFox	Deemed malicious due to: Unknown malware	07/14/2026 14:11:36 (UTC)	apk.whatsplus.online,static.cdns.space